KidRewards Privacy Policy

We will only collect, use, and share your personal information in accordance with this Privacy Policy. This policy applies whether you login to use KidRewards through https://www.kidrewards.org (the “KidRewards Platform”), our mobile applications (the “KidRewards Apps”), or any of our other products or services that link to this Privacy Policy that KidRewards may provide now or in the future (collectively, the “Service(s)”).

This policy does not apply to websites or services or practices of companies that KidRewards doesn’t own or control, such as third-party services you might access through links or other features (e.g., social media buttons or YouTube videos) on the Service. These other services have their own privacy policies, and we encourage you to review them before providing them with personal information.

By using the Service, you acknowledge that you accept and agree to this Privacy Policy.

Basically,

Protecting your privacy is incredibly important to us. This Privacy Policy is here to help you understand how we treat any personal information that you share with us when you use the KidRewards Services. This policy applies to every KidRewards product - other companies that KidRewards doesn’t own or control will have their own privacy policies, and you should read them, too! .

Protecting children’s privacy is especially important to us - we’re educators and parents ourselves, after all.

What information does KidRewards collect from children, and how is it used?The statements we make regarding the information we collect from or about students and children using KidRewards through an Outside School Child Account , such as those using our Features at home who may or may not be connected to a school and how we use this information applies equally to all students and Outside School Child Users regardless of their age. Accordingly, where this Privacy Policy references students or any information collected from or about students (including Outside School Child Users), our Privacy Policy applies to students under 13 years old as well as students 13 years old and above. Please note, however, that for Outside School Child Users, we have different data retention policies as this information would not be retained beyond account deletion as may be required under FERPA or other state student privacy laws for “education records” or “[Student Data]”(key-terms.html#student-data).

KidRewards collects the minimal amount of information from students and Outside School Child Users necessary to register for an account on the Service. This information is necessary to enable us to comply with legal obligations and given our legitimate interest in being able to provide and improve the Service and for security and safety purposes. Additionally, KidRewards follows the Federal Trade Commission’s (FTC) COPPA rules for parental consent, including, where applicable, the use of which is commonly referred to a “school consent” if a school or teacher elects to utilize KidRewards in the classroom.

Student Account and Outside School Child Account Creation

Currently Student Accounts are created in the following ways: (1) by the student’s parent; (2) by the student’s teacher; or (3) by the student themselves if the teacher elects to provide the student with a unique code. A parent may also set up an Outside School Child Account.

(1) By the parent: When a parent sets up a Student Account for their child, they will first need a parent account. In order to set up a parent account and be connected to their child’s school, parents must first receive the unique parent code provided to their child by their child’s teacher or sent through an email/SMS invitation directly from the teacher containing the unique parent code or choose their child’s teacher from the list shown from within the KidRewards App or KidRewards Website (the request to join the class must still be approved by the teacher). Parents can also set up their account without this unique access code, but will not be connected to their child’s school (or any activity on their child’s account in school. In accordance with COPPA, we may ask the parent to provide the date of birth or age of their child, and if the child is under 13, we will also then seek to obtain verifiable parental consent in order to proceed with creating their child’s account. If a parent is connected to their child’s school, we don’t ask the child’s parent for any additional information regarding their child during the Student Account creation, but link the account to the name and information provided by the child’s teacher. If the parent is not connected to their child’s school, the parent may provide their child’s first and last name (at the option of the parent) and can create the Outside School Child Account. Once we have obtained parental consent, the child’s account will be set up. Although not required under COPPA, we may choose to impose parental consent requirements on students and Outside School Child 13 and above at our discretion.

(2) By the student’s teacher: If a student’s school or teacher elects to utilize Student Accounts in school or otherwise sets up a student’s account, the school will be responsible for obtaining any necessary parental consent under COPPA (including if they choose to act as the agent of the parent and consent on the parent’s behalf - commonly referred to as “school consent” under COPPA) to create the Student Account on behalf of the student and let students access their accounts. The teacher will provide the student’s name to set up the account. The student's email is optional, and only used to reset the student's password. Teachers may choose to allow students to log in on the Service using their Google for Education or other Google Accounts (“Google Login(s)”). We don’t ask students to enter any other personal information for their account registration when a teacher sets up their account. Please note that if you, as a parent, provide an email to the school when the school is obtaining parental consent , we may send an email out to you asking you to verify your child’s account, but you will not receive any other emails unless you have opted in to email marketing or have separately created an account on our Service. For more information on school consent, please see the FTC’s COPPA FAQ’s.

(3) By the student: Alternatively, a teacher may choose to allow students to set up their own Student Account using the unique code provided by the teacher. When students set up their own KidRewards Student Account, the teacher sets up a unique username, a password and optionally an email. Consistent with the requirements of COPPA, we also ask for the child’s age, and a parent or guardian email address from the child so we can seek verifiable parental consent or provide parental notice (as applicable). We will not use parent emails provided this way to market our Service to the parent, unless the parent has opted in to email marketing or has separately created an account on our Service. We don’t ask students to enter any other personal information when setting up an account.

Location Information

We never request precise location data from students and no student location data is available publicly. From students, the primary form of location data is based on IP Address.

In addition to the information listed above, we automatically collect some information from any use of our Service as set forth in the "Information collected automatically" section, this includes device data (such as platform, app version and device ID) and product event data (such as the last activity a child started or whether they viewed a certain report). These are collected for internal analysis on product usage and quality and we may also use it to track progress in the Service, and for sending push or email notifications to the child (as set forth below) to encourage them to take certain actions in the KidRewards Service.

We also receive from the child’s teacher (and link to the student’s account) whatever name he or she has provided for the student, the student’s grade, the points given by that teacher, and content uploaded by the teacher to the student’s portfolio (such as student responses to activities and Portfolio Comments). Teachers can choose to provide full names for students (e.g., first name and last name) when setting up their class; they can also opt to only provide non-identifying information (e.g., just first name and seat number).

We use the information we collect from students and Outside School Child Users to provide and improve the Service to the child, for educational, security and safety purposes, as required by law, or to enforce our Terms. . We will not require children to provide more personal information than is reasonably necessary in order to participate in the Service. If we discover that we have collected information from a child in a manner inconsistent with COPPA, we will take appropriate steps to either delete the information, or immediately seek the parent's consent for that collection. We do not disclose any personal information about children to third-parties, except to service providers necessary to provide the Service, authorized school personnel (such as school leaders) as directed by the child's school, as directed by the child’s parents, as required by law, or to protect the security of the Service or other users. Information collected from students (including personal information and information collected automatically) is never used or disclosed for third-party advertising. We also do not place any third-party advertisements in student logged-in areas of the Service. Additionally, personal information collected from students is never used for behaviorally-targeted advertising to students by us or any third-party, and children’s personal information is never sold or rented to anyone, including marketers and advertisers. We may present contextually relevant educational content (not using student personal information) for either our own products (e.g. Premium Features) or third-party products and services ourselves that we believe may be of interest to a student or Outside School Child User.

Basically,

We don’t ask for or require children to provide personal information beyond that which is reasonably necessary to use KidRewards. Information collected from students or Outside School Child Users is never used or disclosed for third-party advertising or any kind of behaviorally-targeted advertising, and it is never sold or rented to anyone, including marketers or advertisers.

