The privacy of those who use this website or app is extremely important to us. We design and operate our technology and services with our users' protection and privacy in mind and make every effort to be transparent in our data collection and use practices.
We comply with the FTC's Children's Online Privacy Protection Act (COPPA), and support the goals and guidelines set forth by industry self-regulatory bodies and experts to providing online safety and privacy for children, households, parents, and schools. We also support districts and schools that are subject to compliance with the Family Educational Rights and Privacy Act (FERPA).
A note to minors: If you are under the age of 13, please get permission from your parent/legal guardian before using this website or app or sending any e-mail to us. You must be 18 or older to order a subscription to any of the OnlineExpert© websites or apps. We will not sell or market directly to minors and always seek parental or legal guardian's authorization whenever we identify that a minor attempts to purchase a OnlineExpert© product or service.
A note to schools and districts: Wherever we collect student identifiable information, we do so in support of the educational purposes for which OnlineExpert© is designed. Such information is only collected in conjunction with the use of OnlineExpert©.
For purposes of this Policy, we introduce the definitions of how we characterize users' information:
We collect the following types of information:
Information collected when subscribing: In the registration process of any of our subscription types, we ask our subscriber to provide us with first name, last name, and affiliation with a school or district (if applicable). Providing an email is optional. We use this contact information to send users service-related announcements on rare occasions when it is necessary or advisable to do so. For instance, if we perform routine maintenance, we might send an informational email. We may also use this contact information to request feedback on the use of our products and services, to be used to improve the products and services. We will always provide an option to opt out of such communications.
Username and password: Subscribers create a username and password in the registration process, or, if they prefer, we or their school may assign these for them. We use usernames and passwords of subscribers' accounts to authenticate logins, allow access to the paid content, and monitor subscription compliance. The username is also used to authenticate users when requesting technical support. The passwords are all encrypted when stored. For more information on our security practices, see "How We Store and Process Your Information" below.
Information collected automatically: We automatically receive and record information on our server logs from a user’s browser, including the user’s IP address. We use IP addresses to maintain a user’s session and we do not store them after the user’s session is over. We also use the IP address to check if a user is located in some countries outside of the United States where a country-wide log-in option is activated, and we do not store this information after the initial page load. We do not otherwise combine this information with other PII.
We do not collect a user’s web search history across third-party websites or search engines. However, if a user navigates to our website via a web search, their web browser may automatically provide us with the web search term they used in order to find our website. Our website does not honor "do not track" signals transmitted by users' web browsers, so we encourage you to visit these links if you would like to opt out of certain tracking: http://www.networkadvertising.org/choices or http://www.aboutads.info/choices/. If you do want to opt out using these tools, you need to opt out separately for each of your devices and for each web browser you use (such as Internet Explorer®, Firefox® or Safari®) on each device.
Third Parties: We may use a variety of third-party service providers, such as analytics companies, to understand usage of our services. We may allow those providers to place and read their own cookies, electronic images known as web beacons or single-pixel GIFs and similar technologies, to help us measure how users interact with our services. This technical information is collected directly and automatically by these third parties. If you want to opt out of third-party cookies, you may do so through your browser, as mentioned above in Information collected automatically.
Information collected when using OnlineExpert©: School and District licenses use the individual accounts system, called OnlineExpert© SMS, which allows students and their teachers to keep track of learning. Student and teacher accounts are organized by classrooms created by the teachers of the subscribing school. For these accounts, we ask the teachers to enter the first and last name of students and teachers, their username, the school they are associated with, and a security question for resetting their password. We also require the teachers' email for password recovery and for contacting them on support and service-related announcements. The only Personally Identifiable Information collected about students is their first name, last name, email (optional), and the students’ work under the account (student records). We store the data created in each student account ("Student Records"), such as the history of OnlineExpert© tests and activities they've completed. We do so for the purpose of enhancing teachers’ and students’ use of the website.
Emails received from users: We may retain certain information from users when they send us messages through our system or by email. We only use such information for providing the services or support requested.
