MyCabinet, Inc. School Health – PRIVACY POLICY

Effective Date: 6/1/2024
Last Updated: 11/6/2025

1. Introduction

MyCabinet, Inc. (“MyCabinet,” “we,” “us,” or “our”) is committed to protecting the privacy and security of personal information, including sensitive student health data.

This Privacy Policy (“Policy”) describes how we collect, use, disclose, and protect personal information through the MyCabinet School Health Platform, which includes both the School Health Nurse Portal and the MyCabinet Parent App (collectively, the “Platform”). The Platform supports communication, medication tracking, clinic visits, and health record management between schools, school staff, parents/guardians, and authorized healthcare professionals.

2. Scope of This Privacy Policy

This Policy applies to all personal information collected through the Platform, including our web-based applications, the Parent App for smartphones and tablets, and any associated services or integrations with student information systems (SIS).

The use of information collected through the Platform is limited to providing the services for which our school, district, or organizational customers (“Customers”) have engaged MyCabinet.

This Policy does not apply to:

  • The practices of companies we do not own or control.
  • Third-party websites or applications linked within the Platform (each has its own privacy policy).
  • Information collected directly by schools outside of the Platform.

3. Categories of Personal Information We Collect

The specific information collected depends on your relationship to the Platform (school staff, parent/guardian, or student) and the services your school or district enables.

A. From Schools and School Staff (Nurses, Administrators, Authorized Personnel):

  • Student identifiers including but not limited to: name, ID, DOB, grade, gender, homeroom teacher.
  • Contact details including but not limited to: parents/guardians; emergency contacts
  • Health and medical information including but not limited to: conditions, allergies, immunizations, medications, dosages, visit notes, screening results, recheck visits, outreach logs.
  • Health plans (i.e. IEP; 504; EAP; IHCP); Health concerns and diagnosis; Medications Physician forms; Consent documentation; etc
  • Visit logs, medication administration records, and task-list entries
  • Usernames, passwords, and role-based permissions
  • Audit and activity logs, including historical data from years prior to the adoption of the MyCabinet School Health platform at the respective school / district

B. From Parents and Guardians (via the Parent App), including but not limited to:

  • Parent/guardian name, email address, and phone number
  • Account credentials (username, password, authentication token)
  • Linked student profiles and school affiliations
  • Communication preferences and message history with the school nurse or staff, including status such as read receipts accessible and visible to the school nurses and administration based on parent app activity.
  • Device identifiers, push-notification tokens, and mobile usage data (for functionality only, not for advertising)
  • Support requests or feedback submitted through the app or help portal

C. From Students (Indirectly through Schools or Parents):

  • Demographics, health, and medication information entered by authorized staff or guardians
  • Documentation uploaded on behalf of students (e.g., doctor’s notes, medication forms)
  • No student under age 18 may independently create an account or directly submit information.

D. From Website Visitors:

  • Names, emails, and contact information for those requesting product or service information.

4. How We Use Personal Information

We use personal information only for purposes consistent with the services requested by our Customers or as permitted by law, including to:

  • Provide secure health record and medication management services to schools, parents, and authorized users.
  • Facilitate communication between parents/guardians, school nurses, school staff, and healthcare providers.
  • Support compliance with FERPA, HIPAA, and applicable state health or education regulations.
  • Maintain and improve the functionality, security, and user experience of the Platform.
  • Analyze aggregated or de-identified data to improve performance and outcomes.
  • Respond to support requests, technical issues, or legal requirements.

We do not use student health data for marketing or advertising purposes.


5. Data Sharing and Disclosure

MyCabinet does not sell personal information. We disclose data only as necessary to provide our services or as required by law:

  • With the School or District (Customer): Authorized school personnel, including nurses and administrators, have access to student health data to fulfill school-health duties.
  • With Parents and Guardians: Authorized access to their child’s health information via the Parent App.
  • With Service Providers (Sub-Processors): Vendors providing secure hosting, data storage, analytics, or support services under strict confidentiality and data-protection agreements.
  • With Emergency Medical Professionals: When required to protect student health and safety.
  • For Legal Reasons: To comply with laws, court orders, subpoenas, or to protect the rights, safety, and security of users and others.
  • With Consent: When a parent/guardian or school expressly authorizes data sharing.