Push Notifications

KidRewards may send push notifications to students or Outside School ChildUsers- for example, letting them know when their weekly report is ready, or telling them about an achievement milestone they reached! We require children provide a parent’s email address before he or she can receive push notifications from KidRewards (or have a Student Account or Outside School Child’s Account previously set up on KidRewards by their parent or teacher, with any necessary parental consent obtained). We will then provide the parent with notice (if the account was set up by them or their child) and provide the parent the opportunity to prevent further notifications. The device identifier for a child’s account will only be associated with other personal information once parental consent is provided. If you are a student or a parent of a child and no longer want these communications to be sent, please either turn off the push notifications on your device, or contact us at contact@gmail.comkidrewards.org .

Basically,

Before ever sending a push notification to a child, if the child or the parent sets up the child’s account on the Service, we will provide notice to parents, or obtain parental consent. We rely on teachers to obtain any necessary personal information if they set up the child’s account. Parents can always opt-out (or withdraw consent) later as well by turning off the push notifications on their child’s device or contacting us at contact@gmail.comkidrewards.org .

What Children’s Information is Visible to Others?

No Student’s Account , or Outside School Child’s Account, profile, or portfolio is made available or visible to the public through KidRewards. Only the student, the student’s parents, and the student’s teachers or school leaders can see the student’s profile and portfolio. No child can upload content (such as a photo, video, drawing, journal entry, or document) to the Service except through their Student Account, or if their parent has allowed their child access in their Student Account or Outside School Child’s Account. This can’t happen for children without either (1) the parent providing parental consent directly to KidRewards or (2) the child’s teacher representing to KidRewards that they have obtained any necessary parental consent , including acting as the agent of the parent if their school policy allows. If a student adds content to their account in the classroom, students can’t view each other’s individual Student Accounts or portfolio unless they have intentionally chosen another student’s name from the list of names shown to them while logging in or viewed the camera roll locally on the device that may be saving photos and videos taken by students. Parents are able to view their own child’s account (through their own parent account) after the teacher has approved the student-submitted content. Please note that parents may not see prior drafts of the student-submitted content prior to the final teacher approval that allows parents to access and view and may not see all points awarded by the teacher in school if the teacher has elected not to show these.

Teachers may share their classes , including points, goals and rewards, with other teachers or school leaders in their school. Please note that if the teacher chooses to project their own KidRewards teacher account in their classroom, students physically present in that classroom may see other students’ names and total points - this is similar to how paper-based sticker charts displayed in a classroom might work. Teachers, however, can choose to never project or display their own teacher account in class, and therefore keep student points and progess private for each student, their teacher(s), and their parents — and many do!

Content uploaded by children or Points, Rewards, or Goals awarded Outside School Child’s Account is viewable by the parent and any children accessing such Features within their respective accounts; the content is not viewable by the child’s teacher or other students.

Basically,

By default, the full set of feedback and content posted, to a Student’s Account is private to the student, their teacher(s), school leader, and their parents (once the content is approved by the teacher). If a teacher displays their teacher account publicly in class, then students may see other students’ total points, goals and rewards. Parents can view all teacher-approved posts.

Content uploaded or Points, Rewards, and Goals awarded within non-school accounts is viewable by the parent and the children accessing such Features within their respective accounts; the content is not viewable by the child’s teacher or other students.

How Long Does KidRewards Keep Children’s Information?

We will not retain a child’s personal information for any longer than is necessary for educational purposes or legal obligations, or to provide the Service for which we receive or collect the child’s personal information. Additionally, we only keep a child’s personal information for as long as his or her Student Account or Outside School Child Account is active , unless we are required by law or the child’s school (for Student Accounts) to retain it, need it to ensure the security of our community or our Service, or to enforce our Terms. More specifically, KidRewards operates a 3-tier student data protection policy to protect all students’ (not just children’s) information (“3-Tier Student Data Protection Policy”):

1. Minimal information: KidRewards collects the minimal amount of information from students necessary to use the Service. For more information, see above. In addition to the information entered by the child, we automatically collect some information from any use of our Service as set forth in the “Information collected automatically” section.

2. One year deletion policy for points:To protect students, KidRewards sets limits on how long students’ points given in the classroom are retained. For all students, points older than 12 months are automatically deleted. For example, if a teacher sets up a class on KidRewards on January 1, 2020, on January 1, 2021 any points added in that class on or before January 1, 2010 would be deleted (and will continue to be deleted on an ongoing basis as each point reaches 12 months in age) regardless of whether or not a student has his or her own account (and if that account is active). This means points cannot exist long-term. Teachers can also delete points at any time. For more information on points that parents can award Outside School, please see our FAQ .

3. Deleting inactive Student Accounts:If a student’s Student Account is inactive for twelve months or more (meaning no teacher has given feedback to the student, added content to a student’s portfolio, or messaged with the student’s parent(s), and neither the parent(s) nor the student have logged into their accounts), KidRewards will automatically delete the Student Account. . Please note that certain content 1) within a Student Account or student portfolio (uploaded by the student, teacher or parent), such as photos, videos, Student Activity Responses or Portfolio Comments, or 2) uploaded by a teacher, school leader, parent, or student through Class Story or School Story may be kept after deletion of a Student Account as we are required to retain these at the direction of the school (e.g., for legal compliance reasons such as maintenance of “education records” under FERPA or “Student Data” under state student privacy laws).

Basically,

We only keep a child’s personal information for as long as the account is active , unless we are required by law or the child’s school (for Student Accounts) to retain it, need it to enforce our policies, or to ensure the security of our community. Additionally, we protect students with our industry-leading 3-Tier Student Data Protection Policy: (1) we collect only minimal information from students necessary to register for an account on the Service, (2) we automatically delete their points given in the classroom after a year, and (3) we delete Students’ Accounts if they’re inactive for more than twelve months. Please note that this does not include certain content uploaded by the teacher, parent, or student to the portfolio that maybe considered an “education record” under FERPA or other state student privacy laws as we are required to retain these at the direction of the school. For more information on the deletion of content related to our Premium Features and Outside School Child Accounts (and not school based accounts or content), please see our FAQ .

Parental Choices

Access, Correction and Deletion Rights

1. If a child, with parental consent , sets up their own Student Account or Outside School Child Account or a parent or guardian sets up their child’s Student Account or Outside School Child Account: If your child’s Student Account or Outside School Child Account was set up directly by your child (with your consent) or you as their parent or legal guardian, set up their Student Account or Outside School Child’s Account, and you have a parent account connected to the student, you may access, review, correct, or delete any of your child’s personal information in the Service by emailing contact@gmail.comkidrewards.org with the same email used to create your parent account

Please note however, that any content uploaded (e.g., photos, videos, comments), that is requested as part of a Student Account, class at a school, or otherwise directed by your child’s teacher or school, is retained at the direction of the school (e.g., for legal compliance reasons such as maintenance of “education records” under FERPA); to correct or delete this content, please contact the appropriate official at your child’s school. If the school determines that the request should be implemented, the school may either make the change themselves or submit the request to KidRewards by emailing contact@gmail.comkidrewards.org

2. If your child’s Student Account was set up by your child’s school: If your child’s school set up their Student Account directly and obtained your consent (or chose to act as an agent and consent on your behalf) and you do not have a parent account connected to your child, please contact the appropriate official at your child’s school to access, review, correct or delete any of your child’s personal information in the Service. If the school determines that the request should be implemented, the school may either make the change themselves or submit the request to KidRewards by emailing contact@gmail.comkidrewards.org . A parent or legal guardian who has a KidRewards parent account and is already connected to their child (but did not set up their child’s Student Account) may at any time contact KidRewards directly by emailing contact@gmail.comkidrewards.org with the same email used to create your parent account and review their child’s personal information in the Service, but correction or deletion requests should still be made to the child’s school first.

