BrainPOP


Your Privacy is Important.

Your Data

  • We believe that schools, acting with parent permission, should determine whether any student data is collected and maintain control over that data.
  • Schools can use BrainPOP® without sharing any personal student data. Or, schools can choose to enable My BrainPOP™ to keep track of individual student learning.
  • The school account administrator can purge student data at any time.
  • We will never share identifiable data without your permission. We will never sell student data to a third party.
My BrainPOP is Safe
  • BrainPOP uses industry standard SSL to ensure that student data is encrypted and transmitted securely from end to end.
  • Teachers can monitor student accounts and student work.
  • Students cannot privately communicate with each other.
  • Parents can access their child's account at anytime.
Data Collection Improves Learning
  • If a school chooses to use My BrainPOP, teachers will gain valuable data on student performance and students will receive feedback on how to improve.
  • We also use anonymous and de-identified data to improve learning opportunities and continually make BrainPOP more effective.
FERPA Compliance
  • BrainPOP makes every effort to ensure consistency with the Family Educational Rights and Privacy Act (FERPA) policies. We also comply with Children's Online Privacy Protection Act (COPPA).
  • We have signed the K-12 School Service Provider Pledge to Safeguard Student Privacy.
Privacy Questions? We are happy to answer them. Please contact us at privacy@brainpop.com. Read our full Privacy Policy below.



Privacy Policy

Introduction
The privacy of those who use this website or app is extremely important to us. We design and operate our technology and services with our users' protection and privacy in mind, and make every effort to be transparent in our data collection and use practices.

We comply with the FTC's Children's Online Privacy Protection Act (COPPA), and support the goals and guidelines set forth by industry self-regulatory bodies and experts such as the Center for Media Education (CME), the Children's Advertising Review Unit (CARU) of the Council of Better Business Bureaus and other organizations devoted to providing online safety and privacy for children, households, parents and schools. We also support daistricts and schools that are subject to compliance with the Family Educational Rights and Privacy Act (FERPA).

This document explains what information we collect about users of this product, how we use this information, who we share the information with and other privacy and security issues. We encourage you to provide us feedback about our privacy policy at privacy@brainpop.com.

A note to minors: If you are under the age of 13, please get permission from your parent/legal guardian before using this website or app or sending any e-mail to us. You must be 18 or older to order a subscription to any of the BrainPOP® websites or apps. We will not sell or market directly to minors and always seek parental or legal guardian's authorization whenever we identify that a minor attempts to purchase a BrainPOP product or service.

A note to schools and districts: Wherever we collect student identifiable information, we do so in support of the educational purposes for which BrainPOP is designed. Such information is only collected in conjunction with the use of My BrainPOP™ (our individual accounts system), an optional feature that only schools and districts can opt into. Schools and districts can choose whether to allow their teachers and students the use of this feature.

Definitions
For purposes of this Policy, we introduce the definitions of how we characterize user's information:

"Personally Identifiable Information" or "PII" is information that can identify a user of this website, including e-mail, name and address. "Anonymous Information" is information that does not enable identification of an individual user. "De-Identified Information" is information from which all personally identifiable components have been removed. Unlike Anonymous Information, De-Identified information is initially collected as Personally Identifiable Information, after which we remove any identifying component to make the information anonymous.



What Type of Information Do We Collect and Why?

General
We collect the following types of information:

Information collected when subscribing: In the registration process of any of our subscription types, we ask our subscriber to provide us with name, email address, affiliation with a school or district (if applicable), phone number and billing information. We use this contact information to send users service-related announcements on rare occasions when it is necessary or advisable to do so. For instance, if we perform routine maintenance, we might send an informational email.

Username and password: Subscribers create a username and password in the registration process, or, if they prefer, we may assign these for them. We use usernames and passwords of subscribers' accounts to authenticate logins, allow access to the paid content and monitor subscription compliance. The username is also used to authenticate users when requesting technical support. The passwords are all encrypted when stored. For more information on our security practices, see "How We Store and Process Your Information" below.

Information collected automatically: We automatically receive and record information on our server logs from a user’s browser, including the user’s IP address. In addition, we use IP addresses to maintain a user’s session and we do not store them after the user’s session is over. We also do not otherwise combine this information with other PII.

