(For information about our compliance with COPPA & FERPA, please see this page: COPPA & FERPA
- 1. We’re deeply committed to creating a safe and secure online environment for you.
- We do not sell your personal information to third parties.
- We strive to provide you with access to and control over the information you give us, and we take the protection of your information very seriously.
- We take extra precautions for our younger learners under the age of 13, including restricting child accounts to automatically block features that would allow a child to post or disclose personal information.
- We do not advertise on Spiral. We use your information to provide you with a better learning experience, not to sell you products.
We strive to adhere to EU & U.S. federal and certain state regulations. This includes, but may not be limited to, FERPA, COPPA, and GDPR. We highly recommend that you reads our policies and terms of service to make sure that we adhere to your local regulatory needs, as we make no guarantee of compliance for your specific needs. If you have any questions about how we handle User Data, please email us at email@example.com.
How we collect and use data
We take the information you provide to us very seriously, and we strive to put you in control of decisions around your information.
Spiral collects the following information about you and your use of our Properties:
When you register for, browse and use our Properties, you may provide to Spiral what is generally called “personally identifiable information” or “personal data” (such as your full name, email address, or a photograph of yourself) that can be used to identify you. At Spiral, we call this data “Personal Information”.
Information from Integrated Services like Google or Clever.
Information about your use of our Properties and other User-provided Information.
We may collect usage information about your use of certain features on our Properties, such as the number of questions students have attempted, the points students have received, and the academic concepts present in the assignments teachers create. This enables us to better tailor educational experiences that are most appropriate for you and your students.
Information obtained from other Users.
We make available certain features on our Properties that allow other Users to provide us information about you. This information may include Personal Information. Generally, this occurs when parents or teachers provide information relating to a Child User. For example, a parent may register an account for their child and provide us with certain information, such as the Child’s first and last name.
We may collect and use information about your location (such as your city or school) to provide you with tailored educational experiences for your region, but we don’t collect the precise geolocation of you or your device. You may be able to change the settings on your computer or mobile device to prevent it from providing us with any location information.
Information from Other Sources.
Spiral uses this information in the following ways:
To enhance our Properties and the services we provide.
Spiral uses the information you provide or that we collect to enhance our relationship with you and to operate, maintain, enhance, and provide all of the features and services found on our Properties. Spiral, for instance, remembers your recent activity so we can recommend the most appropriate content for you on your next visit. If you have given Spiral consent, we may use your Personal Information to provide you with information about Spiral’s features, services and other offerings that may be of interest to you. Under certain circumstances and if we obtain your consent (for example, if you submit a testimonial and agree to make it public), we may post your Personal Information on our Properties.
To understand how you and other Users use our Properties.
Spiral uses all of the information that you provide or that we collect from Users to understand and analyze the usage trends, learning behaviors, and preferences of our Users, to improve the way the Properties work and look, and to create new features and functionality. For more information, please see the “Technologies” section, below.
To enable your participation in Spiral partnership arrangements.
Spiral will not share Personal Information with other third-party organizations for their marketing or promotional use without your consent or except as part of a specific program or feature for which you will have the ability to opt-in. You can grant us permission to share your Personal Information with authorized partners, not-for-profit organizations, and other entities that are not affiliated with Spiral. In these cases we will only provide to these third parties the information you have authorized or asked us to share to these third parties.
Spiral may send information or offers to you on behalf of these third parties. For example, if we partner with a not-for-profit organization running a contest in your region and send you an email notifying you of the partnership, we will only share your information with the third party if you opt-in to participate in the contest, and if so, the information we would share would be limited to that needed to facilitate your participation in the contest and enable you to redeem your prize.
A core part of our service is to relay data to school administrators and other authorized stakeholders. Because of this, school organizations frequently need to look back at previously collected data, whether the User is still active or not. For these purposes, we will retain your information for as long as your account is active, as is authorized by your school organization, or as is reasonably useful for your school organization’s potential use. An authorized school representative, or you if so authorized or using for personal reasons, may request deletion of your account and data by emailing firstname.lastname@example.org. If the account is no longer active and the school organization has not requested the data within 10 years, we will purge your data.