For either method described above, we will use commercially reasonable efforts to process such requests in a timely manner consistent with applicable law. We will need to verify your identity, for example by requiring that you provide acceptable forms of personal identification as set forth in our FAQ.

Stop Collecting Further Personal Information

Additionally, at any time, for Outside School Children Accounts, you can refuse to permit us to collect further personal information from your child by emailing contact@gmail.comkidrewards.org from the same email used to create your parent account. Please keep in mind that deleting records may require us to terminate the account in question.

Basically,

We believe parents who have set up their child’s Student Account or Outside School Child Account, should always be able to delete their child's account, request for us to delete their child’s personal information, or obtain a copy of their child's personal information. Just email us at contact@gmail.comkidrewards.org from the same email used to create your parent account. Please note, however, that certain content uploaded by your child in their Student Account (in the classroom or otherwise directed by their teacher) is retained at the direction of the school for legal compliance reasons and you will need to first contact the appropriate official at your child’s school to correct or delete this information and we will have to receive this request from the school. If your child’s teacher set up their Student Account directly, and you do not have a KidRewards parent account, please send your request to your child’s school - we will process requests we receive from the school in a timely manner. If your child’s teacher set up their Student Account directly and you do have a KidRewards parent account, we are happy to respond directly for your requests to access and review your child’s personal information, but you will need to contact your child’s school first for any correction or deletion requests.

We collect two types of information about you: (1) information that you voluntarily provide us by using the Service (described below under “Information you provide to us”) and (2) information collected automatically as result of your use of the Service (described below under “Information collected automatically”). We may also receive information about you from third-party sources (as described below under “Information Received from Third-Party Sources”). The types and amounts of information collected will vary depending on whether the user is a teacher, school leader, parent, student or Outside School Child User (e.g., we collect minimal information from students and Outside School Child User’s to register for an account on our Service) and how they use KidRewards (e.g., if teachers join their school, we may need to collect school address information).

Basically,

KidRewards asks for some limited information directly from teachers, school leaders, parents, Outside School Child Users and students (such as account information), and also collects some information automatically (such as crash reports when errors occur) in order to provide you with the best possible KidRewards experience.

Information you provide to us

We ask for and collect the following personal information about you when you use the Service. This information is necessary for the adequate performance of the contract between you and us, for our legitimate interest in being able to provide and improve the Service, and to allow us to comply with our legal obligations. Without it, we may not be able to provide you with all the requested services.

There are currently four categories of users on our Service: teachers, school leaders, parents, and students (including those Outside School Child Users who use the Services outside of school with our Premium Features). We describe the information collected from students and Outside School Child Users in the “How We Protect Children’s Personal Information” section above; for other users, we collect and store the following types of information from each type of user:

• Account Sign-up and Profile Information: To create a KidRewards account as a teacher, school leader, or parent, you may be asked to provide some basic information such as your first and last name, email address and password. If a student’s teacher is creating the Student Account on behalf of the student, they will provide the student’s name and grade. This same information is also used to create the Student Account on the parent’s behalf (the parent does not currently need to provide any additional personal information of their child if a parent is connected to the school with the unique parent code). If the parent is creating their child’s account and is not connected to their child’s school, they may provide additional information about their child (such as first and last name). Teacher and school leader profiles may be viewed by other teachers and school leaders in the same school; however, no teacher, parent or student profile is made available or visible to the general public through the functionality of our Service.

• School Information and Collaboration Features: If you are a teacher or school leader, as part of the profile information you provide, you may choose to associate your account with an existing school or may enter a new school name and possibly your school’s address if we do not have it already. If you are using the Service as a teacher, school leader, or parent, we may ask you for permission to collect and store your precise geolocation information to help us identify schools located nearby for you, including to help connect your parent account to your child’s school (e.g., our “Find a Teacher” feature). This data is only temporarily captured and not stored beyond the initial search request for schools near the user and is not viewable by other users. By connecting you with your school, the Service may enable and provide additional collaboration features for teachers and school leaders within the same school (and parents of children at that school) such as adding photos, videos, and text updates for parents, students and other verified teachers.

• Class Information: As a teacher, you enter the class year (e.g., first grade) and the names of the students in your class. It is the teacher’s choice what they enter here: for example, teachers could enter John S or John Smith. Alternatively, teachers can also upload a spreadsheet to the Service with the student’s first and last names, if they are already in a class of a verified teacher within the school. If a teacher opts to share the classes they set up on KidRewards with other teachers or school leaders in their school, such as teachers they co-teach with, then those teachers can also see that class’s information.

• Inviting Others and Sharing Content: As a teacher or school leader, you can invite your students’ parents to join the Service, for example by providing their email address or phone number (to invite them via SMS) within KidRewards. As a parent, school leader, or teacher you can also invite others to join the Service or share certain content. We will collect and store the email and phone numbers you provide with these requests, and will also treat this as personal information in accordance with this Privacy Policy. We may also ask you for access to the contacts on your mobile device to prevent you having to enter contact information for those invitations you send through our application and may store these contacts from your address book. If these individuals would like to request deletion of their information, they may contact us directly at contact@gmail.comkidrewards.org .

• Messaging: As a teacher or school leader, you can privately message with individual parents that have signed up for the Service, or send broadcast messages to all parents at once.

As a parent, you can also message with your child’s teacher through KidRewards. As a teacher, school leader, or parent, your name may be displayed to the person with whom you are messaging, and if you are a teacher or school leader, you may receive a ‘read receipt’ showing how many parents have read your message. Please be aware that by using a broadcast messaging feature, , any messages, photos, videos or other content shared can be viewed by all parents, students (whose parents have provided verifiable parental consent to KidRewards (or the student’s teacher has represented they have obtained any necessary parental consent , and teachers and school leaders that are members of that class or school, respectively. In the case that a photo or video is shared showing a student who does not want photos taken of him/her (or whose parent does not want photos taken of him/her), the student or parent can contact us at contact@gmail.comkidrewards.org to remove it, subject to any photo or record being deemed an “education record” under FERPA. If a photo or video is considered an “education record” you will need to first contact your child’s school to request removal. For more information on when photos or videos are considered an “education record” please see the Department of Education’s guidance here. We will store messages, and any content sent with the messages (e.g., photos), to provide the Service, and to help teachers and school leaders keep a log of their communications with parents.

When you send us a message using the "Contact Us" page, feedback link or via email, the email addresses and phone numbers collected are not further used to market to the individual beyond providing the services requested or responding to the requests.

Basically,

We ask you for different types of information based on who you are (i.e., teacher, school leader, parent, and student) and which KidRewards features you use (e.g., sending a message between a teacher and a parent, or helping a teacher or parent join their school).

