Discovery Check-In — Network of Us, Inc. Last updated: January 2026· Version: 2.0
These Terms and Conditions ("Terms") are a binding agreement between Network of Us, Inc., an Illinois 501(c)(3) nonprofit corporation ("Network of Us," "we," "us," "our"), and the person or entity that creates an account or uses the Discovery Check-In application and related websites and services (the "Service").
By creating an account, clicking to accept, or otherwise using the Service, you agree to these Terms and to our Privacy Policy, which is incorporated by reference. If you do not agree, do not use the Service.
If you accept these Terms on behalf of a school, district, agency, club, or other organization (an "Organization"), you represent that you are authorized to bind that Organization, and "you" means both you and that Organization.
Where a separate written agreement, data privacy agreement, or district addendum exists between Network of Us and your Organization, that agreement controls to the extent it conflicts with these Terms.
3.1 Adults only. Accounts in the Service are for adults. You must be at least 18 years old to create an account. Students do not create accounts, do not provide an email address, and do not set passwords.
3.2 Student access. A Student accesses the Service using a Group code together with a short Student code issued by the Organization. Codes are credentials. You are responsible for distributing them appropriately and for requesting rotation if a code is exposed.
3.3 Account security. You are responsible for maintaining the confidentiality of your credentials and for all activity under your account. Notify us promptly at together@networkof.us if you suspect unauthorized access.
3.4 Roles. The Service uses role-based access: Super Admin, Building Admin, Group Leader (Guide), and Safety Contact. You are responsible for assigning roles appropriately and for removing access promptly when a person leaves your Organization or changes roles.
4.1 Student information collected. Depending on your configuration, the Service collects:
4.2 What the Service does not collect. By design, the Service does not collect or store:
4.3 No general messaging. The Service does not provide open messaging, chat, direct messaging, or social features. Students cannot message one another and cannot message adults other than through the SafeSpot private disclosure channel to their assigned leader. There are no public profiles, no user-generated content visible to other Students, and no ability for a Student to share content outside their Group.
You agree that:
5.1 Authority and consent. You have the authority to provide Student Data to the Service and have obtained all notices, consents, and authorizations required by law before entering any Student into the Service. Where the Service is used with children under 13 outside a school setting, you are responsible for obtaining verifiable parental consent.
5.2 School consent under COPPA. Where you are a school or district using the Service for a school-authorized educational purpose, you may provide consent on behalf of parents to the extent permitted by the COPPA Rule and applicable FTC guidance. You represent that you have provided parents with the required notice of the Service's information practices, including its use of AI Features if enabled, and that you will honor parent requests to review or delete their child's information.
5.3 Accuracy and minimization. You will enter only the Student information necessary for the Service, and will not enter dates of birth, school IDs, photos, health records, disciplinary records, special-education records, or other sensitive information into free-text fields.
5.4 Appropriate use of safety features. You will configure Safety Contacts, monitor notifications from the Service, and respond to disclosures in accordance with your own policies and legal obligations.
5.5 Compliance. You will use the Service in compliance with applicable law, including FERPA, COPPA, and state student-data-privacy laws, and with your own board policies.
6.1 Your data stays yours. As between you and Network of Us, the Organization owns and controls all Student Data and Organization-created content in the Service. We do not acquire ownership of it.
6.2 Limited purposes. We use Student Data only to:
6.3 Quality assurance limits. Access to Student Data for quality assurance or support is limited to authorized personnel, is logged, is limited to what is necessary for the task, and is performed on the smallest data set sufficient. We use de-identified or synthetic data for testing wherever practicable.
6.4 No sale, no advertising, no training. We do not sell, rent, license, or trade Student Data. We do not use Student Data for advertising or marketing of any kind, do not permit behavioral or targeted advertising in the Service, and do not use Student Data to train artificial intelligence models — nor does our AI provider, as described in Section 9.
6.5 De-identified data. We may create and use de-identified and aggregated data to maintain, evaluate, and improve the Service. We will not attempt to re-identify it and will not disclose it in a form that could reasonably identify a Student or Organization.
