Mosyle@Home Privacy Policy

Effective Date: June 18, 2026

Mosyle Corporation (“WE” or “US”) the company that owns and operates the Mosyle@Home https://myschool.mosyle.com/mosyleathome/ Website (“SITE”) and the Mosyle@Home mobile application (“APP”), on which we provide a service (“SERVICES”) that enable parents and legal guardians to view or use certain limited home-management features for School-owned student devices that are managed by a School through Mosyle OneK12.Mosyle@Home is not a standalone consumer device management service. Mosyle@Home is available exclusively when a School, in its sole discretion, enables Mosyle@Home for eligible legal guardians of students using School-owned devices managed through Mosyle OneK12. The School may enable, disable, restrict, configure, or modify access to Mosyle@Home at any time.

BY USING THE SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTAND THIS PRIVACY POLICY.

For the purposes of this Policy:

• “USER or ”“Users” means parents or legal guardians who create, administer, or manage a Mosyle@Home Account made available by a School.
• “Monitored User” or “Monitored Users” means students whose supported School- owned devices are enrolled, configured, monitored, or managed by a School through Mosyle OneK12 and for whom the School has elected, in its sole discretion, to make Mosyle@Home available to an authorized User.
• “School” means the school, school district, and other educational institutions as defined in the Mosyle Terms of Service (https://school.mosyle.com/legal/terms) that owns, controls, issues, configures, or manages the applicable School-owned device through Mosyle OneK12.
• “School-owned device” means a supported device owned, controlled, issued, configured, or managed by a School through Mosyle OneK12.

The data controller for the Personal Data you provide or that we collect pursuant to this Privacy Policy is Mosyle Corporation at P.O. Box 2317, Winter Park, FL 32790, USA.

The School is solely responsible for the School-owned device, including device ownership, assignment, enrollment, supervision, configuration, restrictions, applications, content filters, security settings, network settings, operating system settings, student accounts, and all other device-management decisions. If you have questions, requests, or disputes regarding Mosyle@Home, a School-owned device, device restrictions, device configuration, access to Mosyle@Home, student accounts, School policies, or the School’s use of Mosyle OneK12, you should contact the School directly.

1. INFORMATION WE COLLECT FOR MOSYLE@HOME

We collect the following types of information:

Personal Data and Home Data:

“Personal Data” is any information relating to a User that identifies or can be used to identify that User, either separately or in combination with other readily available data that is received by us. As a User, you voluntarily provide us this information when you initially establish an Account on the Service. As of the effective date of this Privacy Policy, to establish an Account, we ask you to provide all the information necessary to complete the sign-up form available on https://myschool.mosyle.com/mosyleathome/, including a nickname, and email address. Once the Account is established, you (as User) will have the power to freely add any Monitored Users, and Monitored Users’ Devices you intend to monitor through the Services providing information such as nicknames, profile names, and a family name (the “Home Data”).

Home Data does not mean School’s Managed Device Information collected through Mosyle OneK12 at the direction of the School, although School’s Managed Device Information may be displayed, used, or made available through Mosyle@Home to the extent enabled and configured by the School.

Your ability to create or access an Account may depend on authorization, invitation, configuration, or eligibility determined by the School. Mosyle@Home is available only for eligible Users and Monitored Users when enabled by the applicable School through Mosyle OneK12.

It is not necessary to provide a nickname (either for you, family or Monitored User) that corresponds to a real name. We strongly encourage you to provide nicknames in a way that allows only you to identify each Monitored User.

When Users log on to the Account, we may record your geo-location, IP address and/or unique mobile device identifier and may tie it to your specific Account.

If a User provides us feedback or contacts Mosyle, we will collect the data included in that communication.

We do not knowingly collect Personal Data through the sign-up form on our Site from anyone under age 16. If you are under 16, please do not leave your contact information on our Site. If you are a parent or guardian of a child under 16 years old and you learn that your child has left Personal Data on our Site, please contact us at legal@mosyle.com.

Except as described in this Privacy Policy, we do not request or knowingly receive Personal Data directly from Monitored Users or anyone else who is younger than the age of majority in their place of residence.

Usage Information:

When a User uses the Services, we may automatically record certain information including IP address or other device address or ID, web browser and/or device type, the actions performed on the Services, and the dates and times of the access or use of the Services. We may also collect information regarding the User’s interaction with email messages, such as whether the User opens, clicks on, or forwards a message.

This information is gathered from Users. We do not email Monitored Users.