We also use a standard feature found in browser software, called a "cookie", in order to establish and authenticate user session, enable access to paid content and monitor potential misuse of the accounts. We do not use cookies to collect Personally Identifiable Information nor do we combine such general information with other PII to identify a user. Disabling our cookies will prevent access to paid content and limit some of the features and functionalities of the website or app. To learn more about browser cookies, including how to manage or delete them, look in the Tools, Help or similar section of your Web browser, or visit allaboutcookies.org.

We do not collect a user’s web search history across third party websites or search engines. However, if a user navigates to our website via a web search, their web browser may automatically provide us with the web search term they used in ourder to find our website. Our website does not honor "do not track" signals transmitted by users' web browsers, so we encourage you to visit these links if you would like to opt out of certain tracking: http://www.networkadvertising.org/choices or http://www.aboutads.info/choices/. If you do want to opt out using these tools, you need to opt out separately for each of your devices and for each web browser you use (such as Internet Explorer®, Firefox® or Safari®) on each device.

Third Parties: We may use a variety of third-party service providers, such as analytics companies, to understand usage of our services. We may allow those providers to place and read their own cookies, electronic images known as web beacons or single-pixel gifs and similar technologies, to help us measure how users interact with our services. This technical information is collected directly and automatically by these third parties. If you want to opt out or third party cookies, you may do so through your browser, as mentioned above in Information collected automatically.

Information collected when using My BrainPOP™: As part of certain subscriptions, we offer schools and districts the option to use the individual accounts system, called My BrainPOP, which allows students and their teachers to keep track of learning. Student and teacher accounts are organized by classrooms created by the teachers of the subscribing school. For these accounts, we ask the teachers to enter the first and last name of students and teachers, their username, the class they are associated with and a security question for resetting their password. We also require the teachers' email for password recovery. The only Personally Identifiable Information collected about students is their name, class and student records. We do NOT collect students' emails or addresses. We store the data created in each student account ("Student Records"), such as the history of the movies they've watched, the quizzes and activities they've completed, snapshots they've taken on certain GameUp® games and feedback provided by the teacher to the student through My BrainPOP, to enhance teachers and students use of the website. Please see the Using My BrainPOP™ section below for additional privacy and security information for users of My BrainPOP.

Contact information for newsletter and surveys: On BrainPOP Educators™, a section of this website that is directed to adults, you may choose to register to receive newsletters, promotional offerings or surveys, which requires your contact information. Such messages may include pixel tags and link tracking. The contact information you submit will not be shared, sold or used for any other purpose and you may opt out at any time. Registration to newsletters, promotional offering and surveys are not intended for minors under the age of 13. Please see BrainPOP Educators™ below for further information.

Emails received from users: We may retain certain information from users when they send us messages through our system or by email. We only use such information for providing the services or support requested.

Feedback: Certain features we offer include an option to provide us with feedback on your experience. The feedback feature does not identify the user submitting it. The feedback option is voluntary and the information a user submits to us will only be used for improving these features. If we receive personally identifiable information through a feedback form we take steps to immediately delete that information.

Information collected when using a BrainPOP® mobile app: Your website subscription also provides access to the Full Access level of our mobile apps. If you chose to download any such app and log into it with your website subscription username and password, we collect limited usage information in connection with user logins in order to monitor subscription compliance. This information is maintained in accordance to this policy. We do not collect Personally Identifiable Information from users of the various BrainPOP applications. If you subscribe to a BrainPOP app with an in-app purchase subscription, we do not collect any user information.

We do NOT collect or use information as follows:

  • Certain activity pages and quizzes allow a user to enter his or her name prior to printing or sending it to an email address entered by the user (such as that of a teacher). We do not collect or store this information. If a user is using a quiz on an app, he or she can enter their name, but we do not collect this information. It is only stored on the user’s device.
  • Other than in the places and for the purposes explicitly disclosed in this Policy, we do not knowingly collect Personally Identifiable Information directly from users under the age of 13. If we learn that we have inadvertently collected any Personally Identifiable Information from a user under 13, we will take steps to promptly delete it. Please contact us at privacy@brainpop.com if you believe we have inadvertently collected Personally Identifiable Information from a user under 13.
  • We do not collect, use or share Personally Identifiable Information other than as described in our privacy policy, or with the consent of a parent or legal guardian as authorized by law, or otherwise as directed by an applicable district or school or required by contract or by law.
  • In no event shall we use, share or sell any Personally Identifiable Information for advertising or marketing purposes.


