Last updated: July 21, 2026
This Privacy Policy explains how Win Elements LLC ("Win Elements," "we") handles information in connection with the SafePouch web application at mysafepouch.com (the "Service"). The Service is used by school staff; it is not directed to students or children, and students do not have accounts.
Staff account information: name, work email, school affiliation, role, and login records.
School Data entered by staff: student roster information (name, school-issued student ID), pouch inventory and assignment records, and student intervention records. Schools control what is entered. We ask Schools not to enter information beyond what the Service needs.
Technical data: standard server logs (IP address, timestamps, pages requested) used for security and troubleshooting, and a session cookie required for login. We do not use advertising cookies or third-party trackers.
We use information solely to provide, secure, support, and improve the Service for Schools. Student information in School Data is processed on behalf of and at the direction of the School, consistent with the School's responsibilities under applicable student-privacy law, including FERPA. Win Elements acts as a service provider to the School and uses education records only for the purposes of providing the Service.
We do not sell personal information. We do not use School Data for advertising or marketing. We do not build profiles of students. We do not permit third parties to access School Data except as needed to host and deliver the Service.
The Service is hosted on Amazon Web Services in the United States. Data is encrypted in transit (HTTPS) and between the application and its database. Access to School Data is restricted to authenticated staff of the relevant School; each school's data is isolated. Administrative access is protected by multi-factor authentication. Databases are backed up automatically.
Data is retained while a school uses the Service. Schools manage their own records day to day: staff and students can be deactivated at any time through the administrative interface (deactivated records are hidden from daily use but preserved, so history and reporting stay intact), and schools can export their records (CSV) at any time.
When a school ends its use of the Service, its account is deactivated and its data is retained in that dormant state. Upon a school's written request to hello@winelements.com, we permanently delete the school's data from the production system within 30 days, after which it ages out of backups on the backup retention schedule (currently 7 days). We honor deletion requests for student records as required by applicable law, including California's Student Online Personal Information Protection Act (SOPIPA).
If a School enables sign-in with Google, Google verifies the staff member's identity and shares their name and email address with us for authentication only. We receive no other Google account data.
We may update this policy from time to time; the date above reflects the latest revision. Questions: Win Elements LLC, 31500 Grape St., Suite 3-357, Lake Elsinore, CA 92532, hello@winelements.com.