School’s Managed Device Information:

“School’s Managed Device Information” consists of information collected about School-owned devices used by the School to remotely deploy, manage, and protect supported mobile devices as detailed in the Mosyle OneK12 Privacy Policy at https://school.mosyle.com/legal/privacy.

Mosyle@Home does not independently collect additional managed-device information from School-owned devices beyond the information collected through Mosyle OneK12 at the direction of the School.

The School determines which School-owned devices are managed, which students are assigned School-owned devices, which device-management features are enabled, which restrictions or configurations apply, whether Mosyle@Home is enabled, which Users may access Mosyle@Home, and what information or functionality is made available to Users through Mosyle@Home.

School’s Managed Device Information may be displayed, used, or made available through Mosyle@Home solely for the purpose of providing School-enabled Mosyle@Home functionality to authorized Users. The categories of School’s Managed Device Information available through Mosyle@Home may vary depending on the School’s Mosyle OneK12 configuration, the School’s policies, the device type, operating system, permissions, platform rules, and technical availability.

Because School’s Managed Device Information is collected through Mosyle OneK12 at the direction of the School, questions, requests, or disputes regarding School-owned devices, device configuration, device restrictions, device management, student accounts, device assignment, Mosyle@Home access, or the School’s use of School’s Managed Device Information should be directed to the School.

Cookies:

In order to personalize the Service, we use cookies, or similar technologies like single-pixel gifs and web beacons, to record log data. We use both session-based and persistent cookies. Session- based cookies last only while your browser is open and are automatically deleted when you close your browser. Persistent cookies last until you delete them or until they expire. They are unique and allow us to do analytics (as described below) and customization. You can refuse to use cookies by turning them off in your browser. You do not need to have cookies turned on to use most of the Services. You may, however, find that some areas on the Services are slower or do not function at all if cookies are disabled. To learn more about cookies generally, visit http://www.allaboutcookies.org.

Analytics:

We use Google Analytics to measure and evaluate access to and traffic on the public area of the Site, and create User navigation reports for our Site administrators. Google operates independently from us and has its own privacy policy, which we strongly suggest you review. Google may use the information collected through Google Analytics to evaluate Users' and another visitor’s activity on our Site. For more information, see Google Analytics Privacy and Data Sharing.

We take measures to protect the technical information collected by our use of Google Analytics. The data collected will only be used on a need to know basis to resolve technical issues, administer the Site and identify visitor preferences; but in this case, the data will be in non- identifiable form. We do not use any of this information to identify Visitors or Users.

You may opt out from the collection of navigation information about your visit to the Site by Google Analytics by using the Google Analytics Opt-out feature.

2. HOW WE USE PERSONAL DATA AND HOME DATA

We use the Personal Data we collect as described above:

To customize and analyze the Services.
To enhance your experience of Services.
To verify your eligibility for the Services.
To contact you regarding your Account.
To prevent, detect and fight fraud or other illegal or unauthorized activities.

• Address ongoing or alleged fraud on or though the Services and our related products and services;
• Analyze data to better understand and design countermeasures against fraud;
• Retain data related to fraudulent activities to prevent recurrence.

To ensure legal compliance.

• Comply with legal requirements;
• Assist law enforcement;
• Enforce or exercise our rights.

To process your information as described in this Privacy Policy, we rely on the following legal bases:

• Legitimate interests: We may use your information where we have legitimate interests to do so. For example, we analyze our Users’ behavior to improve the Services, to prevent and detect fraud and misuse, and to market new products and services that we think will interest you;
• Consent: From time to time, we may ask for your consent to use your information. You may withdraw your consent at any time by contacting us at legal@mosyle.com.

You may stop receiving promotional emails from us by clicking the unsubscribe link at the bottom of the promotional email. Communication related to important changes on Services are not considered promotional email.

3. HOW WE SHARE PERSONAL DATA AND HOME DATA

We will not sell, rent, or share Personal Data or Home Data with third parties except in the following ways:

• We use third-party operational providers to help us operate and improve the Services. These third parties assist us with data hosting and maintenance, analytics, customer care, marketing, payment processing, debt collection and security operations. All of our service providers must adhere to confidentiality obligations that are consistent with this Privacy Policy.
• Applicable law may require us and our service providers to disclose your information if: (i) reasonably necessary to comply with a legal process, such as a court order, subpoena or search warrant, government investigation or other legal requirements; or (ii) necessary for the prevention or detection of crime (subject in each case to applicable law).
• We may also share information: (i) if disclosure would mitigate our liability in an actual or threatened lawsuit; (ii) as necessary to protect our legal rights and legal rights of our users, business partners or other interested parties; (iii) to enforce our agreements with you; and (iv) to investigate, prevent, or take other action regarding illegal activity, suspected fraud or other wrongdoing.
• We may transfer your information if we are involved, whether in whole or in part, in a merger, sale, acquisition, divestiture, restructuring, reorganization, dissolution, bankruptcy or other change of ownership or control.
• We may ask for your consent to share your information with third parties. When we do, we will make clear why we want to share the information.

