Last updated: October 20, 2020.
We believe you should always know what data we collect from you and how we use it, and that you should have meaningful control over both. We want to empower users to make the best decisions about the information that they share with us. We have a Student Data Protection Addendum, an agreement we enter into with schools, that further describes our duties, responsibilities, and commitments with respect to Student Data that we collect or receive.
You should read this policy in full, but here are a few key points:
How We Use the Information We Collect: We use the personal information we collect from students (or about students from teachers) to provide and improve the Service, for educational purposes, security, and safety purposes, or as required by law. We will not require children to provide more personal information than is reasonably necessary in order to participate in the Service. See here for more information on our use of information collected from students, and children using the service not connected to a school (“Outside School Child User”), and here for additional information on our use of information collected from teachers, parents, and school leaders .
Data Retention: We will not retain student personal information for any longer than is necessary for educational purposes and legal obligations, or to provide the Service for which we receive or collect the student personal information. Additionally, we protect students with our Data Protection Policy: (1) we collect only minimal information from students necessary to register for the Service, (2) we automatically delete their points awarded in school after a year, and (3) we delete Students’ Accounts if they’re inactive for more than twelve months. Note, however, some content within a Student Account will be kept after deletion of the account for school legal compliance reasons (e.g., maintenance of “education records” under the Family Educational Rights and Privacy Act (FERPA) or “Student Data” under state student privacy laws) and will not be deleted until we receive direction from the school. We store non-student user personal information, including content uploaded by Outside School Child Users, for as long as it is necessary to provide products and Service to you and others. For non-student users (as well as Outside School Child Users), personal information associated with your account will be kept until your account is deleted or until we no longer need the data to provide the Service, whichever occurs first. Note, however, that some content uploaded by a teacher, school leader, or parent may also be kept after the deletion of the account for school legal compliance reasons (e.g., maintenance of “education records” under FERPA or “Student Data” under state student privacy laws) and will not be deleted until we receive direction from the school. See here for more details.
What Student Information is Shown Publicly? No student’s account, or Outside School Child User’s account (“Outside School Child Account”), profile, or information is made available or visible to the public through KidRewards. Only the student, the student’s parents, and the student’s teachers or school leaders can see the student’s (or Outside School Child User’s) profile and portfolio. No child can upload content (such as a response to an activity, photo, video, drawing, journal entry, or document) to the Service on Portfolios except through their account. This can’t happen for children without either (1) the parent providing parental consent directly to KidRewards or (2) the child’s teacher representing to KidRewards that they have obtained any necessary parental consent , including acting as the agent of the parent if their school policy allows. Parents may see points awarded in school. Parents may also award points, goals and rewards that are only viewable by the child and the child’s parent(s), or those that the parent allows access to.
Classes, goals, points, progress and rewards are visible by students, teachers, parents, and school leaders who have logged into their accounts and are associated with that particular class or school. They are not viewable by the general public. Parents, teachers and school leaders can add content or comments to these stories, but students can only view or like content on these stories and are only able to do this once either the school or KidRewards has obtained parental consent, if under 13. If any user needs to report any abuse or inappropriate content on a Class Story or School Story that has not been addressed by the connected teacher or school, they may do so by emailing at email@example.com . Teachers may share their classes, goals and rewards, with other teachers or school leaders in their school.
You own your data: We don’t own any content or information you provide or we receive - you (students, parents and/or schools) will own your content and information.
Security and Privacy by Design and Default: We use security industry best practices to protect personal information, including using encryption and other security safeguards to protect personal information. We design products with security and privacy in mind from day one. See here for more information.
Transparency and Choice: We will be transparent about our practices, so that you can make meaningful choices about how your personal information is used. If we make a material change, we will provide prominent notice by posting a notice on our service or this website page and/or we will notify you by email (if you have provided an email address to us). See here for more information.
Right to Access, Correction, and Deletion of Data: We support access to, correction, and deletion of student personal information by the student or their parent or legal guardian, either by 1) assisting the school in meeting its requirements for access, correction and deletion or by responding to requests we receive from schools, or 2) directly responding to requests from parents when the information is collected directly from a child and KidRewards obtains the parent consent (not the school) - such as when they are using our Premium Features or Outside School Child Account. Teachers, parents, school leaders and other users can contact us at contact@here for more information on all user’s rights, including about your additional rights of data portability and right to object or withdrawal consent.kidrewards.org from the email used to create your account. See
Last updated: October 20, 2020.
- What information KidRewards collects from you (and why we collect it),
- How we use and share that information,
- The choices and rights you have, including how to access, update, delete your information, and take your information out of KidRewards.
This policy applies to all products and services offered by KidRewards, Inc. (“KidRewards,” “we,” “us,” “our,” and our subsidiaries or affiliates). KidRewards may be acting as both a Controller and a Processor as those terms are defined under the European Union’s General Data Protection Regulation (“GDPR”). For more information, please see below.
This policy does not apply to websites or services or practices of companies that KidRewards doesn’t own or control, such as third-party services you might access through links or other features (e.g., social media buttons or YouTube videos) on the Service. These other services have their own privacy policies, and we encourage you to review them before providing them with personal information.
Protecting children’s privacy is especially important to us - we’re educators and parents ourselves, after all.
KidRewards collects the minimal amount of information from students and Outside School Child Users necessary to register for an account on the Service. This information is necessary to enable us to comply with legal obligations and given our legitimate interest in being able to provide and improve the Service and for security and safety purposes. Additionally, KidRewards follows the Federal Trade Commission’s (FTC) COPPA rules for parental consent, including, where applicable, the use of which is commonly referred to a “school consent” if a school or teacher elects to utilize KidRewards in the classroom.
Student Account and Outside School Child Account Creation
Currently Student Accounts are created in the following ways: (1) by the student’s parent; (2) by the student’s teacher; or (3) by the student themselves if the teacher elects to provide the student with a unique code. A parent may also set up an Outside School Child Account.