Information collected automatically

When you use the Service, we (or our service providers) may use various technologies that automatically record or collect certain information, including personal information, from your browser or your device about the services you use and how you use them. This information is necessary for the adequate performance of the contract between you and us, to enable us to comply with legal obligations and given our legitimate interest in being able to provide and improve the Service. For example, this could include the frequency and duration of your visits to KidRewards (similar to TV ratings that indicate how many people watched a particular show). If you use KidRewards on different devices, we may link the information we collect from those different devices to help us provide a consistent Service across your different devices. If we do combine any automatically-collected information with personal information, we will treat the combined information as personal information, and it will be protected as per this Privacy Policy.

The technologies and information we automatically collect include:

• Cookies and other similar technologies: We (or our service providers) may use cookies or similar technologies to identify your browser or device.

• Local storage: We may also use, collect, and store information and preferences locally on your device using mechanisms such as browser-based web storage (including HTTP cookies and HTML5) and application data caches.

Like many services, KidRewards (or our service providers) uses both local storage and cookies and other similar technologies to analyze trends, gather demographic information about our users, understand your engagement with the Service, administer the Service, tailor the Service for you, and to help the Service work better for you - for example, by remembering your language preferences.

• Device information: We collect device-specific information such as your device type, device brand, operating system, hardware version, device settings, file and software names and types, battery and signal strength, and device identifiers. This helps us measure how the Service is performing, improve KidRewards for you on your particular device, and send you push notifications if you’ve opted in to receive them.

• Mobile application information: Certain mobile applications or “apps” include a unique application number. This number and information about your installation (for example, the operating system type and application version number) may be sent to KidRewards when you install or uninstall that application, such as when you install the KidRewards App, when you open the application, or when that application periodically contacts our servers, such as for automatic updates. Additionally, we may receive application state and crash log information which will help us debug and improve the KidRewards App.

• Server log information: Like most online services, when you use our Service we automatically collect and store certain information in our server logs. Examples include things like:

  • Details of how you used our Service, such as your activity on the Service (including product event data used to track progress or user activity), and the frequency and duration of your visits to the Service (similar to TV ratings that indicate how many people watched a particular show)

  • Telephony log information like your phone number and SMS routing information

  • IP address

  • Device event information such as crashes, system activity, hardware settings, browser type, browser language, the date and time of your request and referral URL.

This information helps us make decisions about what we should work on next - for example, by showing which features are most (or least!) popular and to send notifications to a device (such as push notifications if the user opted in) to encourage the user to finish an activity or start the next activity. We may use your IP address and share it with third parties to help diagnose problems with our servers, for security purposes, to manage the Service, to enhance the Services based on usage pattern data and, for analytics and for advertising. Third party sharing of IP address information for analytics and advertising is not allowed for student and Outside School Child Users.

• Location information: When you use our Service, we may collect and process information about your geographic location, for example based on your IP address. We collect both coarse (i.e., city-level) location data and precise location data. If we request precise geolocation information (“precise” meaning sufficient to identify street name and name of city or town) from you (such as when a teacher or parent is searching for a school), we ask for your explicit opt-in permission. We never request precise geolocation data from students.

We will not store or track your precise device location on an ongoing basis or without your permission. We do not share precise geolocation data with third-parties, other than our service providers as necessary to provide the Service. If you no longer wish to allow us to track your location information, you may opt-out at any time by turning it off at the device level.

Basically,

We collect some information from you automatically (and additionally use cookies and other similar technologies to collect information) so that we know when things go wrong, or to help us understand what parts of KidRewards need some improvement. If we need to request street-level (“precise”) geolocation data from you as a teacher, school leader, or parent, we’ll ask for your explicit, opt-in consent. We never request precise geolocation data from students.

First and foremost, you should know that KidRewards does not (and will not) sell or rent any of your, or your child’s, personal information to any third-party for any purpose - including for advertising or marketing purposes. Third-party advertising is not permitted on areas where users are required to log in to KidRewards and personal information collected from students is never used for behaviorally-targeted advertising to students (by us or third-parties). We may serve contextually relevant advertising for third-party products and services ourselves that we believe may be of interest to you (e.g., our co-created content with Yale University on Mindfulness).

We use the information we collect from you to provide you with the best KidRewards experience. Our use of information collected from students and Outside School Child users using the Service outside of school is set forth above in the section “What Information Does KidRewards Collect from Children, and How Is it Used“. More specifically, this information collected from non-students is used to:

• Provide and improve the Service, for example by developing new products and features

• Fulfill your requests and provide any information you request, such as responding to your emails, submissions, questions, comments, requests for information or customer support

• Customize the Service for you, and improve your experience with it

• Send you information about features on our Service or changes to our policies and Service

• Communicate with you about your use of the Service, your account, or transactions with us

• Send you security alerts, and support and administrative messages and otherwise facilitate your use of, and our administration and operation of the Service

• Provide parents and teachers information about events, announcements, offers, promotions, products, including third-party products, and services we think will be of interest to you

• Notify and contact contest and sweepstakes entrants

• For any other purpose for which the information was collected (e.g., fulfilling Premium Features orders)

• Most crucially, to protect our community by making sure the Service remains safe and secure, such as by detecting, investigating and preventing activities that may violate our policies or be illegal

We use automatically collected information (described in the "Information collected automatically" section above) to provide and support our Service, and for the additional uses described in this section of our Privacy Policy.

We process this information given our legitimate interest in improving the Service and our users’ experience with it, in protecting the Service, where necessary for the adequate performance of the contract with you, and to comply with applicable laws.

Additionally, we will process your personal information for the purposes listed in this section related to marketing given our legitimate interests in undertaking marketing activities to offer you products and services that may be of your interest. You can opt-out of receiving marketing communications from us by following the unsubscribe instructions included in our marketing communications or changing your notification settings within your KidRewards account.

Basically,

KidRewards doesn’t sell (and will not) or rent your information to third-parties, we don’t permit third-party advertising on KidRewards, and personal information collected from students is never used for behaviorally-targeted advertising to students. We use your information to provide and personalize the Service to you, optimize and improve our Service, communicate with you about our Service, and for security and safety reasons. We may also use the information provided by parents and teachers to provide parents and teachers information about events, announcements, offers, promotions, products, including third-party products, and services we think will be of interest to you.

First and foremost, you should know that KidRewards does not (and will not) sell or rent your (or your child’s) personal information to any third-party for any purpose - including for advertising or marketing purposes. Third-party advertising is not permitted on areas where users are required to log in to KidRewards and personal information collected from students is never used for behaviorally-targeted advertising to students (by us or third-parties). Furthermore, we do not share personal information with any third-parties except in the limited circumstances described in this Privacy Policy and as set forth below:

Other Users You Share and Communicate with on KidRewards

No teacher, school leader, parent or student profiles are made available to the general public through our Service. Furthermore, students cannot share their account information or portfolio with anyone on KidRewards, outside of their parents, teachers, or school leaders. If you are a teacher, school leader, or a parent, you may choose to share information or content through the Service with other KidRewards teachers, school leaders, students, or parents - for example, things like your account information, points awarded to students you teach (if you are a teacher or school leader) or to your children (if you are a parent) or other information you share with teachers, school leaders, or parents.

