SchoolCareBridge

SchoolCareBridge Privacy Policy

Effective October 5, 2026 · Version 2026-10-05.1

How SchoolCareBridge handles information on its website, forms, accounts, and communications.

1. Who this policy covers

SchoolCareBridge, a service of MH4Kidz, provides the services described on its website and in your specific service agreement. It may use technology operated by Plot Twist Co. Affiliated or participating organizations remain responsible for their own services and privacy obligations.

This policy applies to SchoolCareBridge's own services and its use of the platform. It does not combine the privacy practices of independent participating organizations or authorize them to contact you. A treating provider’s HIPAA notice governs its protected health information. Reading a policy does not authorize a medical-record disclosure or enroll you in SMS.

School records and clinical records

SchoolCareBridge supports coordination among schools, families and service organizations. A school’s education record and a provider’s clinical record may be subject to different rules; we do not label every student-related record as HIPAA-protected or treat school access as clinical-record access.

Information is processed for the contracted coordination service under the applicable school and practice instructions. Referral records are not available to donors, sponsors or other affiliates merely because they support MH4Kidz. Service information is not permission to contact a family for fundraising or independent advertising.

Sharing, retention, exports and deletion depend on the responsible organization, the record category, applicable law and the executed agreements. We route requests to the responsible school or practice and assist as required. A business associate agreement does not replace consent or other authority for an education-record disclosure.

2. Information processed

  • Information you provide, such as name, contact details, account details, service requests, forms, messages, representative information, signatures, payment-related information, and communication choices.
  • Information provided by an organization or an authorized person to administer services, accounts, employment, enrollment, or participation. Depending on the service, this may include sensitive information, education records, or health information.
  • Technical information such as IP address, browser and device information, sign-in and security events, timestamps, pages or features used, and diagnostic logs. Communication data includes message contents, delivery status, consent choices, withdrawals, and related audit evidence.
  • Information from integrations you or your organization authorize. The available integration, account permissions, and your choices determine which information is received.

3. How information is used

We use information to respond to requests; operate accounts and services; support scheduling, enrollment, communications, billing, and administration; verify identity and authority; maintain records; provide support; detect misuse; and satisfy legal obligations.

Our authorized team and service providers may process information needed for the service. Service-specific consents, confidentiality rules, and contracts continue to apply.

Optional promotional messages require the consent applicable to that communication. Agreement to reminders, support, or workforce communications does not authorize promotions.

4. Access and disclosure

Authorized staff, administrators, and service providers may access information needed for their work. Support requests and messages may be handled by an authorized team, rather than a single named person.

Vendors may process information for functions such as hosting, messaging, payment processing, security, or support. Appropriate contractual limits and a business associate agreement are required where HIPAA requires them. A vendor’s access does not authorize its independent marketing.

We may disclose information with your authorization, to provide the requested service, or as permitted or required by applicable law. We evaluate legal requests and applicable confidentiality restrictions. A referral, shared technology platform, or affiliation is not blanket permission to share confidential records with every organization.

We do not sell personal information or share mobile information or SMS opt-in data and consent with third parties or affiliates for their marketing or promotional purposes. Messaging vendors and carriers may process what is needed to deliver messages and honor opt-outs on behalf of the sender. Consent is not transferred between brands.

A change of ownership or service provider remains subject to privacy obligations and does not convert existing consent into permission for unrelated marketing.

5. Text messages and your choices

A program’s consent form identifies its sender, purpose, and choices. Choosing Yes or No may be required, but Yes is never required to obtain services or make a purchase. Where we use a Yes/No form, neither choice is preselected. You can decline every optional SMS purpose.

Providing a phone number, accepting website terms, signing an unrelated waiver, or acknowledging a privacy notice does not itself enroll you in recurring SMS. Marketing requires a separate affirmative choice. Reply STOP to opt out of the sending program, or HELP for assistance. Contact the organization to request broader withdrawal or another way to communicate.

Ordinary text messages can be visible on lock screens, shared devices, and carrier systems. Do not use them to send sensitive records. Stopping texts does not necessarily erase records we must retain, including evidence needed to honor your opt-out.

SMS terms

6. Browser storage and other services

Cookies, local storage, and similar technology support sign-in, preferences, security, and site operation. Technical logs help diagnose performance or reliability problems. Blocking browser storage may prevent features from working.

External links, maps, videos, payment services, and integrations have their own terms and privacy practices. Connecting to an external service may disclose technical information to it. We do not authorize advertising vendors to independently market using patient information or SMS consent.

7. Safeguards, retention, and automated tools

We use administrative, technical, and physical safeguards appropriate to the service and information. No system is completely secure. Protect your account and notify the organization of suspected unauthorized access.

Retention depends on the record, service, legal and professional obligations, contracts, and any legal hold. Closing an account or deleting a working copy does not guarantee immediate removal from every record, log, or backup. Requests are evaluated under the law that applies.

Automation or AI-assisted functions may support administrative or documentation workflows. Authorized people remain responsible for reviewing outputs and making professional decisions. This policy does not authorize session recording, unrestricted AI use, or training a general-purpose AI model on health information. Recording and other sensitive uses require the notices, consents, and safeguards applicable to them.

8. Privacy requests and representatives

Contact us to request access, correction, or deletion where applicable; withdraw optional consent; ask about retention; or raise a privacy concern. We may verify identity and authority. Some records must be retained, and some rights are exercised through the organization that controls the record. We explain a denial and any applicable appeal or review process.

Parents, guardians, and other representatives may act only within their authority. Confidential services for minors and different categories of health or education records may have different access rules. We do not assume a parent may access every record.

Where we process records on behalf of another organization, we assist or direct your request to that organization as appropriate. A complaint or valid privacy request does not waive other rights.

9. Policy updates

Revisions are posted with their effective date. Additional notice or consent will be provided when required. An update does not retroactively expand a prior messaging consent or authorization.

Questions, privacy requests, and help

SchoolCareBridge — MH4Kidz. For privacy requests and assistance: support@mh4kidz.org.

Please provide your contact information and the type of help you need. Do not include detailed medical records, passwords, or financial account information in an ordinary email or public inquiry. We can arrange an appropriate way to exchange sensitive information.

Email privacy questions

Contact SchoolCareBridge