Privacy Policy

Effective August 4, 2026

Blueprint is an application operated by Austin Christian University (“ACU,” “we,” “us”) for use by enrolled students, student officers, and university staff. It supports the university’s student development program by recording participation, attendance, and academic progress, and by presenting that information back to students and staff.

This policy explains what information Blueprint collects, why, who it is shared with, and the choices available to you. It applies to the Blueprint mobile app and to the Blueprint website.

Who can use Blueprint

Blueprint is not a consumer service and is not open to the general public. Access requires an active Austin Christian University account: you sign in with your university Microsoft account, and a Blueprint profile is created for you the first time you do. Only members of the university’s Microsoft tenant can sign in. Blueprint is not directed to children under 13, and we do not knowingly collect information from them.

Information we collect

Account and profile information

Your name, university email address, and the account identifier provided by ACU’s Microsoft Entra ID sign-in
Your role (student, officer, staff, or administrator) and your assigned company
A profile photo, if you choose to upload one. It is resized and compressed on your device before upload and stored on your Blueprint profile record.
Information you provide during onboarding, including personality assessment results you elect to record

Program and education records

Grade point average, class attendance, and chapel attendance provided by the university’s student information system
Participation you or your officers submit — community service hours, credentials earned, job promotions, small group and team involvement, and similar activities, along with any description or supporting photo attached to a submission
Scores, points, and standings calculated from the records above
Approval decisions and any reason given when a submission is rejected
Chapel and spiritual formation participation — attendance at required chapel services, spiritual formation grades, and involvement in small groups, dream teams, and the Chapel Team. Because this records participation in religious activities, we treat it as sensitive information even though it is a record of attendance rather than a statement of belief.
Contact details for people other than you. Some submissions ask for a supervisor’s name and email so staff can verify what you reported. When you provide someone else’s details, you are the one disclosing them — please only enter contact details for someone who expects to be contacted about your participation.

Device and notification information

A push notification token, if you enable notifications, so we can deliver reminders and announcements to your device
Device type, operating system, and app version, used for support and compatibility
When the app checks for updates it sends a random installation identifier, your platform, and the app version to Expo’s update service. That identifier is not connected to your Blueprint account.

Server logs

Our hosting providers keep standard server logs — such as IP address, request time, and the request that was made — for security and troubleshooting. Blueprint does not include analytics or crash reporting software, and we do not track which screens you visit.

Assistant conversations

Messages you send to the in-app assistant, and the responses it returns, so the conversation works and can be reviewed for accuracy and safety. Any custom instructions you set are included with each request. You can delete a conversation at any time; deleted conversations are removed from our database.
Questions you ask the resource search are logged without your account identifier so we can improve the answers. Please avoid typing personal details into that box.

How we use information

We use the information above to:

Operate the student development program and your account
Calculate scores, standings, and progress, and display them to you, your company, and university staff as appropriate to each role
Route submissions for approval and notify you of outcomes, deadlines, and announcements
Answer your questions through the in-app assistant and surface relevant university resources
Provide support, investigate misuse, secure the service, and meet the university’s legal and academic obligations

We do not sell your information, and we do not use it for advertising. Blueprint contains no advertising and no third-party advertising or cross-app tracking technology.

Within the university, information is visible according to role. Students see their own records and the aggregate standing of their company. Student officers see records for the students they lead. Staff and administrators see records necessary to run the program.

Visible to other students: members of your company can see your name, profile photo, university email address, and phone number on the company roster, along with your company role. Your individual scores and academic records are not shown to other students.

We share information with service providers who operate the app on our behalf, under contract and only for that purpose:

Supabase — database, authentication, and file storage
Vercel — website and application hosting
Expo — mobile app builds, updates, and push notification delivery
Microsoft — university account sign-in
Google Cloud (Vertex AI) — powers the in-app assistant and resource search. Content sent to Vertex AI is covered by the university’s Google Cloud data processing terms and is not used to train Google’s models.
Resend — transactional email delivery

We may also disclose information when required by law, to protect the safety of the university community, or as permitted under the Family Educational Rights and Privacy Act (FERPA).

Education records and FERPA

Much of what Blueprint stores constitutes an education record under FERPA. The university administers these records under its FERPA obligations, and access within Blueprint is limited to school officials with a legitimate educational interest. Your rights to inspect, review, and request amendment of your education records are governed by the university’s FERPA policy and are unchanged by this policy.

Retention

We keep program records for as long as you are enrolled and afterward as part of the university’s academic record, consistent with its records retention practices. When an account is deactivated, access ends but historical records are preserved. Push notification tokens are deleted when you disable notifications or sign out.

Your choices

Notifications — you can enable or disable push notifications at any time in the app or in your device settings
Profile photo — optional; you can replace it at any time
Photo library access — requested only when you choose to upload a photo, and revocable in your device settings
Access and correction — contact us at the address below to review your information or request a correction

Because Blueprint records are university education records, deleting an individual account is generally not possible while you are enrolled. Contact us if you have questions about a specific record.

Security

Access to Blueprint requires university sign-in. Data is encrypted in transit and at rest by our infrastructure providers, and database access is restricted by role at the row level so that users can reach only the records their role permits. No system is perfectly secure, but we work to protect your information and to address issues promptly.

Changes to this policy

We may update this policy as the app changes. When we do, we will revise the effective date above, and we will notify users in the app if the changes are significant.

Contact us

Questions about this policy or about your information can be sent to lars@austinchristianu.org, or by mail to Austin Christian University, Austin, Texas.