Student Data is strictly gated to the Organization that entered it. The Service enforces access boundaries at the Organization, Site, and Group levels, so that Adult Users see only the data within their own Organization and within the scope of their assigned role. No Organization can view, query, or receive another Organization's Student Data, and we do not combine identifiable Student Data across Organizations for any purpose.
8.1 Not an emergency service. The Service is not a crisis, emergency, medical, clinical, or counseling service. It does not provide monitoring by clinicians and is not monitored by Network of Us in real time. In an emergency, contact local emergency services.
8.2 Deterministic handling. When a Student's response indicates a serious concern, the Service follows a fixed, rule-based process to notify the Student's leader and, where configured, a Safety Contact. This path is code-based, is not routed through AI, and operates whether or not AI Features are enabled.
8.3 Human responsibility. Notifications are decision-support only. Your Organization and its personnel remain solely responsible for evaluating and acting on any disclosure, including satisfying mandated-reporting obligations. The Service does not fulfill and does not substitute for any legal duty you have. Nothing in these Terms limits your reporting obligations under applicable law.
8.4 Delivery limitations. We do not guarantee that any notification will be delivered, received, or read. Email delivery, network availability, and device settings are outside our control. You should not rely on the Service as your sole means of learning about a student's safety concern.
9.1 What they are and how they are controlled. The Service offers optional AI Features that generate summaries and insights to help Adult Users see patterns over time. AI Features are controlled at the Organization level and can be turned on or off by a Super Admin in Organization settings. Where your Organization has AI Features disabled, no information about your Organization is sent to the AI service.
9.2 When AI Features are OFF. All analysis, pattern detection, flagging, notification, and reporting in the Service is performed by code-based and algorithmic logic running entirely within the platform. No Student Data of any kind is transmitted to any AI service. Check-ins, SafeSpot, safety escalation, reporting, and analytics continue to function normally.
9.3 When AI Features are ON. Analysis remains rule-based; the AI service is used only to summarize what those rules surface. Before any transmission, direct identifiers are removed on our servers. What is transmitted is limited to:
What is never transmitted includes Student last names, Student codes, Group codes, Organization-identifying details, Adult User names or contact information, and the contents of the private SafeSpot channel.
9.4 Our AI provider and its handling. AI Features are provided using Anthropic's Claude API. Under Anthropic's commercial terms, data submitted through the API is not used to train Anthropic's models, and Anthropic's Data Processing Addendum — which includes Standard Contractual Clauses — is incorporated into those commercial terms and binds Anthropic as our subprocessor. [Anthropic automatically deletes API inputs and outputs within 30 days, subject to limited exceptions required by law or to enforce its usage policies.] Transmission is transient and for the purpose of returning the requested summary; we do not authorize any other use.
9.5 AI outputs are advisory. AI Features are a decision-support aid only. They do not make decisions about any Student, do not perform clinical, diagnostic, or safety determinations, and are not a substitute for the judgment of a qualified adult. AI outputs may be incomplete or inaccurate and are provided "as is" without warranty of accuracy. You are responsible for reviewing AI outputs and exercising independent judgment before acting on them. The absence of an AI-generated insight is not an indication that a Student is well, and is never a substitute for adult attention.
9.6 Your control. You may disable AI Features at any time without affecting your access to the rest of the Service. Where required by your district agreement or board policy, you are responsible for obtaining any approvals needed before enabling AI Features.
Where you are an Educational Agency, Student Data you provide may constitute personally identifiable information from education records under the Family Educational Rights and Privacy Act ("FERPA"), 20 U.S.C. §1232g and 34 CFR Part 99.
We receive such information as a school official with a legitimate educational interest under 34 CFR §99.31(a)(1)(i)(B), performing an institutional service the Organization would otherwise perform itself. We operate under the direct control of the Organization with respect to the use and maintenance of education records, use the information only for the authorized purpose, and do not redisclose it except as permitted by FERPA and our agreement with you, or as required by law.