Please keep in mind that information (including personal Information or children's personal information) or content that you voluntarily disclose to others - including to other KidRewards users you interact with through the Service (such as messages you might send other users or other teachers and school leaders you collaborate with) - can be viewed, copied, stored, and used by the people you share it with. We cannot control the actions of people with whom you choose to share information and we are not responsible for the collection, use or disclosure of such information or content by others.

Third-party integrations on our Service

When, as a teacher, school leader, student, or parent, you use third-party apps, websites or other services that use, or are integrated with, our Service, they may receive information about what you post or share. For example, when you share on Twitter or Facebook, these services receive the information that you share through this functionality, and information that you are sharing from KidRewards. Please see here for more information on third-party services.

Service Providers

We do work with vendors, service providers, and other partners to help us provide the Service by performing tasks on our behalf - we can’t build everything ourselves, after all! These service providers may be located inside or outside of the European Economic Area (“EEA”). We may need to share or provide information (including personal information) to them to help them perform these business functions, for example sending emails on our behalf, database management services, database hosting, providing customer support software, and security. We may also authorize these third-party companies to collect information on our behalf. These providers have limited access to your personal information to perform these tasks on our behalf, and are contractually bound to protect and use it only for the purpose for which it was disclosed. Additionally, these partners and service providers must adhere to confidentiality and security obligations in a way that is consistent with this Privacy Policy.

Social Media Platforms

Where permissible according to applicable law, we may share certain limited personal information with social media platforms (such as Google or Facebook) and other websites, applications or partners, to generate leads, drive traffic to our websites or otherwise market and advertise our products or services on those websites or applications (this will never include personal information of students). These processing activities are based on our legitimate interest in undertaking marketing activities to offer you products and services that may be of your interest. These social media platforms with which we may share your personal information are not controlled or supervised by KidRewards. Therefore, any questions regarding how your social media platform processes your personal information should be directed to such provider.

Analytics Services

We use analytics services, including mobile analytics software, to help us understand and improve how the Service is being used. These services may collect, store and use information in order to help us understand things like how often you use the Service, the events that occur within the application, usage, performance data, and from where the application was downloaded. .

Aggregated Information and Non-Identifying Information

We may share aggregated information (information about our users that we combine together so that it no longer identifies or references an individual user) and other de-identified or non-personally identifiable information (such as statistics about visitors, traffic and usage patterns), including with users, partners or the press in order to, for example, demonstrate how KidRewards is used, spot industry trends, or to provide marketing materials for KidRewards. Any aggregated information and non-personalized information shared this way will not contain any personal information.

Legal Requirements

We may disclose information, including personal information, if we have a good faith belief that doing so is necessary to comply with the law, such as complying with a subpoena or other legal process. We may need to disclose personal information where, in good faith, we think it is necessary to protect the rights, property, or safety of KidRewards, our employees, our community, or others, or to prevent violations of our Terms of Service or other agreements. This includes, without limitation, responding to law enforcement and government requests. Where appropriate, we may notify users about the legal requests, unless (i) providing notice is prohibited by the legal process itself, by court order we receive, or by applicable law; (ii) we believe that providing notice would be futile, ineffective, create a risk of injury or bodily harm to an individual or group, or create or increase a risk of fraud upon KidRewards, or its users. In instances where we comply with legal requests without notice for these reasons, we will attempt to notify that user about the request after the fact where appropriate and where we determine in good faith that we are no longer prevented from doing so.

Fraud and Security Protection

We may share information to assist with security operations for scheduled penetration testing, auditing, and continuous improvement of our security practices, including without limitation, exchanging information with other companies and organizations for fraud protection. Authorized parties of the information would comply with our current privacy and security policies.

Change of control

The Student Privacy Pledge requires us (and all pledgers) to commit to how we handle data in the event of a change to our organizations such that all or a portion of KidRewards or its assets are acquired by or merged with a third-party, or in any other situation where personal information that we have collected from users would be one of the assets transferred to or acquired by that third-party. Consistent with the Student Privacy Pledge and applicable state and federal laws, in connection with such a change to our organization, if any, this Privacy Policy will continue to apply to your information, and any acquirer would only be able to handle your personal information as per this policy (unless you give consent to a new policy). We will provide you with notice of an acquisition within thirty (30) days following the completion of such a transaction, by posting on our homepage, or by email to your email address that you provided to us. If you do not consent to the use of your personal information by such a successor company, subject to applicable law, you may request its deletion from the company. We may also make information, including personal information, available to a potential investor or purchaser (or their advisors) in advance of any such transaction completion.

In the unlikely event that KidRewards goes out of business, or files for bankruptcy, we will protect your personal information, and will not sell it to any third-party.

With your consent

Other than the cases above, we won’t disclose your personal information for any purpose unless you consent to it.

Basically,

KidRewards doesn’t (and won’t) sell or rent your personal information to any third-parties. We believe your information is yours, and you should own it - we think that’s the right way to operate. We share some information with service providers who help us provide you with the Service – like companies that help us send emails, for example, or if we have to to comply with the law. Additionally, you may choose to share information with other users of the Service or to third-parties that are integrated on our Service.

And, if KidRewards is ever acquired or goes out of business, our commitments don’t change: we still won’t sell or rent your personal information to anyone. Your personal information will continue to be protected by this policy, and any company that acquires KidRewards will have to abide by this policy, unless you give consent to a new policy.

Your KidRewards account is protected by a password. You can help us protect against unauthorized access to your account by keeping your password secret at all times. The security of your personal information is important to us. We work hard to protect our community, and we maintain administrative, technical and physical safeguards designed to protect against unauthorized use, disclosure of or access to personal information. In particular:

• Our engineering team is dedicated to keeping your personal information secure

• We perform application security testing; penetration testing; conduct risk assessments; and monitor compliance with security policies

• We periodically review our information collection, storage and processing practices, including physical security measures, to guard against unauthorized access to systems

• We continually develop and implement features to keep your personal information safe

• When you enter any information anywhere on the Service, we encrypt the transmission of that information using secure socket layer technology (SSL/TLS) by default

• We ensure passwords are stored and transferred securely using encryption and salted hashing

• The Service is hosted on servers at a third-party facility , with whom we have a contract providing for enhanced security measures. For example, personal information is stored on a server equipped with industry standard firewalls. In addition, the hosting facility provides a 24x7 security system, video surveillance, intrusion detection systems and locked cage areas.

• We automatically delete inactive student accounts after a specific period of time, as per our retention policy, described in the “How Long Does KidRewards Keep Children’s Information?” section.

• We restrict access to personal information to authorized KidRewards employees, agents or independent contractors who need to know that information in order to process it for us, and who are subject to strict confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations

Although we make concerted good faith efforts to maintain the security of personal information, and we work hard to ensure the integrity and security of our systems, no practices are 100% immune, and we can’t guarantee the security of information. Outages, attacks, human error, system failure, unauthorized use or other factors may compromise the security of user information at any time. If we learn of a security breach, we will attempt to notify you electronically (subject to any applicable laws and school reporting requirements) so that you can take appropriate protective steps; for example, we may post a notice on our homepage (www.kidrewards.org) or elsewhere on the Service, and may send email to you at the email address you have provided to us. Depending on where you live, you may have a legal right to receive notice of a security breach in writing.