Using My BrainPOP™
Schools or districts using My BrainPOP maintain ownership of their Student Records.

Each school or district has access to a user-friendly administrator dashboard that allows direct control over the Student Records at all times. The administrator can create, update, review, modify and delete individual accounts, and monitor logins in the individual accounts. "Administrators" are only those individuals explicitly designated by the school or the district. Schools and districts are required to appoint an administrator that will be responsible for the Student Records, and keep us informed of any changes of such appointment. Districts and schools are urged to safeguard the administrator's access information and keep it in strict confidence, and notify us of any unauthorized use of password or account registered under their subscription.

The teachers using My BrainPOP will only be able to access or use My BrainPOP with an Educator Code provided by their school. Students will only be able to access their accounts with a Class Code provided by their teachers. Students will be able to store their activities, quizzes and their correspondences with their teachers on their individual accounts. Students can only interact with teachers who created the My BrainPOP class. Students cannot privately communicate with other students through My BrainPOP.

We encourage schools and districts using My BrainPOP to notify parents that the product is used in their school. Parents can log into their children's accounts and access their records. If you are a parent or guardian of a student using My BrainPOP with his or her school, you can request the login information from your child or their teacher. You are encouraged to use the student's login information and view all their activities and progress on the account at any time. Parents have a right to request the student's Personally Identifiable Information be deleted or request changes in his or her records if it is inaccurate or misleading.


FERPA Compliance
We understand the obligation educational agencies, districts and school systems have to comply with the Family Educational Rights and Privacy Act (FERPA) and we support schools in their compliance efforts and facilitate their alignment with FERPA.

Under the terms of our contracts with schools, we agree to act as a "School Official" as defined by FERPA, meaning that we:
  • Perform an institutional service or function for which the school or district would otherwise use its own employees;
  • Have been determined to meet the criteria set forth in the school's or district's annual notification of FERPA rights for being a School Official with a legitimate educational interest in the education records;
  • Are under the direct control of the school or district with regard to the use and maintenance of education records; and
  • Use education records only for authorized purposes and will not re-disclose Personally Identifiable Information from education records to other parties (unless we have specific authorization from the school or district to do so and it is otherwise permitted by FERPA).
How Long We Retain Student Data Information
Districts and schools are able to delete information at any time and in real time using the Administrator Dashboard as mentioned above. Once information is deleted, we do not retain any copies. Teachers may also choose to archive the classroom they created. My BrainPOP classrooms that have been archived are retained for a period of two years. After such period, all information is automatically disposed and deleted; first it is deleted from the server and two weeks thereafter it is deleted from any backup server and cannot be restored. Districts and schools may request copies of any raw data from the database, which shall be provided within four (4) weeks of the request.



How We Share Your Information
We may provide Personally Identifiable Information to our partners, business affiliates and third party service providers who work for BrainPOP and operate some of its functionalities, such as hosting services, streaming services and credit card processing. These third parties are well-known, established service providers, who are bound contractually to practice adequate security measures and only use your information for the sole purpose of providing the services. These third parties do not have independent right to share your Personally Identifiable Information. We share Anonymous Information or De-Identified Information about our users for tracking analytical information when using third party web analytical tools. We may use or share Anonymous Information or De-Identified Information for educational research purposes, to evaluate the educational benefit of using our services or to improve our services.

We will NOT share any information for marketing or advertising purposes.

We reserve the right to disclose Personally Identifiable Information if we are required to do so by law or if we believe that disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order or legal process.

We also reserve the right to transfer your Personally Identifiable Information in case of a corporate restructuring (such as a merger or acquisition), as long as the receiving entity adopts this privacy policy that applies to your information.



How We Store and Process Your Information
We strive to maintain security policies and procedures that are designed to protect your information.

