Last updated: July 15, 2026
Mustr is a school emergency communications platform operated for K-12 districts. This policy explains what information Mustr collects, why we collect it, how we protect it, and the rights you and your students have under the Family Educational Rights and Privacy Act (FERPA).
Each subscribing school district is the FERPA school official and the data controller of the records stored in Mustr. Mustr operates as a school official with a legitimate educational interest under 34 CFR §99.31(a)(1)(i)(B). We process student records solely on the district's instructions and only for the emergency-management, accountability, and reunification purposes the district has authorized.
Mustr does not sell student data and does not use it for advertising. We share data only with sub-processors strictly necessary to operate the service:
Mobile information: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties, excluding aggregators and providers of the text-message services necessary to deliver the alerts.
Audit-log entries and incident records are retained for the duration of the district's subscription plus the period required by state record-retention statutes (typically three to seven years). Guardian photos and ID metadata captured during a reunification are retained for 180 days by default and then purged unless the district configures a longer hold.
Parents and eligible students have the right to inspect their education records, request correction, and request deletion of records the district is not required to retain. Mustr provides admins with a one-click FERPA right-of-access export and a right-to-be-forgotten queue with a 24-hour cancel window. Submit requests through your school district's records office; the district will fulfill the request using the export tools we provide.
Mustr is provided to schools as a school official tool and never collects data directly from children. We rely on the district's authority to provide consent for students under 13 in the educational context.
To report a security issue, email security@mustrk12.com. We acknowledge reports within one business day.
Mustr · Lansing, Michigan · privacy@mustrk12.com. For policy questions or to request a copy of our standard Data Processing Agreement, email legal@mustrk12.com.
You can request deletion of your individual Mustr account and the personal data tied to it from our self-serve Delete account page — no app installation required. We will confirm by email within 3 business days and complete deletion within 30 days, subject to audit-log entries your district is legally required to retain (anonymized to "Deleted user").
When we materially change this policy we will notify district administrators by email at least 30 days before the change takes effect.