Last updated: October 2026
You-Attend, LLC (“You-Attend,” “we,” “us,” or “our”) provides You-Attend, an attendance and student-engagement tool that integrates with learning management systems (“LMS”) such as D2L Brightspace, Instructure Canvas, and Moodle using the IMS Global LTI 1.3 (Learning Tools Interoperability) standard. This Privacy Policy explains what information You-Attend receives, how we use it, and the choices available to the institutions and individuals who use the tool.
You-Attend is provided to colleges, universities, and other educational institutions (each, an “Institution”) under an agreement with that Institution. The Institution owns and controls the data processed through the tool. You-Attend acts as a service provider that processes data only on the Institution’s behalf and only to provide the contracted service. Instructors and students who use the tool (“End Users”) do so under their Institution’s account.
When You-Attend processes student records on behalf of a U.S. Institution, we act as a “school official” with a legitimate educational interest under the Family Educational Rights and Privacy Act (FERPA), performing a service the Institution would otherwise perform itself. We use student data only to provide the attendance and engagement service the Institution has contracted for, under the Institution’s direction. We do not use student data for our own purposes, and we do not sell student data or use it for advertising or to build profiles unrelated to the service.
You-Attend does not ask End Users to create accounts or submit personal information directly. Instead, when an End User launches You-Attend from within a course, the LMS securely passes a limited set of information for that course only. Depending on the Institution’s configuration, this may include:
You-Attend receives this information only at the time of launch and only for the specific course from which it is launched. By default, You-Attend does not hold administrative credentials or an API token for the LMS and therefore cannot access courses, rosters, or records on its own — data is exchanged only when an End User actively launches the tool.
A Brightspace Institution may choose to enable an optional API connection. It is off by default, and an Institution that has enabled it can turn it off at any time. When it is enabled, You-Attend stores the application ID and key the Institution issues and uses them, together with the launching End User’s own Brightspace sign-in and permissions, to read the roster and groups of the launched course and to write the attendance grade.
You-Attend offers two optional features that an Institution may enable or disable for each deployment:
Both features are configurable per instance and can be turned off entirely, and are disabled for deployments where the Institution requires it. Both features are off by default and are enabled only at the Institution’s request.
We use the information above to record and display attendance; run the engagement activities the instructor selects (such as quizzes, polls, word searches, crosswords, and QR check-ins); write a single attendance-related grade column back to the LMS gradebook through LTI Assignment and Grade Services (AGS), or through the Brightspace API where the Institution has enabled that option; and provide attendance reporting to authorized instructors and administrators at the Institution.
You-Attend uses only the cookies necessary to maintain a secure, authenticated session while the tool is in use within the LMS. You-Attend does not use third-party advertising or cross-site tracking cookies. The You-Attend tool inside the LMS does not use analytics or advertising services. Our public website (you-attend.com) uses Google Analytics to measure aggregate website traffic and sets cookies on website visitors; it does not receive any student, instructor or Institution data.
We do not share personal information with third parties except (a) service providers that host or support the tool and are contractually bound to protect the data, and (b) where required by law. We do not sell personal information. We host the tool on Microsoft Azure (Azure App Service and Azure SQL Database) in the Central US region, and in the Canada Central region for Institutions that require Canadian data residency. We use Azure Communication Services to send email. Microsoft Azure is our only subprocessor that processes Institution data.
We retain data processed through the tool for as long as the Institution’s subscription is active and as needed to provide the service. On termination of the Institution’s agreement, we will delete or return the Institution’s data within 30 days, except where retention is required by law. Production data is deleted within 21 days of termination and backups expire within seven days after that, so all copies are destroyed within the 30-day period. We provide the Institution with a certificate of destruction.
You-Attend is built to minimize both the data it handles and the access it holds. Key measures include integration through the LTI 1.3 standard; no storage of LMS administrative credentials, and no storage of API credentials unless the Institution enables the optional Brightspace API connection, so the tool cannot query the LMS independently; data access limited to a single course at the time of launch; a single grade column written back; and encryption of data in transit and at rest. Access to systems is restricted to authorized personnel and protected by multi-factor authentication. No method of transmission or storage is completely secure, but we use commercially reasonable measures to protect the information we process.
The full inventory of what is exchanged, stored and never accessed is in LMS Data Exchange & Security.
You-Attend is designed for use in higher education and is not directed to children under 13. Where an Institution uses the tool with users under 13 (for example, in dual-enrollment settings), the Institution is responsible for obtaining any consents required under COPPA and FERPA.
You-Attend is operated from the United States and also serves Institutions in Canada. If an Institution is located outside the United States, it is responsible for ensuring its use of the tool complies with applicable local data-protection laws, and we will process data in accordance with our agreement with that Institution.
We may update this Privacy Policy from time to time. The “Last updated” date above reflects the most recent changes. If we make material changes, we will notify Institutions through the account contact on file or by posting a notice on our website. Continued use of the tool after an update constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or how You-Attend handles data, please contact us:
You-Attend, LLC
2119 Douglas St., Charleston, IL 61920
[email protected]
See also LMS Data Exchange & Security and the Terms of Service.