Information collected when using a Skillify mobile app: Your website subscription may also provide access to the Full Access level of our mobile apps. If you choose to download any such app and log into it with your website subscription username and password, we collect limited usage information in connection with user logins in order to monitor subscription compliance. This information is maintained in accordance to this policy. We do not collect Personally Identifiable Information from users of the various Skillify applications. If you subscribe to a Skillify app with an in-app purchase subscription, we do not collect any user information.
Push Notifications on mobile apps: We send you push notifications on Skillify mobile apps from time to time in order to update you about any events or promotions that we may be running. If you no longer wish to receive these types of communications, you may turn them off at the device level. To ensure you receive proper notifications, we will need to collect certain information about your device such as operating system and user identification information. We also collect the user time zone as it’s set on the device to limit the time we send push notifications within a reasonable time of day. We do not combine this information with other PII.
Mobile Analytics on mobile apps: We use mobile analytics software to allow us to better understand the functionality of our Mobile apps Software on your phone. This software may record information such as how often you use the apps, the events that occur within the apps, aggregated usage, performance data, and where the apps were downloaded from. We do not link the information we store within the analytics software to any PII you submit within the mobile apps.
Parents and legal guardians of children under 13 who use any of the OnlineExpert© products have certain rights under the Children's Online Privacy Protection Act (COPPA), and OnlineExpert© recognizes those rights. Parents/guardians can consent to collection and use of a child's Personally Identifiable Information without consenting to the disclosure of information to third parties.
A child's participation or access to an activity on OnlineExpert© cannot be conditioned on him or her providing more information than is reasonably necessary for that activity, or any Personally Identifiable Information. OnlineExpert© does not collect Personally Identifiable Information from children under 13, without a parent or guardian's consent or school if applicable.
Schools or districts using OnlineExpert© maintain ownership of their Student Records.
Each school or district has access to a user-friendly administrator dashboard that allows direct control over the Student Records at all times. The administrator can create, update, review, modify, and deactivate individual accounts, and monitor logins in the individual accounts. Administrators are only those individuals explicitly designated by the school or the district. Schools and districts are required to appoint an administrator that will be responsible for the Student Records. Districts and schools are urged to safeguard the administrator's access information and keep it in strict confidence and notify us of any unauthorized use of password or account registered under their subscription.
The teachers using OnlineExpert© will only be able to access or use OnlineExpert© with an administrator login provided by their school or OnlineExpert©. Students will only be able to create or access their teacher's class with an Access Code provided by their teachers. Students will be able to store their activities, tests, and results with their teachers on their individual accounts. Students can only interact with teachers who created the OnlineExpert© class.
We encourage schools and districts using OnlineExpert© to notify parents that the product is used in their school. Parents can log into their children's accounts and access their records. If you are a parent or guardian of a student using OnlineExpert© with his or her school, you can request the login information from your child or their teacher. You are encouraged to use the student's login information and view all their activities and progress on the account at any time. Parents have a right to request the student's Personally Identifiable Information be deleted or request changes in his or her records if it is inaccurate or misleading by contacting the school or teacher or OnlineExpert© at email@example.com. Parents may also refuse to allow OnlineExpert© to collect further information from their children by contacting us at firstname.lastname@example.org.
We understand the obligation educational agencies, districts, and school systems have to comply with the Family Educational Rights and Privacy Act (FERPA) and we support schools in their compliance efforts and facilitate their alignment with FERPA.
Under the terms of our contracts with schools, we agree to act as a School Official as defined by FERPA, meaning that we:
Districts and schools are able to delete student Personally Identifiable Information at any time using the Administrator Dashboard as mentioned above. Once information is deleted, we do not retain any copies.