We do not own Student Data, do not sell it, and do not use education records for targeted advertising. Where a subprocessor processes Student Data on our behalf, it is bound by a written agreement to process it only to provide the Service, to protect it, and to use it for no other purpose. Requests from parents or eligible students to inspect, review, correct, or delete education records are directed to your Organization; we will not respond to such requests except as you direct or as compelled by law, in which case we will notify you before disclosure where permitted.
The Service is used by elementary-age children, including children under 13.
11.1 Our commitments. We handle children's personal information consistent with the Children's Online Privacy Protection Act and the FTC's COPPA Rule, including its 2025 amendments. Specifically:
11.2 Consent. Where the Service is used at the direction of a school for a school-authorized educational purpose, the school may provide consent on behalf of parents to the extent permitted by the COPPA Rule. Where the Service is used outside a school setting, the Organization is responsible for obtaining verifiable parental consent before a child uses the Service. Parents may consent to collection and use of their child's information without consenting to disclosure to third parties; where an Organization has not consented to AI Features, they remain disabled and no child data is transmitted to the AI provider.
11.3 Parent rights. A parent or guardian may review the personal information collected from their child, refuse to permit further collection or use, and request deletion. For school-provided accounts, these requests are made to and fulfilled through the Organization; we support the Organization in fulfilling them.
We retain personal information only as long as reasonably necessary for the purposes for which it was collected. We do not retain children's personal information indefinitely.
Data | Purpose | Business need for retention | Deletion timeframe |
Student name, grade, codes | Identify the Student to their leader within the Group | Required to operate the Service for the Organization | Deleted or de-identified within 90 days after the Organization deletes the Student, or after termination of the Organization's account, per Section 12.2 |
Check-In Data and participation records | Provide check-in history and pattern insight to leaders | Multi-month history is the substance of the Service | Retained for the Organization's active use; deleted or de-identified within 90 days of Student deletion or account termination |
SafeSpot disclosures | Route a Student concern to the responsible adult | Required for follow-up and the Organization's records | Per Organization records policy — deleted or returned per the Organization's instruction and applicable records law |
Adult User account data | Operate accounts and permissions | Required to provide the Service | Deleted or de-identified within 90 days after account closure |
Usage and diagnostic logs | Security, reliability, troubleshooting | Detect abuse and diagnose faults | 12 months |
Billing records | Payment processing, tax, and audit | Required by law | As required by law, typically [7] years |
De-identified/aggregated data | Maintain and improve the Service | No identifiable data retained | Retained indefinitely in de-identified form only |
12.1 Organization-directed deletion. An Organization may delete a Student, a Group, or its account at any time through the Service or by request to us.
12.2 On termination. Following termination, we will delete or, at the Organization's written request, return Student Data within 60 days, except for data we must retain by law and for backups, which are purged on our regular backup cycle of 90 days.
We maintain a written information security program with safeguards appropriate to the sensitivity of the information we handle, including information collected from children. It includes: a designated individual responsible for coordinating the program; identification of internal and external risks; implementation of safeguards to control those risks; annual evaluation and adjustment; and assessment of the security practices of subprocessors that receive personal information.
Technical measures include encryption in transit and at rest, role-based access control, server-side management of credentials and secrets, minimization of Student identifiers in the client application, and access logging. All Service data is hosted in the United States.
Incident notification. If we discover a breach or unauthorized disclosure of Student Data, we will take immediate steps to contain and mitigate it and will notify a senior member of the affected Organization's leadership, typically within 72 hours of confirmation, and will cooperate on remediation and any required notifications.
14.1 Plans. The Service is offered in a free tier and paid tiers with differing limits on groups and Students. Current pricing and limits are shown at signup and in the Service.
14.2 Trials and payment. Paid plans may include a trial period requiring a valid payment method. Unless cancelled before the trial ends, the plan converts to a paid subscription and the payment method is charged.
14.3 Billing. Subscriptions renew automatically for successive terms until cancelled. Fees are charged through our payment processor; we do not store full payment card numbers. You authorize recurring charges to your payment method.
14.4 Overages. If your usage exceeds your plan's Student limit, additional capacity may be added automatically as described at signup and billed accordingly.
14.5 Changes and cancellation. You may cancel at any time; cancellation takes effect at the end of the current billing period. Fees are non-refundable except where required by law. We may change pricing on 30 days' notice, effective at your next renewal.