Our servers are located in a secured, locked and monitored environment to prevent unauthorized entry or theft, and are protected by a firewall. The servers are located in a data center in the United States and backed up daily to a secure, US based, offsite data center.

We take extra measures to ensure the safety of PII and Student Records and apply a Secure Sockets Layer (SSL or HTTPS) encrypting technology to establish and ensure that all data passed between the server and the browser remains encrypted.

Governance policies and access controls are in place to ensure that the information of each district or school or other subscriber is separated and they are only able to access their own data.

Only limited BrainPOP personnel have access to the database, and they only access the database when necessary to provide services. Personnel with access to Student Records pass criminal background checks.

We follow standardized and documented procedures for coding, configuration management, patch installation and change management for all applicable servers and we audit our practices at least once a year.

While we strive to maintain best industry-standard privacy and security practices, it should be noted that no industry system is fail proof. In the event we learn of an actual data breach, loss or disaster, we have established a Disaster Recovery Plan, which includes notifying the affected subscriber, and as appropriate, coordinating with the subscriber to support its notification of affected individuals, students and families when there is a substantial risk of harm from the breach or a legal duty to provide notification.



Links to Third-Party Sites
We carefully choose our business partners and associate only with reliable partners who demonstrate a commitment to users' privacy and who share our commitment to education.

GameUp® Partners
While using this website, you may be referred or linked from or to third-party sites, such as educational game partners featuring their games on GameUp. We partner only with game publishers with carefully vetted educational offerings and who commit to our privacy compliance. We do not share PII with these third parties. However, remember that when you are on third party websites, BrainPOP’s Privacy Policy is no longer in effect. We are not responsible for information, content, terms of use or privacy policies at these sites. By browsing and interacting with any other website, you are subject to that website's own rules and policies. Please read those rules and policies carefully before proceeding. You have the option to block third-party links. To do so, please contact our support team at privacy@brainpop.com.

Mobile Apps
Please note that the use of any of the BrainPOP applications is also governed by the privacy policy of the operators of the application distribution platforms (such as Apple®, Google®, Microsoft®, etc.), and our policy only applies to our practices.

Links to Social Plugins
We only include links to social plugins on BrainPOP Educators, a section of this website that is directed to adults. Please see BrainPOP Educators™ below for further information. These social networks have separate privacy policies and procedures and by clicking through to their plugins you are subject to their rules and policies. Use of these social media plugins is optional and user-generated. We are not responsible for information, content, terms of use or privacy policies at these social networks.



BrainPOP Educators™
BrainPOP Educators is a section of this website that is directed to teachers, parents, tutors and others who educate young people. BrainPOP Educators does not require you to log in with a BrainPOP account. There are opt-in opportunities such as newsletters, webinars and more, which require registration. BrainPOP Educators also provides links to third party sites which have separate privacy policies and procedures; by clicking through to them, you are subject to their rules and policies. We are not responsible for information, content, terms of use or privacy policies at these third-party sites.



Using BrainPOP® Outside the US
If you are using this website or app outside the United States, you consent to having your information and data transferred to the United States. If you are from any jurisdiction with laws or regulations governing the use of the Internet, including collection, use and disclosure of personal data, different from those of the United States, you may only use this website or app in a manner lawful in your jurisdiction. If your use of this website or app may be unlawful in your jurisdiction, please do not use this website or app. If your use of My BrainPOP may be unlawful in your jurisdiction, please do not use My BrainPOP.



Changes to Our Privacy Policy
We constantly strive to provide the best services. Changes to this policy may be required to keep apace with changing technology and threats, and as new or changed services are released. We expect most such changes to be minor, but there may be cases where changes may be more significant. In such cases we will first provide prominent notice to users who are affected.

Posting the modified Privacy Policy on this website or app and providing notice as stated above will give effect to the revised terms. Your continued use of this website or app indicates your acceptance of any revised terms. If you do not agree to the revised policy, please refrain from using this website or app and/or leave this website or app.



Contact information
If you have any questions or concerns about this Privacy Policy, please contact us at privacy@brainpop.com.

If you wish to report a security breach, please contact us at security@brainpop.com.

This policy was last updated on January 9th, 2015.