We may provide Personally Identifiable Information to our partners, business affiliates and third-party service providers who work for OnlineExpert© and operate some of its functionalities, such as hosting services, streaming services, and credit card processing. These third parties are well-known, established service providers, who are bound contractually to practice adequate security measures and only use your information for the sole purpose of providing the services. These third parties do not have an independent right to share your Personally Identifiable Information. We share Anonymous Information or De-Identified Information about our users for tracking analytical information when using third-party web analytical tools. We may use or share Anonymous Information or De-Identified Information for educational research purposes, to evaluate the educational benefit of using our services or to improve our services.
We reserve the right to disclose Personally Identifiable Information if we are required to do so by law or if we believe that disclosure is necessary to protect our rights, protect your safety or the safety or others, investigate fraud and/or comply with a judicial proceeding, court order, subpoena, or legal process.
We strive to maintain security policies and procedures that are designed to protect your information.
Our servers are located in a secured, locked, and monitored environment to prevent unauthorized entry or theft, and are protected by a firewall. The servers are located in a datacenter in the United States and backed up daily to a secure, US-based, offsite datacenter.
We take extra measures to ensure the safety of PII and Student Records and apply a Secure Sockets Layer (SSL) or HTTPS encrypting technology to establish and ensure that all data passed between the server and the browser remains encrypted.
Governance policies and access controls are in place to ensure that the information of each district or school or other subscriber is separated, and they are only able to access their own data.
Only limited OnlineExpert© personnel have access to the database, and they only access the database when necessary to provide services. Personnel with access to Student Records pass criminal background checks and periodic privacy training.
While we strive to maintain best industry-standard privacy and security practices, it should be noted that no industry system is failproof. In the event we learn of an actual data breach, loss, or disaster, we have established a Disaster Recovery Plan, which includes notifying the affected subscriber, and as appropriate, coordinating with the subscriber to support its notification of affected individuals, students and families when there is a substantial risk of harm from the breach or a legal duty to provide notification.
We carefully choose our business partners and associate only with reliable partners who demonstrate a commitment to users' privacy and who share our commitment to education.
If you are using this website or app outside the United States, you consent to having your information and data stored in the United States. If you are from any jurisdiction with laws or regulations governing the use of the internet, including collection, use and disclosure of personal data, different from those of the United States, you may only use this website or app in a manner lawful in your jurisdiction. If your use of this website or app may be unlawful in your jurisdiction, please do not use this website or app. If your use of OnlineExpert© may be unlawful in your jurisdiction, please do not use OnlineExpert©.
OnlineExpert© is committed to subjecting all personal data received from European Union (EU) member countries, in reliance on the Privacy Shield Framework, to the Framework’s applicable Principles. To learn more about the Privacy Shield Framework, visit the U.S. Department of Commerce’s Privacy Shield List. https://www.privacyshield.gov/list
OnlineExpert© is responsible for the processing of personal data it receives, under the Privacy Shield Framework, and subsequently transfers to a third party acting as an agent on its behalf. OnlineExpert© complies with the Privacy Shield Principles for all onward transfers of personal data from the EU, including the onward transfer liability provisions.
With respect to personal data received or transferred pursuant to the Privacy Shield Framework, OnlineExpert© is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, OnlineExpert© may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Under certain conditions, more fully described on the Privacy Shield website https://www.privacyshield.gov , you may invoke binding arbitration when other dispute resolution procedures have been exhausted.
Upon request OnlineExpert© will provide you with information about whether we hold any of your personal information. You may access, correct, or request deletion of your personal information by contacting us at email@example.com. We will respond to your request within a reasonable timeframe.
We constantly strive to provide the best services. Changes to this policy may be required to keep pace with changing technology and threats, and as new or changed services are released. We expect most such changes to be minor, but there may be cases where changes may be more significant. In such cases we will first provide prominent notice to users who are affected.
If we make material changes to how we collect and use Personally Identifiable Information from children under age 13, we will notify the school or the parents, as applicable, by email in order to obtain verifiable parental consent for the new uses of the child's Personally Identifiable Information.
If you wish to report a security breach, please contact us at firstname.lastname@example.org.
This policy was last updated on April 15th, 2020.