(1) By the parent: When a parent sets up a Student Account for their child, they will first need a parent account. In order to set up a parent account and be connected to their child’s school, parents must first receive the unique parent code provided to their child by their child’s teacher or sent through an email/SMS invitation directly from the teacher containing the unique parent code or choose their child’s teacher from the list shown from within the KidRewards App or KidRewards Website (the request to join the class must still be approved by the teacher). Parents can also set up their account without this unique access code, but will not be connected to their child’s school (or any activity on their child’s account in school. In accordance with COPPA, we may ask the parent to provide the date of birth or age of their child, and if the child is under 13, we will also then seek to obtain verifiable parental consent in order to proceed with creating their child’s account. If a parent is connected to their child’s school, we don’t ask the child’s parent for any additional information regarding their child during the Student Account creation, but link the account to the name and information provided by the child’s teacher. If the parent is not connected to their child’s school, the parent may provide their child’s first and last name (at the option of the parent) and can create the Outside School Child Account. Once we have obtained parental consent, the child’s account will be set up. Although not required under COPPA, we may choose to impose parental consent requirements on students and Outside School Child 13 and above at our discretion.
(2) By the student’s teacher: If a student’s school or teacher elects to utilize Student Accounts in school or otherwise sets up a student’s account, the school will be responsible for obtaining any necessary parental consent under COPPA (including if they choose to act as the agent of the parent and consent on the parent’s behalf - commonly referred to as “school consent” under COPPA) to create the Student Account on behalf of the student and let students access their accounts. The teacher will provide the student’s name to set up the account. The student's email is optional, and only used to reset the student's password. Teachers may choose to allow students to log in on the Service using their Google for Education or other Google Accounts (“Google Login(s)”). We don’t ask students to enter any other personal information for their account registration when a teacher sets up their account. Please note that if you, as a parent, provide an email to the school when the school is obtaining parental consent , we may send an email out to you asking you to verify your child’s account, but you will not receive any other emails unless you have opted in to email marketing or have separately created an account on our Service. For more information on school consent, please see the FTC’s COPPA FAQ’s.
(3) By the student: Alternatively, a teacher may choose to allow students to set up their own Student Account using the unique code provided by the teacher. When students set up their own KidRewards Student Account, the teacher sets up a unique username, a password and optionally an email. Consistent with the requirements of COPPA, we also ask for the child’s age, and a parent or guardian email address from the child so we can seek verifiable parental consent or provide parental notice (as applicable). We will not use parent emails provided this way to market our Service to the parent, unless the parent has opted in to email marketing or has separately created an account on our Service. We don’t ask students to enter any other personal information when setting up an account.
We never request precise location data from students and no student location data is available publicly. From students, the primary form of location data is based on IP Address.
In addition to the information listed above, we automatically collect some information from any use of our Service as set forth in the "Information collected automatically" section, this includes device data (such as platform, app version and device ID) and product event data (such as the last activity a child started or whether they viewed a certain report). These are collected for internal analysis on product usage and quality and we may also use it to track progress in the Service, and for sending push or email notifications to the child (as set forth below) to encourage them to take certain actions in the KidRewards Service.
We also receive from the child’s teacher (and link to the student’s account) whatever name he or she has provided for the student, the student’s grade, the points given by that teacher, and content uploaded by the teacher to the student’s portfolio (such as student responses to activities and Portfolio Comments). Teachers can choose to provide full names for students (e.g., first name and last name) when setting up their class; they can also opt to only provide non-identifying information (e.g., just first name and seat number).
We use the information we collect from students and Outside School Child Users to provide and improve the Service to the child, for educational, security and safety purposes, as required by law, or to enforce our Terms. . We will not require children to provide more personal information than is reasonably necessary in order to participate in the Service. If we discover that we have collected information from a child in a manner inconsistent with COPPA, we will take appropriate steps to either delete the information, or immediately seek the parent's consent for that collection. We do not disclose any personal information about children to third-parties, except to service providers necessary to provide the Service, authorized school personnel (such as school leaders) as directed by the child's school, as directed by the child’s parents, as required by law, or to protect the security of the Service or other users. Information collected from students (including personal information and information collected automatically) is never used or disclosed for third-party advertising. We also do not place any third-party advertisements in student logged-in areas of the Service. Additionally, personal information collected from students is never used for behaviorally-targeted advertising to students by us or any third-party, and children’s personal information is never sold or rented to anyone, including marketers and advertisers. We may present contextually relevant educational content (not using student personal information) for either our own products (e.g. Premium Features) or third-party products and services ourselves that we believe may be of interest to a student or Outside School Child User.
We don’t ask for or require children to provide personal information beyond that which is reasonably necessary to use KidRewards. Information collected from students or Outside School Child Users is never used or disclosed for third-party advertising or any kind of behaviorally-targeted advertising, and it is never sold or rented to anyone, including marketers or advertisers.
KidRewards may send push notifications to students or Outside School ChildUsers- for example, letting them know when their weekly report is ready, or telling them about an achievement milestone they reached! We require children provide a parent’s email address before he or she can receive push notifications from KidRewards (or have a Student Account or Outside School Child’s Account previously set up on KidRewards by their parent or teacher, with any necessary parental consent obtained). We will then provide the parent with notice (if the account was set up by them or their child) and provide the parent the opportunity to prevent further notifications. The device identifier for a child’s account will only be associated with other personal information once parental consent is provided. If you are a student or a parent of a child and no longer want these communications to be sent, please either turn off the push notifications on your device, or contact us at contact@ kidrewards.org .
Before ever sending a push notification to a child, if the child or the parent sets up the child’s account on the Service, we will provide notice to parents, or obtain parental consent. We rely on teachers to obtain any necessary personal information if they set up the child’s account. Parents can always opt-out (or withdraw consent) later as well by turning off the push notifications on their child’s device or contacting us at contact@ kidrewards.org .
What Children’s Information is Visible to Others?
