PingSchool
PingSchool
Last updated: September 23, 2026
PingSchool is an Android application published by Yummy Systems LLC. This policy explains what the app does with your information. The short version: your messages, contacts, and email credentials stay on your device, and we have no access to them. Signing in is optional and is not required to use the app. One feature — sharing with another parent — does store some of your information on our servers, and it only happens if you deliberately join a household.
We do not handle your mail. The app talks directly from your device to the mail provider you configure. We do not operate a service that receives, stores, relays, or reads your messages. Signing in does not change that, and neither does sharing with another parent.
All of the following is kept in your device's local application storage. None of it is transmitted to Yummy Systems LLC unless you join a household, which shares most of these items (never the email credentials) and is described under Sharing with another parent.
{{child}} can be filled in, and an optional
photo of each child.When you send a message, the app connects directly from your device to the provider you configured — Gmail's SMTP servers, Brevo's API, or your own SMTP host — using the credentials you supplied. Your messages travel between your device and that provider only.
Reading your Inbox and Sent Mail works the same way, over IMAP, with the same login. Message contents are displayed on your device and are not copied elsewhere.
Your mail provider's own privacy policy governs what they do with mail you send and receive through them.
PingSchool does not send text messages or place calls itself. When a message is also going out as a text, the app opens your phone's own messaging app with the recipients and the text filled in, and you send it from there, from your own number. The Call button opens your phone's dialer with the number filled in. The app does not request permission to send SMS or place calls, and it keeps no record of your texts or calls.
If you attach a file or take a photo, the app reads that file from your device in order to include it in the outgoing message. Attachments are sent only to the recipients you choose, through your own mail provider. They are not uploaded anywhere else. The app requests camera and file access permissions for this purpose only.
The Backup feature writes a JSON file to a location you pick on your own device. Be aware that this backup file includes your email account secret so that a restore can reconnect without re-entering it. Treat that file the way you would treat a password: keep it somewhere private, and do not share it or sync it to a location you do not control.
PingSchool has an optional sign-in, either with a Google account or with an email address and a password. You do not need it: every feature in the current release except sharing a household works fully while signed out, and the app does not prompt you to sign in. It exists so that features which need to know who you are — sharing with another parent and its chat, and, in future, backing your data up off the device or a paid subscription — have an account to attach to.
Signing in by itself does not upload anything. The only thing that happens is that Google tells the app who you are. Your notes, history, children, contacts and email credentials stay on the device. Data only leaves it if you go on to create or join a household, described next.
If you do sign in, authentication is handled by Google Sign-In and Firebase Authentication, both operated by Google. Google receives the fact that you signed in to PingSchool, and we receive from Google the account identifier, email address, and display name for your Google account. That is stored by Firebase Authentication on our behalf, and we use it only to recognize you as the same person on a later sign-in. Google's handling of your account is governed by the Google Privacy Policy.
If you sign in with an email address instead, that address and your password are held by Firebase Authentication, which stores the password in hashed form. We never see it, and no other part of the app can read it. Nothing is emailed to you unless you ask for a password reset. You do not have to verify the address, and we do not use it to contact you.
You can sign out at any time in Settings, and you can delete the account record entirely — see Deleting your information below. When cloud backup or subscriptions ship, this policy will be updated first to describe exactly what leaves your device.
Two adults looking after the same children can share part of their PingSchool data by joining a household. This is entirely optional, it is off unless you turn it on, and it is the only feature that stores your information on our servers. It keeps both phones showing the same family: the same children, contacts, actions and calendar.
Nothing is shared until you act. A household exists only after you create one, or enter an invite code someone gave you. Until then, and after you leave, the app keeps everything on your device as before.
When you are in a household, the following is stored by us and is readable by every other member of that household:
Chat notifications. So the other parent hears about a new chat message, each member's phone registers a notification token with Firebase Cloud Messaging, operated by Google. When you send a chat message, our server passes your name and the first 120 characters of the message to Firebase Cloud Messaging, which delivers it as a notification to the other members' phones.
The following is not shared, and is not stored by us at any point:
Children's details are shared with the household. Your children's first names, pronouns and photos are visible to every member. Share a household only with an adult who is already responsible for those children.
Invite codes. Joining works by a code one member generates and gives to another. A code can be used once, expires after seven days, and anyone holding it can join that household — so treat it like a door key and send it directly to the person you mean to invite. A member can be removed by the household's owner at any time.
Leaving. Leaving a household stops your access to its shared data immediately, and your device returns to its own local data. Notes, history and chat messages you contributed remain with the household for the other members, because it is their record too. If you want something you wrote removed before you go, delete it while you are still a member.
Household data is stored using Google Cloud Firestore, operated by Google on our behalf, in the United States. It is retained until it is deleted by a member or the household is deleted. We do not read it, and it is not used for advertising, analytics, or any purpose other than showing it to the members of that household.
The current release of PingSchool does not collect analytics and does not send crash reports. It contains no advertising and no third-party tracking software.
If a future release adds crash reporting or usage analytics, this policy will be updated before that release ships, and the update will describe what is collected.
PingSchool is a tool for parents and guardians, not for children, and is not directed to children. A child's first name and pronouns may be entered by the parent purely so the app can compose an email on their behalf. That information stays on the parent's device and is included only in messages the parent chooses to send — with one exception: if the parent joins a household, a child's first name, pronouns and optional photo are visible to the other adults in it. We recommend entering first names only, and we never ask for a last name, birth date, school ID, medical diagnosis, or any similar detail.
Yummy Systems LLC receives two things, both only if you chose them: the sign-in record described under Signing in, and the household data and chat described under Sharing with another parent. Nothing else from the app reaches us. If you email us for support at hello@pingschool.com, we receive whatever you choose to put in that message and use it only to answer you.
Your school data lives on your device, so uninstalling the app removes it. You can also clear individual items in Settings at any time, and you should delete any backup files you created yourself.
If you signed in, the account record described under Signing in is held off your device. You can delete it yourself at any time: Settings → Account → Delete account in the app removes the account and its data immediately. Step-by-step instructions, and how to ask us to do it if you no longer have the device, are on the account deletion page.
If you joined a household, its shared data is also held off your device. You can delete any shared note, and any chat message you wrote, from within the app. Leaving the household ends your access to the rest; what you contributed stays with the household, because the other members rely on it as their record too. When the last member leaves or deletes their account, the household and everything in it is deleted. To have a household deleted sooner, email us from the address you signed in with; we will confirm with the other members first, since the data is theirs as well as yours.
If this policy changes, the updated version will be posted here with a new date at the top. Material changes affecting what the app collects will accompany an app update.
Questions about this policy: hello@pingschool.com
Yummy Systems LLC —
yummysystems.com