Privacy Policy

CAS Connect is a platform for IB Diploma Career, Activity and Service (CAS) programmes, operated for international schools. Questions about this policy can be sent to support@casconnect.app.

• Account data: name, email address, school, and role (student, coordinator or platform admin). If a school enables Google sign-in, we receive the name and email address associated with the Google account used to sign in.
• CAS work: experience titles and descriptions, strand, hours, the CAS stage reached, learning outcomes claimed, ATL and SDG tags, ethics-check confirmations, and the self-assessments a student writes.
• School data: school name, city, country, join code and email domain, plus any showcase content a school chooses to publish.
• Technical data: sign-in events and error reports needed to keep the service running.

• A student's experiences are private by default — visible to that student and to the coordinators and admin of their own school.
• A student may choose to share an experience with classmates at their own school. This is off unless the student turns it on.
• Students cannot connect with, or see, students at another school. The only cross-school view is the public showcase: school-level summaries that the school itself publishes.
• Self-assessments are visible only to the student and to staff of their own school. They are never shown to peers, at home or at another school.
• Coordinators are verified by platform-admin approval before they gain school access; students are added by a school join code, an invitation, or a matching school email domain.

To run the CAS workflow (tracking, approvals, interview preparation, audit exports), to send account and school-access messages the user asked for, and to keep the platform secure. We do not sell personal data, and we do not use student reflections for advertising or for training models.

Accounts, school records and CAS work are stored in a managed European-hosted database with access controlled by per-row security rules. Sign-in with Google is handled by Google; we never see Google passwords.

While a school account is active. If a school leaves, its account is paused and the data is retained for 90 days so it can be restored, then permanently deleted unless the school asks for an export first. A student's record can be removed on request at any time.

Students, coordinators and schools can access, correct, export or delete their data. Under-18 students act through a parent, guardian or their school. To make a request, contact support@casconnect.app — a school administrator can also delete a student's record directly from the dashboard.

We use only the storage needed to keep a user signed in on their own device and to remember interface preferences. There is no advertising or cross-site tracking.

Material changes are announced in the product and on this page at least 14 days before they take effect for a school that is under a paid term.