No Student’s Account , or Outside School Child’s Account, profile, or portfolio is made available or visible to the public through KidRewards. Only the student, the student’s parents, and the student’s teachers or school leaders can see the student’s profile and portfolio. No child can upload content (such as a photo, video, drawing, journal entry, or document) to the Service except through their Student Account, or if their parent has allowed their child access in their Student Account or Outside School Child’s Account. This can’t happen for children without either (1) the parent providing parental consent directly to KidRewards or (2) the child’s teacher representing to KidRewards that they have obtained any necessary parental consent , including acting as the agent of the parent if their school policy allows. If a student adds content to their account in the classroom, students can’t view each other’s individual Student Accounts or portfolio unless they have intentionally chosen another student’s name from the list of names shown to them while logging in or viewed the camera roll locally on the device that may be saving photos and videos taken by students. Parents are able to view their own child’s account (through their own parent account) after the teacher has approved the student-submitted content. Please note that parents may not see prior drafts of the student-submitted content prior to the final teacher approval that allows parents to access and view and may not see all points awarded by the teacher in school if the teacher has elected not to show these.
Teachers may share their classes , including points, goals and rewards, with other teachers or school leaders in their school. Please note that if the teacher chooses to project their own KidRewards teacher account in their classroom, students physically present in that classroom may see other students’ names and total points - this is similar to how paper-based sticker charts displayed in a classroom might work. Teachers, however, can choose to never project or display their own teacher account in class, and therefore keep student points and progess private for each student, their teacher(s), and their parents — and many do!
Content uploaded by children or Points, Rewards, or Goals awarded Outside School Child’s Account is viewable by the parent and any children accessing such Features within their respective accounts; the content is not viewable by the child’s teacher or other students.
By default, the full set of feedback and content posted, to a Student’s Account is private to the student, their teacher(s), school leader, and their parents (once the content is approved by the teacher). If a teacher displays their teacher account publicly in class, then students may see other students’ total points, goals and rewards. Parents can view all teacher-approved posts.
Content uploaded or Points, Rewards, and Goals awarded within non-school accounts is viewable by the parent and the children accessing such Features within their respective accounts; the content is not viewable by the child’s teacher or other students.
How Long Does KidRewards Keep Children’s Information?
We will not retain a child’s personal information for any longer than is necessary for educational purposes or legal obligations, or to provide the Service for which we receive or collect the child’s personal information. Additionally, we only keep a child’s personal information for as long as his or her Student Account or Outside School Child Account is active , unless we are required by law or the child’s school (for Student Accounts) to retain it, need it to ensure the security of our community or our Service, or to enforce our Terms. More specifically, KidRewards operates a 3-tier student data protection policy to protect all students’ (not just children’s) information (“3-Tier Student Data Protection Policy”):
Minimal information: KidRewards collects the minimal amount of information from students necessary to use the Service. For more information, see above. In addition to the information entered by the child, we automatically collect some information from any use of our Service as set forth in the “Information collected automatically” section.
One year deletion policy for points:To protect students, KidRewards sets limits on how long students’ points given in the classroom are retained. For all students, points older than 12 months are automatically deleted. For example, if a teacher sets up a class on KidRewards on January 1, 2020, on January 1, 2021 any points added in that class on or before January 1, 2010 would be deleted (and will continue to be deleted on an ongoing basis as each point reaches 12 months in age) regardless of whether or not a student has his or her own account (and if that account is active). This means points cannot exist long-term. Teachers can also delete points at any time. For more information on points that parents can award Outside School, please see our FAQ .
Deleting inactive Student Accounts:If a student’s Student Account is inactive for twelve months or more (meaning no teacher has given feedback to the student, added content to a student’s portfolio, or messaged with the student’s parent(s), and neither the parent(s) nor the student have logged into their accounts), KidRewards will automatically delete the Student Account. . Please note that certain content 1) within a Student Account or student portfolio (uploaded by the student, teacher or parent), such as photos, videos, Student Activity Responses or Portfolio Comments, or 2) uploaded by a teacher, school leader, parent, or student through Class Story or School Story may be kept after deletion of a Student Account as we are required to retain these at the direction of the school (e.g., for legal compliance reasons such as maintenance of “education records” under FERPA or “Student Data” under state student privacy laws).
We only keep a child’s personal information for as long as the account is active , unless we are required by law or the child’s school (for Student Accounts) to retain it, need it to enforce our policies, or to ensure the security of our community. Additionally, we protect students with our industry-leading 3-Tier Student Data Protection Policy: (1) we collect only minimal information from students necessary to register for an account on the Service, (2) we automatically delete their points given in the classroom after a year, and (3) we delete Students’ Accounts if they’re inactive for more than twelve months. Please note that this does not include certain content uploaded by the teacher, parent, or student to the portfolio that maybe considered an “education record” under FERPA or other state student privacy laws as we are required to retain these at the direction of the school. For more information on the deletion of content related to our Premium Features and Outside School Child Accounts (and not school based accounts or content), please see our FAQ .
Access, Correction and Deletion Rights
- If a child, with parental consent , sets up their own Student Account or Outside School Child Account or a parent or guardian sets up their child’s Student Account or Outside School Child Account: If your child’s Student Account or Outside School Child Account was set up directly by your child (with your consent) or you as their parent or legal guardian, set up their Student Account or Outside School Child’s Account, and you have a parent account connected to the student, you may access, review, correct, or delete any of your child’s personal information in the Service by emailing contact@ kidrewards.org with the same email used to create your parent account
Please note however, that any content uploaded (e.g., photos, videos, comments), that is requested as part of a Student Account, class at a school, or otherwise directed by your child’s teacher or school, is retained at the direction of the school (e.g., for legal compliance reasons such as maintenance of “education records” under FERPA); to correct or delete this content, please contact the appropriate official at your child’s school. If the school determines that the request should be implemented, the school may either make the change themselves or submit the request to KidRewards by emailing firstname.lastname@example.org
- If your child’s Student Account was set up by your child’s school: If your child’s school set up their Student Account directly and obtained your consent (or chose to act as an agent and consent on your behalf) and you do not have a parent account connected to your child, please contact the appropriate official at your child’s school to access, review, correct or delete any of your child’s personal information in the Service. If the school determines that the request should be implemented, the school may either make the change themselves or submit the request to KidRewards by emailing contact@ kidrewards.org . A parent or legal guardian who has a KidRewards parent account and is already connected to their child (but did not set up their child’s Student Account) may at any time contact KidRewards directly by emailing contact@ kidrewards.org with the same email used to create your parent account and review their child’s personal information in the Service, but correction or deletion requests should still be made to the child’s school first.
