Not hard. No dedicated device required, either.

It requires reverse engineering which data in being transferred to the school. This likely occurs using a simple HTTP request. Or series of requests. Copy the data from that HTTP request. Then replicate those HTTP requests.