14.6 Non-payment. We may suspend access for non-payment after notice. Suspension does not delete your data; Section 12 governs deletion.
You will not, and will not permit anyone to: use the Service unlawfully or to harm a child; access data outside your Organization or exceed your role's permissions; probe, scan, or attempt to breach the Service; reverse engineer, copy, or create derivative works from the Service; use the Service to build a competing product; scrape or bulk-extract data; introduce malware; interfere with the Service's operation; or misrepresent your identity or authority.
We may suspend access immediately, with notice where practicable, to protect the Service, its users, or children.
The Service, and the Discovery Series, My Life My Journey, and related curriculum, workbooks, question banks, and materials, including all associated trademarks and content, are owned by Network of Us and protected by intellectual property law. Subject to these Terms and payment of applicable fees, we grant your Organization a limited, non-exclusive, non-transferable, revocable license to use the Service for its internal educational and youth-development purposes for the term of your subscription. All rights not expressly granted are reserved. You may not reproduce, distribute, sublicense, or sell our materials without written permission.
Feedback you provide may be used by us without restriction or obligation.
Except as expressly stated in these Terms, the Service is provided "as is" and "as available," and we disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose, non-infringement, and any warranty arising from course of dealing or usage of trade. We do not warrant that the Service will be uninterrupted, timely, secure, or error-free, or that insights, analytics, or notifications will be accurate, complete, or timely.
The Service does not provide medical, clinical, psychological, diagnostic, or legal advice.
To the fullest extent permitted by law, neither party will be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, revenue, or data, arising out of or relating to these Terms or the Service, even if advised of the possibility.
To the fullest extent permitted by law, our total aggregate liability arising out of or relating to these Terms or the Service will not exceed [the greater of the amounts you paid us for the Service in the twelve months preceding the claim, or $100].
Nothing in this section limits liability that cannot be limited by law, including liability for gross negligence, willful misconduct, or fraud.
You will defend, indemnify, and hold harmless Network of Us and its officers, directors, employees, and volunteers from third-party claims arising out of: your breach of these Terms; your failure to obtain required consents or provide required notices; your use of the Service in violation of law; or your Organization's acts or omissions in responding to, or failing to respond to, a disclosure or notification from the Service.
We will defend, indemnify, and hold you harmless from third-party claims that the Service infringes a U.S. intellectual property right, or arising from our breach of Section 6 (data use) or Section 13 (security).
These Terms apply for as long as you use the Service. You may terminate at any time by closing your account. We may suspend or terminate for material breach, non-payment after notice, or conduct that endangers children or the integrity of the Service. On termination, your license ends and Section 12 governs data return and deletion. Sections 6, 10, 11, 12, 16, 17, 18, 19, and 21 survive termination.
We may update these Terms. For material changes we will provide notice by email to Adult Users or a prominent notice in the Service at least 30 days before they take effect, and will require acceptance on next sign-in where appropriate. We will not make changes that are materially less protective of student privacy without the written consent of an affected Educational Agency. Continued use after the effective date constitutes acceptance. Prior versions are available on request.
Governing law. These Terms are governed by the laws of the State of Illinois, without regard to conflict-of-laws rules. Venue: state and federal courts located in McLean County, Illinois.
Public entities. If you are a public school district or governmental entity, provisions inconsistent with applicable law governing your entity (including governing law, venue, indemnification, or limitation of liability) apply only to the extent permitted by that law.
Entire agreement. These Terms, the Privacy Policy, and any separate written agreement with your Organization form the entire agreement between us.
Severability and waiver. If a provision is unenforceable, the remainder stays in effect. A failure to enforce is not a waiver.
Assignment. You may not assign these Terms without our written consent. We may assign in connection with a merger, acquisition, or transfer of assets, subject to the protections in these Terms.
Force majeure. Neither party is liable for delays caused by events beyond its reasonable control.
Network of Us, Inc. (A not-for-profit organization)
216 E. Grove St, Suite 1100, Bloomington, IL 61701
General: together@networkof.us