For either method described above, we will use commercially reasonable efforts to process such requests in a timely manner consistent with applicable law. We will need to verify your identity, for example by requiring that you provide acceptable forms of personal identification as set forth in our FAQ.
Stop Collecting Further Personal Information
Additionally, at any time, for Outside School Children Accounts, you can refuse to permit us to collect further personal information from your child by emailing contact@ kidrewards.org from the same email used to create your parent account. Please keep in mind that deleting records may require us to terminate the account in question.
We believe parents who have set up their child’s Student Account or Outside School Child Account, should always be able to delete their child's account, request for us to delete their child’s personal information, or obtain a copy of their child's personal information. Just email us at email@example.com from the same email used to create your parent account. Please note, however, that certain content uploaded by your child in their Student Account (in the classroom or otherwise directed by their teacher) is retained at the direction of the school for legal compliance reasons and you will need to first contact the appropriate official at your child’s school to correct or delete this information and we will have to receive this request from the school. If your child’s teacher set up their Student Account directly, and you do not have a KidRewards parent account, please send your request to your child’s school - we will process requests we receive from the school in a timely manner. If your child’s teacher set up their Student Account directly and you do have a KidRewards parent account, we are happy to respond directly for your requests to access and review your child’s personal information, but you will need to contact your child’s school first for any correction or deletion requests.
We collect two types of information about you: (1) information that you voluntarily provide us by using the Service (described below under “Information you provide to us”) and (2) information collected automatically as result of your use of the Service (described below under “Information collected automatically”). We may also receive information about you from third-party sources (as described below under “Information Received from Third-Party Sources”). The types and amounts of information collected will vary depending on whether the user is a teacher, school leader, parent, student or Outside School Child User (e.g., we collect minimal information from students and Outside School Child User’s to register for an account on our Service) and how they use KidRewards (e.g., if teachers join their school, we may need to collect school address information).
KidRewards asks for some limited information directly from teachers, school leaders, parents, Outside School Child Users and students (such as account information), and also collects some information automatically (such as crash reports when errors occur) in order to provide you with the best possible KidRewards experience.
Information you provide to us
We ask for and collect the following personal information about you when you use the Service. This information is necessary for the adequate performance of the contract between you and us, for our legitimate interest in being able to provide and improve the Service, and to allow us to comply with our legal obligations. Without it, we may not be able to provide you with all the requested services.
There are currently four categories of users on our Service: teachers, school leaders, parents, and students (including those Outside School Child Users who use the Services outside of school with our Premium Features). We describe the information collected from students and Outside School Child Users in the “How We Protect Children’s Personal Information” section above; for other users, we collect and store the following types of information from each type of user:
Account Sign-up and Profile Information: To create a KidRewards account as a teacher, school leader, or parent, you may be asked to provide some basic information such as your first and last name, email address and password. If a student’s teacher is creating the Student Account on behalf of the student, they will provide the student’s name and grade. This same information is also used to create the Student Account on the parent’s behalf (the parent does not currently need to provide any additional personal information of their child if a parent is connected to the school with the unique parent code). If the parent is creating their child’s account and is not connected to their child’s school, they may provide additional information about their child (such as first and last name). Teacher and school leader profiles may be viewed by other teachers and school leaders in the same school; however, no teacher, parent or student profile is made available or visible to the general public through the functionality of our Service.
School Information and Collaboration Features: If you are a teacher or school leader, as part of the profile information you provide, you may choose to associate your account with an existing school or may enter a new school name and possibly your school’s address if we do not have it already. If you are using the Service as a teacher, school leader, or parent, we may ask you for permission to collect and store your precise geolocation information to help us identify schools located nearby for you, including to help connect your parent account to your child’s school (e.g., our “Find a Teacher” feature). This data is only temporarily captured and not stored beyond the initial search request for schools near the user and is not viewable by other users. By connecting you with your school, the Service may enable and provide additional collaboration features for teachers and school leaders within the same school (and parents of children at that school) such as adding photos, videos, and text updates for parents, students and other verified teachers.
Class Information: As a teacher, you enter the class year (e.g., first grade) and the names of the students in your class. It is the teacher’s choice what they enter here: for example, teachers could enter John S or John Smith. Alternatively, teachers can also upload a spreadsheet to the Service with the student’s first and last names, if they are already in a class of a verified teacher within the school. If a teacher opts to share the classes they set up on KidRewards with other teachers or school leaders in their school, such as teachers they co-teach with, then those teachers can also see that class’s information.
Messaging: As a teacher or school leader, you can privately message with individual parents that have signed up for the Service, or send broadcast messages to all parents at once.
As a parent, you can also message with your child’s teacher through KidRewards. As a teacher, school leader, or parent, your name may be displayed to the person with whom you are messaging, and if you are a teacher or school leader, you may receive a ‘read receipt’ showing how many parents have read your message. Please be aware that by using a broadcast messaging feature, , any messages, photos, videos or other content shared can be viewed by all parents, students (whose parents have provided verifiable parental consent to KidRewards (or the student’s teacher has represented they have obtained any necessary parental consent , and teachers and school leaders that are members of that class or school, respectively. In the case that a photo or video is shared showing a student who does not want photos taken of him/her (or whose parent does not want photos taken of him/her), the student or parent can contact us at contact@here. We will store messages, and any content sent with the messages (e.g., photos), to provide the Service, and to help teachers and school leaders keep a log of their communications with parents.kidrewards.org to remove it, subject to any photo or record being deemed an “education record” under FERPA. If a photo or video is considered an “education record” you will need to first contact your child’s school to request removal. For more information on when photos or videos are considered an “education record” please see the Department of Education’s guidance
When you send us a message using the "Contact Us" page, feedback link or via email, the email addresses and phone numbers collected are not further used to market to the individual beyond providing the services requested or responding to the requests.