6. Student and Parent Data Privacy Commitment

MyCabinet operates as a trusted technology partner to schools and educational organizations, acting as a school official under FERPA and, where applicable, as a business associate under HIPAA.

We adhere to:

  • FERPA — safeguarding student education records and limiting disclosure without consent.
  • HIPAA — for covered entities or business associate relationships involving protected health information (PHI).
  • State student-data privacy laws

All data collected through the Platform remains the property of the Customer (the school or district). MyCabinet processes this data solely under the school’s direction.

7. Data Security Measures

We maintain administrative, physical, and technical safeguards designed to protect personal information against unauthorized access, use, or disclosure, including:

  • Encryption of data in transit and at rest.
  • Role-based access controls and secure user authentication.
  • Network firewalls, intrusion detection, and regular penetration testing.
  • Comprehensive employee training on privacy and security best practices.
  • Logging and auditing of all data access and system activity.

If we become aware of any unauthorized access or data breach, MyCabinet will promptly notify the affected Customer and, when required, parents/guardians and applicable regulators in accordance with law.

8. Data Retention and Deletion

We retain personal information only as long as necessary to:

  • Provide the Platform to the Customer;
  • Comply with contractual, legal, or regulatory obligations; or
  • Maintain legitimate business continuity (e.g., backups, audit logs).

Upon termination of a Customer agreement or at the direction of the School, MyCabinet will delete or de-identify personal data within a reasonable period, unless retention is legally required.

Parents seeking deletion of their child’s information should contact their school directly, which can then request deletion through MyCabinet.

9. Access and Control of Personal Information

  • Schools and Districts manage user roles and permissions for staff, parents, and students.
  • Parents and Guardians may access and/or update or submit their child’s health records through the Parent App (as authorized by the school).
  • Requests for Access, Correction, or Deletion should be directed to the school’s administration; MyCabinet will act in accordance with the school’s verified instructions.


10. Cookies and Tracking Technologies

The MyCabinet website and Parent App may use limited cookies or device identifiers to support core functionality, authentication, and analytics. We do not use tracking technologies for advertising or behavioral profiling. Users can adjust browser or device settings to restrict cookies, though this may affect functionality.

11. Children’s Privacy

The Platform supports the management of health data for students under 18 through their schools and parents. We do not knowingly collect information directly from children. Any student-related information is entered or managed by authorized school personnel or a parent/guardian. If you believe we have collected data directly from a child without authorization, please contact us immediately.

12. International Transfers

Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal information, to the United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

We may transfer our databases containing your Personal Information in connection with the transfer or sale of all (or substantially all) of our business assets, or in the event of a merger, consolidation or similar transaction. In such event, we will use reasonable efforts to try to require that the transferee use information provided through the Services in a manner that is consistent with this Privacy Policy.

13. State and Consumer Privacy Rights

Depending on your state of residence, you may have additional rights (e.g., under the California Consumer Privacy Act (CCPA) or similar laws) to access, correct, delete, or restrict certain uses of your personal information.
 MyCabinet will honor such rights when applicable and in coordination with the Customer (school or district).

14-A. Language, Translation, and Localization

To serve diverse school communities, portions of the MyCabinet Parent App and related communications may be provided in multiple languages.

Translations are offered to improve accessibility and understanding; however, in the event of any inconsistency between a translated version and the English version of this Policy or other Platform content, the English version shall control.

MyCabinet may use secure third-party translation tools or services to support localized text display. These tools process only the minimum data necessary to perform the translation function and are bound by confidentiality and data-protection obligations consistent with this Policy.

15. Changes to This Privacy Policy

We may update this Policy periodically. Significant changes will be communicated through in-app notifications or email prior to taking effect.

The “Last Updated” date above will reflect the most recent version. Continued use of the Platform constitutes acceptance of the updated Policy.

16. Contact Information

If you have questions, concerns, or requests regarding this Policy, please contact:

19790 W. Dixie Hwy. Suite 302
Aventura, FL 33180
support@mycabinet.com