Terms of Service

Institution information requests

The public inquiry form on Use Cases and Contact is for questions about use by schools, districts, colleges, and universities. It is not a purchase, service agreement, account application, or grant of access. Submit accurate contact information and no student records, passwords, payment details, or unrelated sensitive data. An on-page acknowledgment establishes acceptance for sending, not guaranteed inbox delivery or a response deadline. If sending is uncertain, use the same-request retry or contact support rather than submitting duplicates.

Online problem reports and screenshot uploads are currently disabled. Contact explains availability before entry and provides info@campusactivityscan.com as an email-support alternative. Do not include student data or credentials. Report a problem is not an emergency service; follow your institution's procedures for urgent needs.

Managers can save numeric student-ID lengths from 1 to 32 digits and optional nonnumeric-character removal for their authorized location. Seven digits and general cleaning off remain the default. Extra numeric digits are rejected, not truncated; leading zeros are preserved. These controls do not add general alphanumeric identity support, roster validation, payment processing, or automatic eligibility checks. Schools must confirm their card formats and workflows are appropriate. Historical records and already captured queued IDs are not rewritten by changing the settings.

Authorized school use

The connected app is intended for authorized, staff-supervised attendance workflows, not independent student account creation or identity verification. Obtain the school's permission before using student records and use the service only within that permission.

Before entering student records, the school and operator must complete the applicable approval, privacy, security, recovery, and operational requirements. A demonstration, Google sign-in, or an approved email address is not evidence of district authorization or regulatory certification.

Accounts and authorized access

Use your own verified Google account and protect its credentials and authenticator. App approval, location membership, and manager permissions are separate. Do not share invitation links to obtain access for another account or attempt to bypass account, location, or rate-limit controls.

Advisor-only access does not require mandatory in-app MFA. Managers and administrators must complete the in-app authenticator step for each new sign-in session; the highest active role across all locations applies. Verification lasts a fixed 60 minutes from a successful code check, or until the current app session ends, whichever occurs first. Navigation and token refresh do not extend it. A higher-role promotion requires renewed verification. Adding another authenticator retains its stricter 10-minute verification requirement. The underlying app session lasts at most 12 hours.

Managers are responsible for inviting the intended people and assigning appropriate rights. An advisor must accept with the exact invited verified account. Removing an app membership does not remove existing Google sharing.

Use the explicit resend or replacement-link action to recover or renew an invitation. Each invalidates the previous link and starts a fresh 48-hour lifetime; a replacement link alone sends no email. Reading or copying an available current link does not change its expiry. Share a recovered link securely only with the intended person. An ordinary duplicate submission does not send another email, and a provider-accepted message does not guarantee inbox delivery.

An access request, joining code, notification email, or saved default activity does not grant access by itself. A general request requires Platform Admin review; a location request requires an authorized manager. Review links require sign-in, and opening them does not approve or change access. Provider acceptance of an email is not a delivery guarantee; reviewers should use the saved requests in the app rather than rely on email alone. Keep scanning only for locations and activities currently authorized for your account; a saved preference cannot override revoked access.

Platform administrators can disable accounts after recent authenticator verification, target confirmation, and an internal reason. Disabling blocks app requests and existing sessions and holds unconfirmed uploads for authorized review within their existing expiry. Re-enabling requires fresh sign-in and applicable MFA, does not restore separately revoked memberships, and does not automatically replay held uploads. A neutral notice is sent to the verified account address; email failure does not undo suspension. Direct Google spreadsheet sharing remains independently managed.

Attendance and spreadsheet responsibility

Green Captured—confirmation pending means the valid check-in was saved to this device's durable pending queue, not confirmed in Google Sheets. The next student can be scanned while delivery proceeds. Invalid IDs or a failed local save must not be treated as captured. The connected app reports Confirmed in Google Sheets only after Google acknowledges delivery or the existing scan record is verified. Duplicate, pending, Needs attention, failed, and acknowledged-exception outcomes are different from confirmed saves.

Duplicate resolution runs in the background without requiring an acknowledgment before the next check-in. Checkout remains a verified action: it needs a matching same-day open check-in at the correct location and activity, and queued preceding check-ins must resolve first. A repeated checkout is not a new attendance event.