We ask you for different types of information based on who you are (i.e., teacher, school leader, parent, and student) and which KidRewards features you use (e.g., sending a message between a teacher and a parent, or helping a teacher or parent join their school).
Information collected automatically
The technologies and information we automatically collect include:
Local storage: We may also use, collect, and store information and preferences locally on your device using mechanisms such as browser-based web storage (including HTTP cookies and HTML5) and application data caches.
Like many services, KidRewards (or our service providers) uses both local storage and cookies and other similar technologies to analyze trends, gather demographic information about our users, understand your engagement with the Service, administer the Service, tailor the Service for you, and to help the Service work better for you - for example, by remembering your language preferences.
Device information: We collect device-specific information such as your device type, device brand, operating system, hardware version, device settings, file and software names and types, battery and signal strength, and device identifiers. This helps us measure how the Service is performing, improve KidRewards for you on your particular device, and send you push notifications if you’ve opted in to receive them.
Mobile application information: Certain mobile applications or “apps” include a unique application number. This number and information about your installation (for example, the operating system type and application version number) may be sent to KidRewards when you install or uninstall that application, such as when you install the KidRewards App, when you open the application, or when that application periodically contacts our servers, such as for automatic updates. Additionally, we may receive application state and crash log information which will help us debug and improve the KidRewards App.
Server log information: Like most online services, when you use our Service we automatically collect and store certain information in our server logs. Examples include things like:
Details of how you used our Service, such as your activity on the Service (including product event data used to track progress or user activity), and the frequency and duration of your visits to the Service (similar to TV ratings that indicate how many people watched a particular show)
Telephony log information like your phone number and SMS routing information
Device event information such as crashes, system activity, hardware settings, browser type, browser language, the date and time of your request and referral URL.
This information helps us make decisions about what we should work on next - for example, by showing which features are most (or least!) popular and to send notifications to a device (such as push notifications if the user opted in) to encourage the user to finish an activity or start the next activity. We may use your IP address and share it with third parties to help diagnose problems with our servers, for security purposes, to manage the Service, to enhance the Services based on usage pattern data and, for analytics and for advertising. Third party sharing of IP address information for analytics and advertising is not allowed for student and Outside School Child Users.
- Location information: When you use our Service, we may collect and process information about your geographic location, for example based on your IP address. We collect both coarse (i.e., city-level) location data and precise location data. If we request precise geolocation information (“precise” meaning sufficient to identify street name and name of city or town) from you (such as when a teacher or parent is searching for a school), we ask for your explicit opt-in permission. We never request precise geolocation data from students.
We will not store or track your precise device location on an ongoing basis or without your permission. We do not share precise geolocation data with third-parties, other than our service providers as necessary to provide the Service. If you no longer wish to allow us to track your location information, you may opt-out at any time by turning it off at the device level.
First and foremost, you should know that KidRewards does not (and will not) sell or rent any of your, or your child’s, personal information to any third-party for any purpose - including for advertising or marketing purposes. Third-party advertising is not permitted on areas where users are required to log in to KidRewards and personal information collected from students is never used for behaviorally-targeted advertising to students (by us or third-parties). We may serve contextually relevant advertising for third-party products and services ourselves that we believe may be of interest to you (e.g., our co-created content with Yale University on Mindfulness).
We use the information we collect from you to provide you with the best KidRewards experience. Our use of information collected from students and Outside School Child users using the Service outside of school is set forth above in the section “What Information Does KidRewards Collect from Children, and How Is it Used“. More specifically, this information collected from non-students is used to:
Provide and improve the Service, for example by developing new products and features
Fulfill your requests and provide any information you request, such as responding to your emails, submissions, questions, comments, requests for information or customer support
Customize the Service for you, and improve your experience with it
Send you information about features on our Service or changes to our policies and Service
Communicate with you about your use of the Service, your account, or transactions with us
Send you security alerts, and support and administrative messages and otherwise facilitate your use of, and our administration and operation of the Service
Provide parents and teachers information about events, announcements, offers, promotions, products, including third-party products, and services we think will be of interest to you
Notify and contact contest and sweepstakes entrants
For any other purpose for which the information was collected (e.g., fulfilling Premium Features orders)
Most crucially, to protect our community by making sure the Service remains safe and secure, such as by detecting, investigating and preventing activities that may violate our policies or be illegal
We process this information given our legitimate interest in improving the Service and our users’ experience with it, in protecting the Service, where necessary for the adequate performance of the contract with you, and to comply with applicable laws.
Additionally, we will process your personal information for the purposes listed in this section related to marketing given our legitimate interests in undertaking marketing activities to offer you products and services that may be of your interest. You can opt-out of receiving marketing communications from us by following the unsubscribe instructions included in our marketing communications or changing your notification settings within your KidRewards account.
KidRewards doesn’t sell (and will not) or rent your information to third-parties, we don’t permit third-party advertising on KidRewards, and personal information collected from students is never used for behaviorally-targeted advertising to students. We use your information to provide and personalize the Service to you, optimize and improve our Service, communicate with you about our Service, and for security and safety reasons. We may also use the information provided by parents and teachers to provide parents and teachers information about events, announcements, offers, promotions, products, including third-party products, and services we think will be of interest to you.
Your KidRewards account is protected by a password. You can help us protect against unauthorized access to your account by keeping your password secret at all times. The security of your personal information is important to us. We work hard to protect our community, and we maintain administrative, technical and physical safeguards designed to protect against unauthorized use, disclosure of or access to personal information. In particular:
Our engineering team is dedicated to keeping your personal information secure
We perform application security testing; penetration testing; conduct risk assessments; and monitor compliance with security policies
We periodically review our information collection, storage and processing practices, including physical security measures, to guard against unauthorized access to systems
We continually develop and implement features to keep your personal information safe
When you enter any information anywhere on the Service, we encrypt the transmission of that information using secure socket layer technology (SSL/TLS) by default
We ensure passwords are stored and transferred securely using encryption and salted hashing
The Service is hosted on servers at a third-party facility , with whom we have a contract providing for enhanced security measures. For example, personal information is stored on a server equipped with industry standard firewalls. In addition, the hosting facility provides a 24x7 security system, video surveillance, intrusion detection systems and locked cage areas.