Basically,

The security of your information is important to us, and we take it very seriously. We’re always adding safeguards to ensure the safety and security of KidRewards and our community of teachers, school leaders, parents, and students. You can help us out by keeping your password secret! When you enter information anywhere on the Service or the KidRewards Website, we encrypt the transmission of that information using SSL by default.

As you can see, we try to be transparent about what information we collect, so that you can make meaningful choices about how it is used. You control the personal information you share with us. You can access or rectify this information at any time. You can also delete your account. We also provide you tools to object, restrict, or withdraw consent where applicable for the use of personal information you have provided to KidRewards. We also make the personal information you share through our Service portable and provide easy ways for you to contact us.

You may exercise any of these rights described in this section by sending an email to contact@gmail.comkidrewards.org from the same email used to create your KidRewards account once you are signed into your KidRewards account. Please note that we may ask you to verify your identity before taking further action on your request, for example by requiring you to provide acceptable forms of personal identification .

• Access or correct your personal information

• Control who you share information with

• Delete your account from KidRewards;

• Object, restrict, or withdraw consent;

Basically,

At KidRewards, we believe that more transparency is better. We try to give you control, with easy settings and options, so that you can make good choices when it comes to your information and how it is used. We also set forth the ways in which you can exercise your rights to access, correct, and delete your personal information as well as your right to take information out of KidRewards and object or withdraw consent.

Access or correct your personal information

KidRewards aims to provide you with easy access to any personal information we have collected about you and give you easy ways to update it or delete it, unless we have to keep that information for legitimate business purposes (e.g., we need at least an email address for your account if you maintain an account with us) or legal purposes. You have the right to correct inaccurate or incomplete personal information concerning you (and which you cannot update yourself within your KidRewards account).

Managing Your Information: If you have registered for an account on KidRewards, you may update, correct, or delete some of your profile information or your preferences at any time by logging into your account on KidRewards and accessing your account settings page. You may have to verify your identity before you can do that. You may also, at any time, update, correct, or delete certain personal information that you have provided to us by contacting us at contact@gmail.comkidrewards.org from the email used to create your KidRewards account once you are signed into your KidRewards account. We will respond to your request within a reasonable timeframe.

Accessing Your Information: Upon request, KidRewards will provide you with information about whether we hold any of your personal information, and, If you are a user of KidRewards, you may request access to all your personal information we have on file by contacting us at contact@gmail.comkidrewards.org from the email used to create your KidRewards account. In some cases, we won’t be able to guarantee complete access due to legal restrictions - for example, you will not be allowed to access files that contain information about other users or information that is confidential to us.

Accessing Your Child’s Information: Visit our “Parental Choices” section to see how you can obtain copies of your child’s personal information.

We may reject requests for access, change or deletion that are unreasonably repetitive (more than two times per year for access rights), risk the privacy of others, or would be extremely impractical (for instance, requests concerning information residing on backup systems).

Where we can provide information access and correction, we will do so for free, except where it would require a disproportionate effort or if more than two times a year for access rights.

Basically,

You have certain rights to access, update and correct your personal information. You can always access and manage your personal information through your KidRewards account, or by contacting us or your child’s school if they created your child’s account. Please see here for more information on accessing your child’s information.

How can I delete my account?

We hope you love using KidRewards now and always. However, if for some reason you ever want to delete your account (or your child’s account, if you are his or her parent), you can do that at any time by contacting us at contact@gmail.comkidrewards.org from the email used to create your KidRewards account If you are a parent, teacher, or school leader using the Service, you may also delete your account by logging into your account and accessing your account settings page.

When you delete your account, we delete your profile information and any other content you provide in your profile (such as your name, username, password, email address, and profile photos) and depending on the category of user you are (i.e., teacher, school leader, parent, or student), points awarded in school , Rewards and Goals awarded at home. Information that you have shared with others, others have shared about you, or content other users may have copied and stored, is not part of your account and may not be deleted when you delete your account. Additionally, please note, that even if your account is deleted, messages sent between teachers and parents are retained to assist schools with various recordkeeping or compliance obligations. This includes, for example, any content uploaded, including photos and videos on Messaging, Portfolios, which we consider messaging between parents and teachers. Additionally, some content within a Student Account, such as Student Activity Responses and other content uploaded by the student and/or teacher, will be kept after the Student Account is deleted for school legal compliance reasons (e.g., maintenance of “education records” under FERPA or “student records” under various state student privacy laws). If you would like this content deleted, please first put in a request to your (or your child’s) school. If the school determines that the request should be implemented, the school may submit the request to KidRewards by emailing contact@gmail.comkidrewards.org

We aim to maintain our services in a manner that protects information from accidental or malicious destruction. Because of this, even after you update or delete personal information you have provided us from our Service, your personal information may be retained in our backup files and archives for a reasonable period of time as necessary for our legitimate business interests, such as fraud detection and prevention and enhancing safety. If you are a California resident, we may also retain personal information as set forth under the California Consumer Privacy Act (“CCPA”).

For example, if we suspend a KidRewards account for fraud or safety reasons, we may retain certain information from that account to prevent that user from opening a new account in the future. Also, we may retain and use your personal information to the extent necessary to comply with our legal obligations.

Basically,

You can always delete your account by visiting your account settings, or simply by contacting us. Please note that some content will not be deleted given various compliance and recordkeeping obligations schools have (e.g., maintenance of “education records” under FERPA or “student records” under various state student privacy laws). Please contact your (or your child’s) school if you would like all of this content deleted. If the school determines that the request should be implemented, they may submit a request to us.

Object, Restrict, or Withdraw Consent

Where you have provided your consent to the processing of your personal information by KidRewards you may withdraw your consent at any time by changing your account settings or by sending a communication to KidRewards specifying which consent you are withdrawing. Please note that the withdrawal of your consent does not affect the lawfulness of any processing activities based on such consent before its withdrawal. KidRewards provides parents and teachers with the opportunity to withdrawal consent or ‘opt-out’ of receiving any future marketing communications from KidRewards and its partners at any time. Please see the “What communications will I receive from KidRewards?” section below for more information. Additionally, you can always decline to share personal information with us, or even block all cookies. However, it’s important to remember that many of KidRewards’ features may not be accessible, or may not function properly - for example, we may not be able to remember your language preferences for you.

In some jurisdictions, applicable law may entitle you to require KidRewards not to process your personal information for certain specific purposes (including profiling) where such processing is based on legitimate interest. If you object to such processing KidRewards will no longer process your personal information for these purposes unless we can demonstrate compelling legitimate grounds for such processing or such processing is required for the establishment, exercise or defence of legal claims. Additionally, in some jurisdictions, applicable law may give you the right to limit the ways in which we use your personal information, in particular where (i) you contest the accuracy of your personal information; (ii) the processing is unlawful and you oppose the erasure of your personal information; (iii) we no longer need your personal information for the purposes of the processing, but you require the information for the establishment, exercise or defence of legal claims; or (iv) you have objected to the processing as set forth below and pending the verification whether the legitimate grounds of KidRewards override your own.