If you have questions, concerns, requests, complaints, or disputes regarding Mosyle@Home, a School-owned device, School policies, device restrictions, device configuration, access, student accounts, or School device-management decisions, you should contact the School directly.

4. HOW WE USE AND SHARE USAGE INFORMATION AND SCHOOL’S MANAGED DEVICE INFORMATION

We use the Usage Information and School’s Managed Device for the following purposes: (i) to provide and operate the Services; (ii) to make School-enabled Mosyle@Home functionality available to authorized Users; (iii) to authenticate, secure, support, administer, and improve Mosyle@Home; (iv) to diagnose or fix technology problems reported by Users, Schools, or our employees; (v) to display or make available School-enabled information, settings, restrictions, device status, reports, or functionality to Users through Mosyle@Home, only to the extent enabled and configured by the School; and (vi) to support security, fraud prevention, product improvement, and Service administration.

Mosyle@Home does not independently collect additional managed-device information from School-owned devices beyond the information collected through Mosyle OneK12 at the direction of the School. School’s Managed Device Information is used in Mosyle@Home only to provide School-enabled Mosyle@Home functionality to authorized Users and to support the operation, security, maintenance, and improvement of the Services.

We may use Usage Information and School’s Managed Device Information in aggregated or de- identified form to monitor Service performance, diagnose technical issues, improve the Services, support security, and create internal reports or analytics, provided that such use does not identify you or any Monitored User.

If you have questions, requests, or disputes regarding School’s Managed Device Information, School-owned devices, device configuration, restrictions, student accounts, School policies, Mosyle@Home access, or the School’s use of Mosyle OneK12, you should contact the School directly.

5. HOW WE PROTECT YOUR INFORMATION

We take the security of your Personal Data and Home Data seriously and use appropriate technical, administrative, and physical measures designed to protect your Personal Data against unauthorized or unlawful processing and against accidental loss, destruction or damage. This includes, for example, encryption, firewalls, password protection and other access and authentication controls. We also limit access to Personal Data and Home Data to employees who reasonably need access to it to provide products or services to you, or in order to do their jobs. However, because no security system can be 100% effective, we cannot completely guarantee the security of any information we may have collected from or about you.

6. HOW LONG WE RETAIN PERSONAL DATA AND HOME DATA

• We retain Personal Data and for as long as your Account is active.
• We retain Home Data associated with a Monitored User or School-owned device until the School-owned device is removed, the School removes the association, the School disables Mosyle@Home, your Account is deleted, or retention is no longer necessary for the purposes described in this Privacy Policy.
• The School may control whether Mosyle@Home remains enabled, whether a School- owned device remains associated with your Account, and whether your access remains active.

Once the Personal Data and Home Data are removed from the active Account or when the Account is deleted, it is required to Age out of the Backups which are stored for fifteen (15) days.

As an exception, we may retain Personal and Home Data for periods that are longer than the periods described on this Section 6 based on the following reasons:

• Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them);
• Whether retention is advisable considering our legal position (such as, for statutes of limitations, litigation or regulatory investigations).

7. YOUR CHOICES ABOUT YOUR INFORMATION

We respect your privacy rights and provide you with reasonable access to the Personal Data that you may have provided through your use of the Services. As a User you may update, correct, or delete certain Personal Data, Account information, profile information, or change your password at any time by logging in to your account. If your request relates to a School-owned device, Monitored User, device restriction, device configuration, School policy, student account, School- device association, or Mosyle@Home availability, you should contact the School directly.

Please note that while any changes you make will be reflected in active databases instantly or within a reasonable period of time, we may retain all information you submit for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so.

You may decline to provide Personal Data, in which case we will not be able to establish your Account or provide our Services to you.

At any time, you may object to the processing of your Personal Data, on legitimate grounds, except if otherwise permitted by applicable law. If you believe your right to privacy granted by applicable data protection laws has been infringed upon, please contact us at legal@mosyle.com.

