Who we are
School Center is run by the Colorado High School Activities Association (CHSAA) for its member schools, their staff and coaches, school districts, game officials, and the people CHSAA and member schools issue courtesy passes to. Questions about this policy go to the CHSAA staff listed at chsaanow.com/about/staff, by phone to (303) 344-5050, or by mail to 14855 E 2nd Ave, Aurora, CO 80011.
This policy covers the app and School Center. The public news site at chsaanow.com has its own policy at chsaanow.com/privacy.
What the app collects and why
Your account. Your name, email address, the school or district you work for and the roles you hold there. School Center already holds this for staff and coaches; the app signs you in to the same account with your email and password, or with Google Sign-In, which gives us your Google account email and name and nothing else.
Your device. A random identifier the app generates on first launch, the platform (iOS or Android) and app version, and, if you allow notifications, a push token so CHSAA and your athletic director can send you Inbox messages. Signing out removes the push token. None of this identifies your phone to anyone but us.
Your courtesy pass. If you hold a CHSAA or school courtesy pass, the app shows it: your name, photo, school or organization, pass type and school year. The pass and its photo are stored encrypted on your phone so it works with no signal.
Gate scans. When a ticket-taker scans a pass, we record which pass was scanned, when, at which event if the gate chose one, the scanning device or the scanner's network address and browser, and the result. Schools and CHSAA use this to see pass use at their events and to spot a pass being shared. If the ticket-taker marks that a guest came in with you, that is recorded too.
The camera. The app uses the camera only to read QR codes at a gate. It does not take, store or send photographs or video.
Staff directory and Inbox. Athletic directors, district staff and CHSAA staff can view member-school contact information (work email and phone numbers) and send and receive messages. The directory and your messages are cached encrypted on your phone so they work without signal, and are removed when you sign out. Messages sent through School Center are public records under the Colorado Open Records Act and may be subject to disclosure.
What the app does not do
- It does not collect your location.
- It does not use advertising or third-party analytics trackers.
- It does not read your contacts, photos or other apps.
- It does not sell or rent personal information to anyone.
Who else handles the data
Service providers that run parts of the app for us, under contract and only for that purpose: Expo (app updates and push notification delivery), Apple and Google (push notification delivery on their platforms, and Google Sign-In if you use it), and DigitalOcean (hosting and file storage). Member schools and CHSAA staff see the information their roles allow, such as their own school's passes and gate scans.
How long we keep it
Your account lasts as long as your role at a member school or with CHSAA. A signed-in phone stays signed in for up to 60 days of inactivity, then must sign in again. Gate scan records and Inbox messages are kept as part of CHSAA's event and communication records. Cached data on your phone is removed when you sign out or delete the app.
Security
Data travels over encrypted connections only. On your phone, the app stores what it caches in the operating system's encrypted storage. Passwords are stored only as one-way hashes. The pass QR code changes every day and cannot be produced without the pass.
Children
The app is for school and district staff, coaches, officials and adult pass holders. It is not directed at children under 13, and we do not knowingly collect information from them.
Your choices and rights
- Turn notifications off at any time in your phone's settings.
- Sign out to remove the pass, directory and messages cached on the phone.
- Ask CHSAA to see, correct or delete personal information we hold about you by contacting CHSAA staff through chsaanow.com/about/staff. Some records, such as gate scan logs and messages that are public records, may be retained where the law requires.
Changes
When this policy changes, the effective date above changes with it and the current version is always at this address.