This School Data Agreement (the "Agreement") is between School legal name, at School address (the "School"), and Between, operated by Jack Hazan (the "Provider"). It takes effect on effective date and covers the School's use of Between for student check-ins.
The School decides why and how student information is used and is the party responsible for it. The Provider processes that information only on the School's behalf and only to run the service described below. The Provider does not use student information for its own purposes and does not sell it.
Between lets a student send a short voice or text check-in between classes or meetings. Where a student turns it on, Between produces a short summary and simple mood and theme trends that the assigned staff member can read before the next class or meeting. It is a between-session check-in tool. It is not a health record, an assessment, or a crisis service.
Many students are minors. The School confirms that, before inviting a student who is under 18, it has obtained any parental or guardian consent required for that student to use Between. At sign-up, each person also confirms in the product that they are 18 or older, or that a parent or guardian has agreed to their use. AI analysis is off by default and runs only after the student gives explicit, opt-in consent, which they can withdraw at any time.
The Provider uses a small number of service providers to run Between, and student information — including check-in content — may be stored and processed in the United States and other countries where these providers operate:
Because this can involve transferring personal information outside Quebec, the parties handle it with Quebec's Law 25 in mind. The Provider will keep the School informed of the sub-processors it relies on.
The Provider protects information with, at minimum: encryption in transit (HTTPS with HSTS), hashed staff and student passwords, optional multi-factor authentication for staff, per-account access scoping, expiring signed links for voice files, and rate limiting on sign-in and sign-up. These measures may improve over time but will not be materially weakened while this Agreement is in effect.
Student data is kept only while it is needed to provide the service. A staff member can delete a student, which removes that student's check-ins, summaries, voice notes, and alerts. On request from the School, or when this Agreement ends, the Provider will delete or return the School's student data within a reasonable period, except where it must keep something to meet a legal obligation.
If the Provider becomes aware of a security incident affecting the School's student data, it will notify the School without undue delay, share what it knows, and cooperate on the School's response.
Between is not a crisis or emergency service and does not monitor check-ins in real time. Crisis resources are shown to students directly if risk language is detected, but the School remains responsible for its own duty-of-care and safeguarding procedures.
This Agreement runs while the School uses Between and can be ended by either party in writing. Material changes to this Agreement will be shared with the School in advance. This Agreement is governed by the laws of the Province of Quebec and the federal laws of Canada that apply there.
Questions about this Agreement or about student data can be sent to jojo11haz@gmail.com.