We automatically delete inactive student accounts after a specific period of time, as per our retention policy, described in the “How Long Does KidRewards Keep Children’s Information?” section.
We restrict access to personal information to authorized KidRewards employees, agents or independent contractors who need to know that information in order to process it for us, and who are subject to strict confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations
Although we make concerted good faith efforts to maintain the security of personal information, and we work hard to ensure the integrity and security of our systems, no practices are 100% immune, and we can’t guarantee the security of information. Outages, attacks, human error, system failure, unauthorized use or other factors may compromise the security of user information at any time. If we learn of a security breach, we will attempt to notify you electronically (subject to any applicable laws and school reporting requirements) so that you can take appropriate protective steps; for example, we may post a notice on our homepage (www.kidrewards.org) or elsewhere on the Service, and may send email to you at the email address you have provided to us. Depending on where you live, you may have a legal right to receive notice of a security breach in writing.
The security of your information is important to us, and we take it very seriously. We’re always adding safeguards to ensure the safety and security of KidRewards and our community of teachers, school leaders, parents, and students. You can help us out by keeping your password secret! When you enter information anywhere on the Service or the KidRewards Website, we encrypt the transmission of that information using SSL by default.
As you can see, we try to be transparent about what information we collect, so that you can make meaningful choices about how it is used. You control the personal information you share with us. You can access or rectify this information at any time. You can also delete your account. We also provide you tools to object, restrict, or withdraw consent where applicable for the use of personal information you have provided to KidRewards. We also make the personal information you share through our Service portable and provide easy ways for you to contact us.
You may exercise any of these rights described in this section by sending an email to firstname.lastname@example.org from the same email used to create your KidRewards account once you are signed into your KidRewards account. Please note that we may ask you to verify your identity before taking further action on your request, for example by requiring you to provide acceptable forms of personal identification .
At KidRewards, we believe that more transparency is better. We try to give you control, with easy settings and options, so that you can make good choices when it comes to your information and how it is used. We also set forth the ways in which you can exercise your rights to access, correct, and delete your personal information as well as your right to take information out of KidRewards and object or withdraw consent.
Access or correct your personal information
KidRewards aims to provide you with easy access to any personal information we have collected about you and give you easy ways to update it or delete it, unless we have to keep that information for legitimate business purposes (e.g., we need at least an email address for your account if you maintain an account with us) or legal purposes. You have the right to correct inaccurate or incomplete personal information concerning you (and which you cannot update yourself within your KidRewards account).
Managing Your Information: If you have registered for an account on KidRewards, you may update, correct, or delete some of your profile information or your preferences at any time by logging into your account on KidRewards and accessing your account settings page. You may have to verify your identity before you can do that. You may also, at any time, update, correct, or delete certain personal information that you have provided to us by contacting us at email@example.com from the email used to create your KidRewards account once you are signed into your KidRewards account. We will respond to your request within a reasonable timeframe.
Accessing Your Information: Upon request, KidRewards will provide you with information about whether we hold any of your personal information, and, If you are a user of KidRewards, you may request access to all your personal information we have on file by contacting us at firstname.lastname@example.org from the email used to create your KidRewards account. In some cases, we won’t be able to guarantee complete access due to legal restrictions - for example, you will not be allowed to access files that contain information about other users or information that is confidential to us.
Accessing Your Child’s Information: Visit our “Parental Choices” section to see how you can obtain copies of your child’s personal information.
We may reject requests for access, change or deletion that are unreasonably repetitive (more than two times per year for access rights), risk the privacy of others, or would be extremely impractical (for instance, requests concerning information residing on backup systems).
Where we can provide information access and correction, we will do so for free, except where it would require a disproportionate effort or if more than two times a year for access rights.
You have certain rights to access, update and correct your personal information. You can always access and manage your personal information through your KidRewards account, or by contacting us or your child’s school if they created your child’s account. Please see here for more information on accessing your child’s information.
How can I delete my account?
We hope you love using KidRewards now and always. However, if for some reason you ever want to delete your account (or your child’s account, if you are his or her parent), you can do that at any time by contacting us at email@example.com from the email used to create your KidRewards account If you are a parent, teacher, or school leader using the Service, you may also delete your account by logging into your account and accessing your account settings page.
When you delete your account, we delete your profile information and any other content you provide in your profile (such as your name, username, password, email address, and profile photos) and depending on the category of user you are (i.e., teacher, school leader, parent, or student), points awarded in school , Rewards and Goals awarded at home. Information that you have shared with others, others have shared about you, or content other users may have copied and stored, is not part of your account and may not be deleted when you delete your account. Additionally, please note, that even if your account is deleted, messages sent between teachers and parents are retained to assist schools with various recordkeeping or compliance obligations. This includes, for example, any content uploaded, including photos and videos on Messaging, Portfolios, which we consider messaging between parents and teachers. Additionally, some content within a Student Account, such as Student Activity Responses and other content uploaded by the student and/or teacher, will be kept after the Student Account is deleted for school legal compliance reasons (e.g., maintenance of “education records” under FERPA or “student records” under various state student privacy laws). If you would like this content deleted, please first put in a request to your (or your child’s) school. If the school determines that the request should be implemented, the school may submit the request to KidRewards by emailing firstname.lastname@example.org
We aim to maintain our services in a manner that protects information from accidental or malicious destruction. Because of this, even after you update or delete personal information you have provided us from our Service, your personal information may be retained in our backup files and archives for a reasonable period of time as necessary for our legitimate business interests, such as fraud detection and prevention and enhancing safety. If you are a California resident, we may also retain personal information as set forth under the California Consumer Privacy Act (“CCPA”).
For example, if we suspend a KidRewards account for fraud or safety reasons, we may retain certain information from that account to prevent that user from opening a new account in the future. Also, we may retain and use your personal information to the extent necessary to comply with our legal obligations.
