Your school's data now stays completely within your school.
We discovered an issue where weekly email digests were being delivered to administrators at other schools. While student grades and personal information were not exposed, the email headers and staff activity summaries could include names from the wrong school. We moved fast to fix this.
The root cause was a subtle quirk of our multi-school architecture: the system that finds "all administrators for this school" was accidentally finding all administrators everywhere. We've completely rewritten how email recipients are identified, ensuring every notification is scoped exclusively to the correct school. We've also replaced several internal data lookups with safer, faster alternatives.
Email digests are temporarily paused while we complete additional testing. We'll re-enable them shortly once we're confident everything is working perfectly. Your trust is everything to us—if you ever have questions about data privacy, please reach out.
Fixes and Improvements
- Weekly admin digest now only reaches administrators at their own school
- Weekly parent digest uses safer data access for parent and child names
- Superadmin broadcast emails are now properly scoped per school
- School announcements now target only users belonging to the announcing school
- Fixed an internal issue where school context could be lost during email generation