Today is a personal submission log for the current account on this device, for all app roles. It follows the local attendance day and is not a complete school attendance report. Changing filters does not delete or redirect pending work. Full attendance is available in Google Sheets only to people with independently granted Google access.

Managers should review unresolved outcomes and correct attendance in the original spreadsheet when needed. Review acknowledgment is not proof of a missing upload. Preserve the reserved system fields and use the supported full-table editing workflow. Direct Google editors can change the workbook outside app permissions and delivery coordination.

ID format validation does not establish a student's identity or enrollment. Do not rely on this app as the sole record for emergency response, safeguarding, disciplinary decisions, or other high-stakes decisions.

Service availability

The service can change or be unavailable. These terms do not offer an uptime or support-response commitment. Internet access, camera permissions, browser capabilities, Google access, and service availability can affect operation. Keep an approved alternative attendance procedure available.

Starting or resuming a scanning session requires online authorization. A temporarily disconnected authorized session has limits, and each pending capture expires 24 hours after capture. Delivery retries preserve the original capture and use bounded backoff; a connection-wide problem can delay the affected destination while independent authorized work continues. Uncertain writes are reconciled rather than blindly appended again. Keep the original device and browser available to reconnect; clearing site data can lose pending submissions.

Today resets at the next local attendance day, or on open/resume if the browser was suspended. Pending uploads are separate: midnight does not cancel yesterday's unconfirmed captures, shorten their 24-hour expiry, or delete spreadsheet records. Keep the app open and connected for retries, or reopen it before expiry. Delivery while the phone is locked or the app is closed, and exact-time browser cleanup, are not guaranteed.

Demonstration limits

Use fake student IDs only. Do not enter real student information.

The public demonstration offers Advisor-style Scan and Today views and a limited Manager settings preview for adding activities within this browser only. It requires no account and never writes attendance to Google Sheets or changes real accounts, permissions or settings. Confirmed (demo) is simulated completion. Its Today log follows Scan and the current local day, showing only this browser's own fictional submissions. Fictional scan data and added activities clear after 60 minutes of inactivity, including cleanup on an overdue return, or on reset or reload.

The public demo permits 100 valid scan attempts per public IP per UTC day. Shared networks share that allowance. Resetting the demonstration does not reset the daily allowance. Printable fictional ID cards are available in the demo.

Current service limits

This is a web app. It does not currently provide generated activity and location reports, complete daily sign-off coordination, scheduled reminders, self-service primary-manager handoff and recovery, or native iOS and Android apps. Do not assume those functions are included.

No subscription prices, purchase, renewal, cancellation, or paid-service commitments are established by this page. No payment or purchase is required through this website.

Privacy and service providers

The Privacy Policy explains the current data flows, permissions, retention limits, and service providers. Optional Google Analytics measures fixed website section views, demo openings, app feature views, and generic navigation to improve the product. After consent, the browser locally derives mobile, tablet, or desktop; only this coarse device category is forwarded with events, not raw user-agent strings, device models, operating-system versions, or screen resolution. Analytics does not measure scans or attendance results or use Google account or spreadsheet data. Google can process technical request data when its optional script loads and pseudonymous browser identifiers, so this is not fully anonymous measurement.

Analytics requires a separate opt-in on the website, demo, and connected app. Declining or withdrawing through Privacy preferences does not change access to the app or demonstration. Analytics cookies last up to 24 hours without renewal on later visits; event and user retention is two months, while aggregated reports may last longer. The Privacy Policy explains exclusions, privacy signals, and the limits of withdrawal.

Google, Cloudflare, Supabase, and Resend provide parts of the service. Their availability and applicable account requirements also affect the connected workflow. These policies do not replace agreements required by a school or its service providers.

Questions and updates

For support or privacy questions, contact Battle Born Geckos LLC, at info@campusactivityscan.com without including student data or credentials. Contact the location manager for attendance and local access questions.

These pages will be updated as the service and its operating arrangements change. Applicable school agreements and privacy, security, and operational reviews must be completed before the authorized use begins. No statement here guarantees approval for a particular district or use.