You can always delete your account by visiting your account settings, or simply by contacting us. Please note that some content will not be deleted given various compliance and recordkeeping obligations schools have (e.g., maintenance of “education records” under FERPA or “student records” under various state student privacy laws). Please contact your (or your child’s) school if you would like all of this content deleted. If the school determines that the request should be implemented, they may submit a request to us.
Object, Restrict, or Withdraw Consent
Where you have provided your consent to the processing of your personal information by KidRewards you may withdraw your consent at any time by changing your account settings or by sending a communication to KidRewards specifying which consent you are withdrawing. Please note that the withdrawal of your consent does not affect the lawfulness of any processing activities based on such consent before its withdrawal. KidRewards provides parents and teachers with the opportunity to withdrawal consent or ‘opt-out’ of receiving any future marketing communications from KidRewards and its partners at any time. Please see the “What communications will I receive from KidRewards?” section below for more information. Additionally, you can always decline to share personal information with us, or even block all cookies. However, it’s important to remember that many of KidRewards’ features may not be accessible, or may not function properly - for example, we may not be able to remember your language preferences for you.
In some jurisdictions, applicable law may entitle you to require KidRewards not to process your personal information for certain specific purposes (including profiling) where such processing is based on legitimate interest. If you object to such processing KidRewards will no longer process your personal information for these purposes unless we can demonstrate compelling legitimate grounds for such processing or such processing is required for the establishment, exercise or defence of legal claims. Additionally, in some jurisdictions, applicable law may give you the right to limit the ways in which we use your personal information, in particular where (i) you contest the accuracy of your personal information; (ii) the processing is unlawful and you oppose the erasure of your personal information; (iii) we no longer need your personal information for the purposes of the processing, but you require the information for the establishment, exercise or defence of legal claims; or (iv) you have objected to the processing as set forth below and pending the verification whether the legitimate grounds of KidRewards override your own.
You have the right to withdraw consent for the collection of your personal information, and also opt-out of marketing communications from us. You may also be able to limit the ways in which KidRewards uses your personal information. Just email us at email@example.com and we’ll help you right away.
Additional Information or Assistance and Article 27 GDPR Local Representative
If you are located in the European Union or the EEA, you have a right to lodge complaints about the data processing activities carried about by KidRewards with KidRewards’ lead supervisory authority, the Information Commissioner’s Office. You can find their contact details here.
Pursuant to Article 27 of the GDPR, KidRewards, Inc. has appointed European Data Protection Office (EDPO) as its GDPR representative in the EU. You can contact EDPO regarding matters pertaining to the GDPR by sending an email to [email protected], using EDPO’s online request form, or writing to EDPO at Avenue Huart Hamoir 71, 1030 Brussels, Belgium.
If you're located in the EU and would like to make a complaint, contact our local authority here. Additionally, you can contact KidRewards’ appointed local representative in the EU, European Data Protection Office (EDPO) using their online request form.
We store your personal information for as long as it is necessary to provide the Service to you and others, including those described above. Personal information associated with your account will be kept until your account is deleted, unless we no longer need the data to provide products and services, in which case we will delete prior to you deleting your account.
Please note that we may have to retain some information after your account is closed, to comply with legal obligations, to protect the safety and security of our community or our Service, or to prevent abuse of our Terms. You can, of course, delete your account at any time. Additionally, please note that even if your account is deleted, messages sent between teachers and parents are retained to assist schools with various recordkeeping or compliance obligations. Additionally, some content uploaded by a teacher, school leader, or parent, including photos, videos, and Portfolio Comments on Messaging, Portfolios, Class Story, or School Story, are retained at the direction of the school (e.g., for legal compliance reasons such as maintenance of “education records” under FERPA or “Student Data” under various state student privacy laws) and will not be deleted until we receive direction from the school.
Student Users (including those who use the Services outside of school or Outside School Child Users):
Please see the “How Long Does KidRewards Keep Children’s Information?” for details on how long we retain data for student users.
We keep teacher, school leader, and parent personal information until your account is deleted, or until we no longer need it to provide you with the Service. We only keep student personal information for as long as the student’s account is active , unless we are required by law or the student’s school to retain it, or need it to protect the safety of our users. Additionally, for students, we have our 3-Tier Student Data Protection Policy that states how we delete students’ information after some time. Note that some content may be kept after an account (student, parent, or teacher) is deleted for school legal compliance reasons (e.g., maintenance of “education records” under FERPA).
If you registered on KidRewards, provided an email or phone number to us, or otherwise opted-in to receive communications from us, we may send you messages and updates regarding your account, including privacy and security notices, updates regarding the Service, and information regarding products, features or services from KidRewards (or third-parties we believe you may be interested in). These communications may include, but are not limited to, social media updates, SMS/MMS messages, push notifications, email, and postal mail. If you have an account with us, we’ll also use your email address to contact you for customer service purposes, or for any legal matters that arise in the course of business. We may receive a confirmation when you open an email from us if your device supports it. We use this confirmation to help us understand which emails are most interesting and helpful.
If you invite another person to join you on KidRewards by providing their email address or phone number, we may contact them regarding the Service using the appropriate form of communication. If they would prefer not to receive our communications, they may opt-out using the “Unsubscribe” or “STOP” instructions contained in those communications. If, as a parent/legal guardian of a student, you provided an email address or phone number to your child’s school, KidRewards, at the direction of the school, may send an invitation to join KidRewards via the email or phone number your student’s teacher provided KidRewards. The invitation may be sent via email or SMS/MMS text message. If, as a parent/legal guardian, you provide your telephone number to your child’s school, you are consenting to KidRewards (on behalf of and at the direction of your child’s school) sending informational text messages closely related to the school’s mission.
You can always unsubscribe from receiving any of our 1) marketing emails or other marketing communications whenever you’d like by clicking the “Unsubscribe” link at the bottom of the email; 2) marketing SMS texts by replying ‘STOP’; or 3) marketing push notifications by turning off push notifications on your device.
From time to time, we may send you useful messages about updates or new features. You can always opt-out of these messages if you’d rather we didn’t contact you.
