I. INTRODUCTION
MyPick is an application system that assists school districts in the equitable placement of students into available school programs and open slots based on configurable district criteria. The MyPick suite includes MyPick Magnet and MyPick Transfer, which streamline the management of student applications, transfers, and related student data. The system facilitates data-driven, transparent, and fair placement decisions and includes the ability to collect and process limited student behavior information provided by districts for educational and programmatic purposes. MyPick does not conduct behavioral tracking for marketing or profiling purposes.
This Privacy Statement provides information on how MyPick, a product developed and operated by LEAN Frog Digital LLC, protects student educational records and personal information (collectively “Customer Data”) provided by K12 institutional customers to process on their behalf. It also outlines how LEAN Frog Digital LLC, dba MyPick, collects and protects personal information (referred to as “Personal Information”) when you visit our websites, including:
- https://tcs-specialty-program.lfdmypick.com/
- https://transfer-tcs.lfdmypick.com/
- https://magnet-hcs.lfdmypick.com/
- https://transfer-hcs.lfdmypick.com/
- http://magnet-jeffersonco.lfdmypick.com/
- http://transfer-jeffersonco.lfdmypick.com/
Our practices comply with US federal regulations, including the Family Educational Rights and Privacy Act (FERPA) and the Children’s Online Privacy Protection Act (COPPA). References to “us,” “we,” “our,” or “MyPick” refer to LEAN Frog Digital LLC and its affiliates.
A. DATA CATEGORIES
Customer Data: MyPick receives Customer Data from its customers and processes it on their behalf. Customers control processing through contractual obligations, including data privacy agreements. Customer Data may include student demographic information, program eligibility, enrollment records, attendance, disciplinary and conduct data, and other educational information necessary for district operations.
Collected Data: In some instances, MyPick collects personal information directly from a user of its publicly accessible websites or online services. For Collected Data, MyPick acts as a data controller. The collection and processing of personal information are governed by applicable Terms of Service.
Transaction Data: Transaction Data is metadata generated by use of MyPick Products. It includes access logs, error logs, and system health information that may contain identifiers but is used solely for diagnostics, security, and performance purposes. Transaction Data is temporary and deleted on a rolling basis according to MyPick’s retention policy.
B. CUSTOMER DATA
MyPick’s customers are K12 educational institutions. All Customer Data, including student behavioral data, is owned and controlled by these institutions. MyPick processes Customer Data only for the legitimate educational purposes defined in the customer’s agreement.
If required under applicable law, customers are responsible for obtaining consent for MyPick to process Customer Data. Under FERPA, customers designate MyPick as a “school official” with a legitimate educational purpose.
MyPick does not use or disclose Customer Data except as authorized and required by customers and in accordance with data privacy agreements. Requests for access, review, correction, or deletion must be directed to the educational institution.
C. COLLECTED DATA
MyPick collects device and usage information from users accessing its publicly available websites, including IP address, browser type, and session activity. This data is used for analytics, product improvement, and security, and is not connected to student accounts or educational records.
D. TRANSACTION DATA
Transaction Data refers to operational metadata used for product functionality, troubleshooting, and security monitoring. While it may include indirect identifiers (e.g., session IDs), it is segregated from Customer Data and deleted routinely to comply with data minimization principles.
E. COMMITMENT TO PROTECTING YOUR DATA
MyPick employs physical, administrative, and technological safeguards designed to protect Customer and Personal Data against loss, misuse, and unauthorized access. These include encryption at rest and in transit, role-based access controls, and continuous monitoring. Although we implement strong safeguards, no system can guarantee absolute security.
F. CHILDREN’S PRIVACY
Under FERPA and COPPA, MyPick acts as a “school official” with a legitimate educational interest. MyPick processes personal and behavioral information from children under 13 only with the consent of the educational institution or the child's parent or guardian. Behavioral data may include attendance, discipline, and intervention history as permitted by the customer agreement.
MyPick does not use such information for marketing or advertising and does not allow public disclosure of data from children under 13.
G. DATA SUBJECT RIGHTS
Individuals have rights of access, correction, deletion, and consent withdrawal concerning their personal data, as governed by FERPA and state laws. These rights must be exercised through educational institutions. MyPick will comply with all customer-directed requests in ac
H. DATA RETENTION
MyPick retains Customer Data as directed by contractual agreements and applicable law. For FERPA-governed educational records, retention aligns with district requirements. Transaction and Collected Data are retained only as long as necessary for operational or legal purposes and are deleted securely thereafter.
I. DATA SUBPROCESSORS
MyPick uses trusted third-party processors for system operations:
- Amazon Web Services (AWS) – Data storage and hosting
- Laravel Vapor / Forge – Application deployment and management
- MySQL / MariaDB – Database management
All processors are bound by confidentiality and data protection obligations and operate within U.S. jurisdictions.
II. MyPick WEBSITES AND MARKETING
MyPick websites may collect contact information for the purpose of communications, webinars, or resource downloads. MyPick does not use student or Customer Data for advertising. Cookies and analytics are used only for improving user experience on public websites.
III. DISCLOSURE TO THIRD PARTIES
MyPick shares data only under strict legal or contractual necessity, including:
- With service providers acting under confidentiality agreements
- As required by law or government request
- For security, fraud prevention, or compliance purposes
- During a merger, acquisition, or sale, ensuring equivalent privacy protections
MyPick does not sell or share personal data for marketing purposes.
IV. CALIFORNIA PRIVACY RIGHTS
California residents may request access, correction, or deletion of personal data, except where MyPick acts solely as a data processor for an educational institution. MyPick does not sell or share personal data as defined by the California Consumer Privacy Rights Act (CPRA).
Requests may be directed to bloom@leanfrogdigital.com or through your educational institution.
V. CONTACT US
If you have questions about this Privacy Policy or our data practices:
LEAN Frog Digital LLC (developer and operator of MyPick)
4920 Corporate Drive NW Suite B,
Huntsville, Alabama 35805
Email: support@leanfrogdigital.com
Updated: October 22, 2025