You also have a right to lodge a complaint with data protection authorities.

8. CROSS BORDER DATA TRANSFERS

Sharing of information sometimes involves cross-border data transfers to or from the United States of America and other jurisdictions. For example, when the Services are available to users in the European Economic Area (“EEA”), Personal Data is transferred to the United States. We use the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) and standard contractual clauses approved by the European Commission to validate transfers of EEA residents’ personal information from the EEA to other countries. Standard contractual clauses are commitments between companies transferring personal information of EEA residents to protect the privacy and security of the transferred personal information. Please see Section 9 for information about our participation in the EU-US and Swiss-US EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF).

9. OUR PARTICIPATION IN THE DATA PRIVACY FRAMEWORK

Mosyle complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Mosyle has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Mosyle has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/. With respect to EU, UK, or Swiss Personal Data received or transferred pursuant to the Data Privacy Frameworks, Mosyle is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission.

Definitions. In this section, the following terms have the following meanings:
“EU, UK, or Swiss Personal Data” means any information relating to a EU, UK, or Swiss User that identifies or can be used to identify that EU, UK, or Swiss User, either separately or in combination with other readily available data that is received by Mosyle in the U.S. from the EEA, UK, or Switzerland in connection with the Services, including information provided offline, including Sensitive Personal Data.
“Sensitive Personal Data” means EU, UK, or Swiss Personal Data regarding an individual's racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic or biometric data that uniquely identifies an individual, physical or mental health, or sexual life or orientation.
“EU, UK, or Swiss User” means a User who resides in the EEA, UK or Switzerland.

Data Privacy Framework Principles. Mosyle commits to processing EU, UK, or Swiss Personal Data in accordance with the DPF Principles as follows:

(1) Notice
Prior to collecting EU, UK, or Swiss Personal Data, Mosyle notifies EU, UK, or Swiss Users about the categories of EU, UK, or Swiss Personal Data that Mosyle collects and the purposes for collection and use of their EU, UK, or Swiss Personal Data. Mosyle will only process EU, UK, or Swiss Personal Data in ways that are compatible with the purpose for which Mosyle collected it or for purposes later authorized.

We use the EU, UK, or Swiss Personal Data that we collect from EU, UK, or Swiss Users of the Services as described in this Privacy Policy. Before Mosyle uses EU, UK, or Swiss Personal Data for a purpose that is materially different from the purpose for which Mosyle collected it or that was later authorized, Mosyle will provide EU, UK, or Swiss Users with the opportunity to opt out.

(2) Choice
If Mosyle collects Sensitive Personal Data, we will obtain explicit opt-in consent whenever the DPF requires. Mosyle will obtain opt-in consent before EU, UK, or Swiss Personal Data is disclosed to third parties other than those described in this Privacy Policy, before EU, UK, or Swiss Personal Data is used for a different purpose than that purpose for which it was collected or later authorized, and whenever the DPF requires.

Please see the YOUR CHOICES ABOUT YOUR INFORMATION section above for more information about how to exercise your choices.

(3) Accountability for Onward Transfer
Mosyle shares EU, UK, or Swiss Personal Data collected through the Services as described above.

If Mosyle transfers Personal Data to a third party, Mosyle takes reasonable and appropriate steps to ensure that each third party transferee processes Personal Data transferred in a manner consistent with Mosyle’s obligations under the DPF Principles. Mosyle will ensure that each transfer is consistent with any notice provided to EU, UK, or Swiss Users and any consent they have given. Mosyle requires a written contract with any third party receiving EU, UK, or Swiss Personal Data that ensures that the third party (i) processes the Personal Data for limited and specified purposes consistent with any consent provided by EU, UK, or Swiss Users, (ii) provides at least the same level of protection as is required by the DPF Principles, (iii) notifies Mosyle if it cannot comply with the DPF; and (iv) ceases processing EU, UK, or Swiss Personal Data or takes other reasonable and appropriate steps to remediate.

As noted above, under certain circumstances, Mosyle may be required to disclose EU, UK, or Swiss Personal Data in response to valid requests by public authorities, including for national security or law enforcement requirements.

Mosyle remains liable under the DPF Principles if an agent processes EU, UK, or Swiss Personal Data in a manner inconsistent with the Principles unless Mosyle is not responsible for the event giving rise to the damage.