Please note, that when using an authentication service for registering a student (or if a student is directly using their own authentication service), KidRewards will not request more information from the authentication service than name and email address unless specifically requested or chosen to be passed by the teacher or school to KidRewards
These other websites may place their own cookies or other files on your computer, collect data or solicit personal information from you, including if you view a video through an embedded video player which is played off our Service, but may appear to still be playing on our Service. The fact that we link to a website or other third-party content is not an endorsement, authorization or representation that we are affiliated with that third-party, nor is it an endorsement of their privacy or information security policies or practices. We are not responsible for the content, features, privacy and security practices and policies of any third-parties. We encourage you to learn about third-parties’ privacy and security policies before providing them with personal information.
In addition, if we ever make material changes to the types of personal information we collect from children, or how we use it, we will notify parents in order to obtain parental consent or notice for those new practices and provide schools with the necessary information about these changes where they have obtained parental consent (or acted as the agent of the parent and provided consent on their behalf).
KidRewards processes personal information both as a Processor and as a Controller, as defined in the GDPR:
When teachers, school leaders, and parents enter information directly into our Service, or when parents or students use our Features outside of the school context, KidRewards will generally be the Controller for the user data, as outlined above in “What information does KidRewards collect?” section. However, in certain circumstances, where requested by the student’s school, KidRewards will be the Processor, and will only delete records per the school’s specific instructions and will request that you make any requests for access, correction or deletion of personal information through the school. KidRewards will respond to such requests when received from the school. Please see KidRewards’ policy on data retention and deletion.
KidRewards is hosted and operated in the United States. If you use the Service or the KidRewards Website from the European Union or the United Kingdom, or any other region with laws governing data collection, protection and use that may differ from United States law, please note that you may be transferring your personal information outside of those jurisdictions to the United States. Where we transfer, store and process your personal information outside of the United Kingdom, European Union or EEA, we have ensured that appropriate safeguards are in place to ensure an adequate level of protection for the rights of data subjects based on the adequacy of the receiving country’s data protection laws, or EU-US and Swiss-US Privacy Shield principles.
Our servers are located in the U.S., so if you are using the Service from any other country, your data might be transferred to the U.S.
We endeavor to provide privacy protection that is consistent with Canada’s private sector privacy laws, including the Personal Information Protection and Electronic Documents Act (“PIPEDA”). For any questions regarding how we comply with PIPEDA, please contact us at firstname.lastname@example.org .
KidRewards works hard to provide privacy protections consistent with PIPEDA in Canada.
Your Rights and Choices:
If you are a California resident you have the right to request that KidRewards disclose certain information to you about our collection and use of your personal information over the past twelve (12) months.
California consumers also have specific rights of access, deletion and data portability regarding their personal information under the CCPA. If you are a California resident you have the right to request that KidRewards provide the specific pieces of information that we have collected about you. You also have the right to request deletion of your personal information collected or maintained by KidRewards. We provide these same rights to all users. Please see the [KidRewards’ commitments to providing Transparency and Your Rights] Sectionfor more detail on how to exercise these rights, including how we will verify requests. If you are a California resident, you may also designate a natural person or business entity registered with the California Secretary of State to act on your behalf to exercise these rights.
We will not discriminate against you for exercising any of your rights under CCPA. Unless permitted by the CCPA, we will not:
Deny you goods or services.
Charge you different prices or rates for goods or services, including granting discounts or other benefits, or imposing penalties.
Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably related to your personal information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.
Basically, If you are a California resident, the CCPA affords you certain rights of access, deletion and data portability - which we also extend to all users. Please see the [KidRewards’ commitments to providing Transparency and Your Rights] Section for more detail on how to exercise these rights, including how we will verify requests. We will not discriminate against you for exercising any of your rights under the CCPA. Additionally, if you are a California resident you are entitled to certain disclosures regarding our collection and use of your personal information over the past twelve (12) months.
Do Not Track: Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers to inform websites and services that they do not want certain information about their webpage visits collected over time and across websites or onlines services. However, we do not recognize or respond to browser-initiated DNT signals, as the Internet industry is still working to determine what DNT means, how to comply with DNT, and how to create a common approach to responding to DNT. For more information on “do not track,” please visit www.allaboutdnt.org.
Third-parties that have content embedded on the Service, such as a social feature, or an embedded video player, may set cookies on a user’s browser and/or obtain information about the fact that a web browser visited the Service from a certain IP address. Third-parties cannot collect any other personally identifiable information from the Service unless you provide it to them directly.
The KidRewards Service does not track our users over time across third-party websites to provide behaviorally-targeted advertising and thus does not respond to Do Not Track signals.
If you are under the age of 18, or the parent of a child using KidRewards under the age of 18 residing in California, you are entitled to request removal of content or information you (the minor) have publicly posted on our Service. Currently, we do not allow minors to post content to share publicly, but we do still allow minors (or the minor’s parents if under 13) the option to delete personal information associated with their user accounts or content that they upload through their student account (which is not shared publicly (only the student’s parents, teachers, or school leaders can view). If you are a minor, or the parent of a minor under 13, and would like to delete personal information associated with your account or content you uploaded through your account, please follow the directions set forth in the “KidRewards’ commitments to providing Transparency and Your Rights” section, which may include the need to contact your school first. Although we offer deletion capabilities on our Service, you should be aware that the removal of content may not ensure complete or comprehensive removal of that content or information posted through the Service, as there may be de-identified or recoverable elements of your content or information on our servers in some form. Additionally, we will not remove content or information that we may be required to retain at the direction of the school or under applicable laws.
If you are a minor or parent of a minor, you may delete information per the "How can I delete my account?" section.
Pursuant to California Civil Code Section 1798.83(c)(2), KidRewards does not share personal information with third parties for their own direct marketing purposes unless you affirmatively agree to such disclosure. California customers can receive more information about our compliance with this law or to make a request under California Civil Code Section 1798.83 by sending us an email at contact@ kidrewards.org or by writing to us as set forth in “How Can I Contact KidRewards with Questions” section below:
Questions? We're here to help! Email us any time at email@example.com .