Basically,

You have the right to withdraw consent for the collection of your personal information, and also opt-out of marketing communications from us. You may also be able to limit the ways in which KidRewards uses your personal information. Just email us at contact@gmail.comkidrewards.org and we’ll help you right away.

Additional Information or Assistance and Article 27 GDPR Local Representative

If you are located in the European Union or the EEA, you have a right to lodge complaints about the data processing activities carried about by KidRewards with KidRewards’ lead supervisory authority, the Information Commissioner’s Office. You can find their contact details here.

Pursuant to Article 27 of the GDPR, KidRewards, Inc. has appointed European Data Protection Office (EDPO) as its GDPR representative in the EU. You can contact EDPO regarding matters pertaining to the GDPR by sending an email to [email protected], using EDPO’s online request form, or writing to EDPO at Avenue Huart Hamoir 71, 1030 Brussels, Belgium.

Basically,

If you're located in the EU and would like to make a complaint, contact our local authority here. Additionally, you can contact KidRewards’ appointed local representative in the EU, European Data Protection Office (EDPO) using their online request form.

Non-Student Users:

We store your personal information for as long as it is necessary to provide the Service to you and others, including those described above. Personal information associated with your account will be kept until your account is deleted, unless we no longer need the data to provide products and services, in which case we will delete prior to you deleting your account.

Please note that we may have to retain some information after your account is closed, to comply with legal obligations, to protect the safety and security of our community or our Service, or to prevent abuse of our Terms. You can, of course, delete your account at any time. Additionally, please note that even if your account is deleted, messages sent between teachers and parents are retained to assist schools with various recordkeeping or compliance obligations. Additionally, some content uploaded by a teacher, school leader, or parent, including photos, videos, and Portfolio Comments on Messaging, Portfolios, Class Story, or School Story, are retained at the direction of the school (e.g., for legal compliance reasons such as maintenance of “education records” under FERPA or “Student Data” under various state student privacy laws) and will not be deleted until we receive direction from the school.

Student Users (including those who use the Services outside of school or Outside School Child Users):

Please see the “How Long Does KidRewards Keep Children’s Information?” for details on how long we retain data for student users.

Basically,

We keep teacher, school leader, and parent personal information until your account is deleted, or until we no longer need it to provide you with the Service. We only keep student personal information for as long as the student’s account is active , unless we are required by law or the student’s school to retain it, or need it to protect the safety of our users. Additionally, for students, we have our 3-Tier Student Data Protection Policy that states how we delete students’ information after some time. Note that some content may be kept after an account (student, parent, or teacher) is deleted for school legal compliance reasons (e.g., maintenance of “education records” under FERPA).

If you registered on KidRewards, provided an email or phone number to us, or otherwise opted-in to receive communications from us, we may send you messages and updates regarding your account, including privacy and security notices, updates regarding the Service, and information regarding products, features or services from KidRewards (or third-parties we believe you may be interested in). These communications may include, but are not limited to, social media updates, SMS/MMS messages, push notifications, email, and postal mail. If you have an account with us, we’ll also use your email address to contact you for customer service purposes, or for any legal matters that arise in the course of business. We may receive a confirmation when you open an email from us if your device supports it. We use this confirmation to help us understand which emails are most interesting and helpful.

If you invite another person to join you on KidRewards by providing their email address or phone number, we may contact them regarding the Service using the appropriate form of communication. If they would prefer not to receive our communications, they may opt-out using the “Unsubscribe” or “STOP” instructions contained in those communications. If, as a parent/legal guardian of a student, you provided an email address or phone number to your child’s school, KidRewards, at the direction of the school, may send an invitation to join KidRewards via the email or phone number your student’s teacher provided KidRewards. The invitation may be sent via email or SMS/MMS text message. If, as a parent/legal guardian, you provide your telephone number to your child’s school, you are consenting to KidRewards (on behalf of and at the direction of your child’s school) sending informational text messages closely related to the school’s mission.

You can always unsubscribe from receiving any of our 1) marketing emails or other marketing communications whenever you’d like by clicking the “Unsubscribe” link at the bottom of the email; 2) marketing SMS texts by replying ‘STOP’; or 3) marketing push notifications by turning off push notifications on your device.

You can further indicate your preferences by contacting us using the information in the “How can I contact KidRewards with questions?” section below. Please note that if you do not want to receive legal notices from us, such as this Privacy Policy, those legal notices will still govern your use of the Website, and you are responsible for reviewing those legal notices for changes.

Basically,

From time to time, we may send you useful messages about updates or new features. You can always opt-out of these messages if you’d rather we didn’t contact you.

If you decide to register for a KidRewards account through an authentication service, such as Google Login (“Authentication Service”), KidRewards may collect personal information that is already associated with your account connected to the Authentication Service. If you choose to provide such information during registration, you are giving KidRewards the permission to store and use such information already associated with your Authentication Service in a manner consistent with this Privacy Policy. Please note, that when using an Authentication Service for registering a student (or if a student is directly using their own Authentication Service), KidRewards will not request more information from the Authentication Service than name and email address unless specifically requested or chosen to be passed by the teacher or school to KidRewards. We will only use the email collected from student users for the purposes of login and account management. The Authentication Service may collect certain other information from you in your use of that particular service (such as G-Suite for Education). You may revoke KidRewards’ access to your account on any Authentication Service at any time by updating the appropriate settings in the account preferences of the respective Authentication Service. You should check your privacy settings on each Authentication Service to understand and change the information sent to us through each Authentication Service. Please review each Authentication Service’s terms of use and privacy policies carefully before using their services and connecting to our Service. Your use of Authentication Service is subject to the applicable third-party terms and privacy policies.

Basically,

We may allow for users to register on our Service through an authentication service (e.g. with Google Login). If you to choose to do so, we may collect personal information that is already associated with your connected authentication service and you give us permission to use and store this information consistent with this Privacy Policy. You can revoke our access to your account on this authentication service at any time by updating the appropriate settings in the account settings of the authentication service.

Please note, that when using an authentication service for registering a student (or if a student is directly using their own authentication service), KidRewards will not request more information from the authentication service than name and email address unless specifically requested or chosen to be passed by the teacher or school to KidRewards

The Service may contain links to websites, applications, services, or other content provided by third-parties (e.g., video players). Your use of these features may result in the collection, processing and sharing of information about you, depending on the features. Any information, including personal information, you choose to provide or that is collected by these third-parties is subject to that third-party’s policies governing privacy and security and is not covered by our Privacy Policy.

These other websites may place their own cookies or other files on your computer, collect data or solicit personal information from you, including if you view a video through an embedded video player which is played off our Service, but may appear to still be playing on our Service. The fact that we link to a website or other third-party content is not an endorsement, authorization or representation that we are affiliated with that third-party, nor is it an endorsement of their privacy or information security policies or practices. We are not responsible for the content, features, privacy and security practices and policies of any third-parties. We encourage you to learn about third-parties’ privacy and security policies before providing them with personal information.

Basically,

Links to other websites and services as well as embedded video players may be found within the Service — this Privacy Policy does not apply to those.