(4) Security
Mosyle takes appropriate measures to protect EU, UK, or Swiss Personal Data from loss, misuse and unauthorized access, disclosure, alteration, unavailability and destruction. In determining these measures, Mosyle takes into account the risks involved in the processing and the nature of the EU, UK, or Swiss Personal Data.

(5) Data Integrity and Purpose Limitation
Mosyle takes reasonable steps to ensure that such EU, UK, or Swiss Personal Data is reliable for its intended use, accurate, complete and current. Mosyle adheres to the DPF Principles for as long as it retains EU, UK, or Swiss Personal Data in identifiable form. Mosyle takes reasonable and appropriate measures to comply with the requirement under the DPF to retain EU, UK, or Swiss Personal Data in identifiable form only for as long as it serves a purpose of processing.

Mosyle limits the collection of EU, UK, or Swiss Personal Data to information that is relevant for processing. Mosyle does not process EU, UK, or Swiss Personal Data in a way that is incompatible with the purpose for which it was collected or subsequently authorized by an EU, UK, or Swiss User.

(6) Access
An EU, UK, or Swiss User has the right to access their EU, UK, or Swiss Personal Data and to correct, amend, limit use of or delete the EU, UK, or Swiss Personal Data if the Personal Data is inaccurate or processed in violation of the DPF Principles. Mosyle is not required to grant the rights to access, correct, amend and delete EU, UK, or Swiss Personal Data if the burden or expense of providing access, correction, amendment or deletion is disproportionate to the risks to the EU, UK, or Swiss User’s privacy or if the rights of persons other than the EU, UK, or Swiss User are or could be violated.

Please see the YOUR CHOICES ABOUT YOUR INFORMATION section above for more information about how to exercise your choices.

(7) Recourse, Enforcement, and Liability
In compliance with the DPF Principles, Mosyle commits to resolve complaints about your privacy and our collection or use of your Personal Data transferred to the United States pursuant to DPF. European Union, UK, and Swiss individuals with Data Privacy Framework inquiries or complaints should first contact Mosyle at legal@mosyle.com.

In compliance with the EU-U.S. DPF and the UK Extension to the EU- U.S. DPF and the Swiss- U.S. DPF, Mosyle commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF. If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See Data Privacy Framework Annex 1 at https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction.

Mosyle commits to periodically review and verify its compliance with the Data Privacy Framework Principles and to remedy any issues arising out of failure to comply with the DPF Principles. Mosyle acknowledges that its failure to provide an annual self-certification to the U.S. Department of Commerce will remove it from the Department’s list of Data Privacy Framework participants.

10. YOUR CALIFORNIA PRIVACY RIGHTS

If you are a California resident, you can request a notice disclosing the categories of Personal Data about you that we have shared with third parties for their direct marketing purposes during the preceding calendar year. At this time, Mosyle does not share Personal Data with third parties for their direct marketing purposes.

Depending on applicable law, California residents may have additional rights to know, access, correct, delete, or limit certain uses of Personal Data. To exercise privacy rights available to you under applicable law, please contact us at legal@mosyle.com. We may need to verify your identity and authority before fulfilling your request.

11. CHILDREN UNDER 16.

The Services are not intended to be managed by individuals under the age 16. If we become aware that person managing our Services and submitting information is under age 16, we will delete the information as soon as possible. Except as described in this Privacy Policy, we do not request or knowingly receive Personal Data from Monitored Users or anyone else who is younger than the age of majority in their place of residence.

Mosyle@Home is intended to be accessed by authorized legal guardians only when enabled by the applicable School. The School is responsible for providing any notices and obtaining any consents or authorizations required by applicable law or School policy in connection with the School’s use of Mosyle OneK12, Mosyle@Home, and School-owned devices.

12. CHANGES TO THIS PRIVACY POLICY.

We reserve the right to change, modify, add or remove portions of this Privacy Policy, without advance notice to you. We will notify you of any such changes by posting a notice on our Site, App, and/or via email. The new Privacy Policy will reference the effective date at the top of this page together with a link to previous versions. Except as stated elsewhere, such amended terms will be effective immediately and without further notice. Your continued use of the Services after the posting of changes constitutes your binding acceptance of such changes.

13. QUESTIONS

If you have questions, requests, complaints, or disputes regarding Mosyle@Home, a School- owned device, device restrictions, device configuration, access to Mosyle@Home, student accounts, School policies, or the School’s use of Mosyle OneK12, you should contact the School directly.

If you ever have any questions about our online Privacy Policy, please contact us via email at legal@mosyle.com.