Student Privacy Notice

Your school created or approved your cafeteria record. Cashless Cafeteria is a tool the school uses to help run meals, balances, lunch cards, and purchases.

You are not being asked to give parental consent. Reading or acknowledging this notice does not replace permission your school or parent may need to give. Do not create an account unless your school or household invited you.

The service may use your name, school student ID, grade, enrollment status, household link, and—when your school provides them—your email, date of birth, gender, photo, or school notes. It also keeps your lunch-card information, meal choices, items bought, price, time, serving line, purchase history, household balance activity, invitations, and account status.

For safety and reliable operation, the service records sign-in and authentication events and may collect your IP address, approximate location based on IP, device type, browser, operating system, session or security identifiers, timestamps, sanitized page paths, and error or performance information. Student pages are not used for product analytics.

Authorized school staff, linked parents or guardians and household members, and service providers needed to run and protect Cashless Cafeteria may see the information their job or relationship allows. Other students do not get a public profile or a social feed from this service.

The service providers are Supabase for accounts and records; Vercel for hosting and minimized technical operation; Resend for needed emails; Upstash for rate limits and short server caches; Sentry for minimized error reports; and Stripe when an adult uses payment functions.

We do not sell or rent your information. We do not use it for targeted or behavioral advertising, marketing to children, unrelated profiles or decisions, data brokerage, unrelated product development, or general-purpose or unrelated AI training. Providers may not use it for their own advertising, profiles, or unrelated AI training.

Ask a parent or guardian, a trusted school staff member, or CATHOLICORE LLC if you have a question or think something is wrong. A verified parent, guardian, school, or eligible student can ask to review, correct, export, delete, or stop further collection where available. Privacy email: info@catholicore.com. Do not email your password, payment information, or extra student records.

Your portal access can be blocked or closed when the school’s authorization ends, a parent withdraws consent that was required, your account is disabled, or the school relationship ends. Closing access does not always delete purchase, payment, security, authorization, or school records right away; those records follow the retention rules.

After a verified school termination or deletion instruction, review normally starts within 30 days and approved deletion or anonymization normally finishes within 90 days. Some financial, authorization, consent, notice, security, or legal evidence may need to remain for up to seven years.

Expired invitations are usually kept about 30 days; family access requests about 90 days; privacy export files seven days; archived notifications about 180 days; and sanitized payment-system summaries about 400 days. A legal hold or shorter school agreement can change the applicable time.

Do not share your password, invitation link, or lunch card. Sign out on shared devices. Tell a parent, guardian, or trusted school staff member if something looks wrong or if someone else used your account or card.

CATHOLICORE LLC operates Cashless Cafeteria. Mail: 51 Orange St, Stamford, Connecticut, USA. Privacy email: info@catholicore.com. Telephone: +1 475-300-6334.