We may occasionally update this Privacy Policy as our business practices and legal requirements evolve or to further protect our users. You can see when the last update was by looking at the “Last Updated” date at the top of this page. We won’t reduce your rights under this Privacy Policy without your explicit consent. If we make any significant changes, we’ll provide prominent notice by posting a notice on the Service and/or notifying you by email (using the email address you provided), so you can review and make sure you know about them.

In addition, if we ever make material changes to the types of personal information we collect from children, or how we use it, we will notify parents in order to obtain parental consent or notice for those new practices and provide schools with the necessary information about these changes where they have obtained parental consent (or acted as the agent of the parent and provided consent on their behalf).

We encourage you to review this Privacy Policy from time to time, to stay informed about our collection, use, and disclosure of personal information through the Service. If you don’t agree with any changes to the Privacy Policy, you may terminate your account (although we’ll be sad to see you go!). By continuing to use the Service after the revised Privacy Policy has become effective, you acknowledge that you accept and agree to the current version of the Privacy Policy.

Basically,

We will let you know by email and/or on our website when we make significant changes to our Privacy Policy. If we make material changes to the types of personal information we collect from children, or how we use it, we will notify parents, or ask for their consent and provide schools with the necessary information about these changes where they have obtained parental consent (or acted as the agent of the parent and consent on their behalf).

KidRewards processes personal information both as a Processor and as a Controller, as defined in the GDPR:

When teachers, school leaders, and parents enter information directly into our Service, or when parents or students use our Features outside of the school context, KidRewards will generally be the Controller for the user data, as outlined above in “What information does KidRewards collect?” section. However, in certain circumstances, where requested by the student’s school, KidRewards will be the Processor, and will only delete records per the school’s specific instructions and will request that you make any requests for access, correction or deletion of personal information through the school. KidRewards will respond to such requests when received from the school. Please see KidRewards’ policy on data retention and deletion.

KidRewards is hosted and operated in the United States. If you use the Service or the KidRewards Website from the European Union or the United Kingdom, or any other region with laws governing data collection, protection and use that may differ from United States law, please note that you may be transferring your personal information outside of those jurisdictions to the United States. Where we transfer, store and process your personal information outside of the United Kingdom, European Union or EEA, we have ensured that appropriate safeguards are in place to ensure an adequate level of protection for the rights of data subjects based on the adequacy of the receiving country’s data protection laws, or EU-US and Swiss-US Privacy Shield principles.

By using the Service, you consent to the transfer of your personal information outside your home jurisdiction, including to the United States, and to the storage of your personal information in the United States, for the purpose of hosting, using and processing the personal information in accordance with this Privacy Policy. You further acknowledge that these countries may not have the same data protection laws as the country from which you provided your personal information, and that KidRewards may be compelled to disclose your personal information to U.S. authorities. You have the right to withdraw your consent at any time by contacting us as described in the “Contacting KidRewards” section below.

Basically,

Our servers are located in the U.S., so if you are using the Service from any other country, your data might be transferred to the U.S.

Canada

We endeavor to provide privacy protection that is consistent with Canada’s private sector privacy laws, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”). For any questions regarding how we comply with PIPEDA, please contact us at contact@gmail.comkidrewards.org .

Basically,

KidRewards works hard to provide privacy protections consistent with PIPEDA in Canada.

Your Rights and Choices:

If you are a California resident you have the right to request that KidRewards disclose certain information to you about our collection and use of your personal information over the past twelve (12) months.

California consumers also have specific rights of access, deletion and data portability regarding their personal information under the CCPA. If you are a California resident you have the right to request that KidRewards provide the specific pieces of information that we have collected about you. You also have the right to request deletion of your personal information collected or maintained by KidRewards. We provide these same rights to all users. Please see the [KidRewards’ commitments to providing Transparency and Your Rights] Sectionfor more detail on how to exercise these rights, including how we will verify requests. If you are a California resident, you may also designate a natural person or business entity registered with the California Secretary of State to act on your behalf to exercise these rights.

We will not discriminate against you for exercising any of your rights under CCPA. Unless permitted by the CCPA, we will not: Deny you goods or services. Charge you different prices or rates for goods or services, including granting discounts or other benefits, or imposing penalties.
Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably related to your personal information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.

Basically, If you are a California resident, the CCPA affords you certain rights of access, deletion and data portability - which we also extend to all users. Please see the [KidRewards’ commitments to providing Transparency and Your Rights] Section for more detail on how to exercise these rights, including how we will verify requests. We will not discriminate against you for exercising any of your rights under the CCPA. Additionally, if you are a California resident you are entitled to certain disclosures regarding our collection and use of your personal information over the past twelve (12) months.

Do Not Sell: As stated throughout this Privacy Policy, KidRewards does not sell, and will not sell, personal information of any KidRewards Services user to any third-party for any purpose - including for advertising or marketing purposes. Furthermore, we do not share or disclose personal information with any third-parties except in the limited circumstances described in this Privacy Policy and as set forth here.

Do Not Track: Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers to inform websites and services that they do not want certain information about their webpage visits collected over time and across websites or onlines services. However, we do not recognize or respond to browser-initiated DNT signals, as the Internet industry is still working to determine what DNT means, how to comply with DNT, and how to create a common approach to responding to DNT. For more information on “do not track,” please visit www.allaboutdnt.org.

Third-parties that have content embedded on the Service, such as a social feature, or an embedded video player, may set cookies on a user’s browser and/or obtain information about the fact that a web browser visited the Service from a certain IP address. Third-parties cannot collect any other personally identifiable information from the Service unless you provide it to them directly.

Basically,

The KidRewards Service does not track our users over time across third-party websites to provide behaviorally-targeted advertising and thus does not respond to Do Not Track signals.

If you are under the age of 18, or the parent of a child using KidRewards under the age of 18 residing in California, you are entitled to request removal of content or information you (the minor) have publicly posted on our Service. Currently, we do not allow minors to post content to share publicly, but we do still allow minors (or the minor’s parents if under 13) the option to delete personal information associated with their user accounts or content that they upload through their student account (which is not shared publicly (only the student’s parents, teachers, or school leaders can view). If you are a minor, or the parent of a minor under 13, and would like to delete personal information associated with your account or content you uploaded through your account, please follow the directions set forth in the “KidRewards’ commitments to providing Transparency and Your Rights” section, which may include the need to contact your school first. Although we offer deletion capabilities on our Service, you should be aware that the removal of content may not ensure complete or comprehensive removal of that content or information posted through the Service, as there may be de-identified or recoverable elements of your content or information on our servers in some form. Additionally, we will not remove content or information that we may be required to retain at the direction of the school or under applicable laws.

Basically,

If you are a minor or parent of a minor, you may delete information per the "How can I delete my account?" section.

Pursuant to California Civil Code Section 1798.83(c)(2), KidRewards does not share personal information with third parties for their own direct marketing purposes unless you affirmatively agree to such disclosure. California customers can receive more information about our compliance with this law or to make a request under California Civil Code Section 1798.83 by sending us an email at contact@gmail.comkidrewards.org or by writing to us as set forth in “How Can I Contact KidRewards with Questions” section below:

If you have any questions or concerns about this Privacy Policy or how we protect our community, please contact us at contact@gmail.comkidrewards.org - we'd love to help. If you’d like, you may also write to us at:

Basically,

Questions? We're here to help! Email us any time at contact@gmail.comkidrewards.org .