Privacy Policy

WBL Central is used by schools and districts ("schools"), their teachers and administrators, and their students. Schools may belong to a district, whose administrators can manage the district's schools. Accounts are created by a teacher or administrator, or with a private code: students use a class code from their teacher, and teachers use a district code. Every code sign-up must be approved by a teacher or administrator. There is no open public sign-up.

We handle student information on behalf of the school that uses WBL Central and only to provide the service to that school. The school decides which students use WBL Central and remains in control of its students' records.

Many schools and districts sign a student data privacy agreement with us. Where that agreement gives students more protection than this policy, or conflicts with it, the agreement controls.

• Account details: name, and either a school email address or a username chosen at sign-up, plus a password. Passwords are stored by our authentication provider in a protected, hashed form; we cannot see them. Students may sign up with a username so they don't need an email address.
• Program details entered by the school: grade, class or period, internship name, internship site address, required hours, and weekly schedule.
• Shift records: clock-in and clock-out times, whether the location check passed, and any corrections a teacher makes, including the reason a shift was voided.
• Location at clock-in and clock-out: when a student taps Clock in or Clock out, their device shares its location once, with their permission, so WBL Central can confirm they are at their internship site. These coordinates may be saved with that shift record. WBL Central does not track location at any other time and does not run in the background.
• Learning logs and classroom hours: written reflections a student submits about their internship, their teacher's comments, and classroom hours the teacher records.
• Change history: when a shift is created, edited, approved, or voided, we record who made the change and when, so schools can audit hour records.
• Supervisor sign-off: if a teacher requires it, the supervisor's typed name and drawn signature are saved with the shift.
• Basic technical logs: our hosting provider records standard request information, such as IP address and browser type, to keep the service secure and working.

We do not ask for or collect Social Security numbers, home addresses, health information, or payment information.

We use information only to run WBL Central for the school: signing people in, verifying and totaling internship hours, showing teachers and administrators their students' records, producing exports the school requests, keeping the service secure, and responding to support requests.

We do not sell student or teacher information. We do not use it for advertising, including targeted advertising. We do not build profiles of students for any purpose other than the school's program.

• Students can see their own schedule, shifts, and hour totals.
• Teachers can see records for the students they manage.
• School administrators can see records for their own school or organization.
• We access records only when needed to operate, secure, or support the service, or when the school asks us to.

We may also disclose information if required by law, such as a valid court order.

We rely on a small number of providers to run WBL Central:

• Supabase stores the database, login system, and signature images.
• Vercel hosts the website.
• Mapbox turns an internship site's street address into map coordinates when a teacher sets up the site. Only the address is sent, never student information.

If a school uses "Sign in with Google," Google confirms the person's identity and shares their name and email address with us. We do not receive their Google password or other Google data.

These providers may process information only to deliver their service to us.

WBL Central does not use advertising cookies, analytics trackers, or third-party embeds such as social media widgets or video players.

When you sign in, your browser stores a login token on your device so you stay signed in. This is strictly necessary for the service to work, is never used to track you, and is removed when you sign out. Because we use no optional cookies or trackers, there is nothing to opt in to and no cookie banner is shown.

Records are kept while the school uses WBL Central so that hour totals and past semesters stay accurate. When a student is archived, their records are kept for the school's records rather than deleted. A school can ask us to delete a student's records, or all of its records, and we will delete them unless the law requires us to keep them.

All traffic to WBL Central is encrypted with HTTPS, and access to records is controlled by account role. No system is perfectly secure, but we work to protect information and will notify affected schools if we learn of a breach involving their data.

Students and parents or guardians who want to review, correct, or delete a student's records should contact the student's school, which controls those records. We will help the school respond. Students can decline location access, but they will not be able to clock in without it; their teacher can add hours manually instead.

WBL Central is designed for high school work-based learning programs. If a school uses it with students under 13, the school is responsible for providing any required notice and obtaining any required consent before creating their accounts.

If we change this policy, we will update the date at the top of this page. For significant changes, we will notify schools before the change takes effect.

Questions about this policy? contact your school's WBL teacher or administrator, who can reach us directly.