To provide a personalized learning and high-quality experience for our Users, we may use various technologies that automatically record certain technical information from your browser or device, including standard log files, web beacons, or pixel tags. This technical information may include your Internet Protocol (IP) address, device or browser type, Internet service provider (ISP), referring or exit pages, clickstream data, operating system, and the dates and times that you visit the Website. We do this to better understand how our Users are using our Website so we can improve site functionality and the services we offer you.
Like most websites, whether or not you are a registered member, we may send one or more cookies – small text files containing a string of alphanumeric characters – to your computer. Cookies remember information about your activities on a website and enable us to provide you with a more personalized learning experience. Spiral may use both session cookies and persistent cookies. A session cookie disappears automatically after you close your browser. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to the Website. You can, however, remove a persistent cookie at any time. Please review your web browser “Help” file to learn the proper way to modify your cookie settings. However, without cookies you will not have access to certain services and features on the Website.
Spiral also uses Local Storage Objects (LSOs) such as HTML5 to store content information and preferences. Third parties with whom we partner to provide certain features on our site may use LSOs such as HTML5 to collect and store information. Various browsers may offer their own management tools for removing HTML5 LSOs. Please consult your browser’s “Help” function to learn more.
How we share or transfer data
Spiral takes great care to protect the information you provide us. We do not rent or sell Personal Information that we collect from Users with third parties. We also take great measures to restrict any collection or disclosure of Personal Information from children less than 13 years of age.
Spiral will disclose User information only as described below:
If you want information shared with other Users, we’ll share it for you.
We provide certain features that may allow you to share information with other Users. For example, if you are a teacher, you may choose to populate your profile with your name, school, and the grades and subjects that you teach. Or you may ask questions that are visible to other Users of Spiral. Whenever you share information with other Users of our Properties, any Personal Information that you choose to include in, or is associated with, such User Postings will be accessible by such Users. As with most online services, once you make your Personal Information available to others in any of these ways, it may be collected and used by the recipients without restriction.
We may share data with third-party applications that you authorize.
In the future, Third-party application developers and service providers (commonly known as “App Developers“) may build complementary services for our platform, such as a mobile application for visually-impaired learners to access our resources. You may request we share your information with App Developers by connecting to the application or service and approving access to your Spiral account.
We may share anonymous or aggregate data to improve our services and learn more about our Users.
In certain occasions, Spiral may work with business partners to improve our services or offerings. We may disclose automatically collected and other aggregate non-Personal Information to authorized business partners to conduct research on online education or assist in understanding the usage, viewing, and demographic patterns for certain programs, content, services, promotions, and/or functionality on our Properties.
We may share identifiable data with research organizations to improve our services and learn more about our Users for research purposes.
To better understand how we can improve Spiral for our Users, we may share automatically collected data about how you use Spiral with independent research organizations for the purposes of research only. Our research partners must abide by strict ethical standards when working with your data, including:
- Strict data privacy standards. If the research must use personally identifiable data, such as names and email addresses, the research team will keep this information in a secure, password protected database saved on a secure server. For all analyses, personally identifiable data will be removed from analytic files and the research partner will instead use a study assigned research ID to identify different Spiral Users. Only the research study team will have access to these data for research purposes only (e.g. inviting you to participate in an online survey).
- Secure data transfer protocols. If we need to share your data with a research partner, we will use encrypted files before transfer and adhere to strong password and password transfer procedures. We will use a Secure Shell (SSH) or secure file transfer protocols (SFTP) to share the data.
- Strict data destruction policies. Upon completion of the research project, all personally identifiable data will be destroyed by the independent researchers within 60 days.
- Strict reporting standards that do not endanger User privacy. Any publications (infographics, reports, research papers, etc.) that result from this research will not identify you or your school in any way. Results will be reported in aggregate, and researchers will follow federal masking guidelines. Our research partners will never disclose any personally identifiable information to anyone outside of the project.
- Review of all research activities by an Institutional Review Board (IRB). All research conducted by third party research partners will be reviewed by IRBs. The purpose of this review board is to determine if planned research studies will meet high ethical standards with a focus on protecting your data. Research will only be conducted if the IRB approves the research plan. If you are concerned that your data will be used in a study by our partners, you may contact us at email@example.com and we will provide you with IRB contact information for all studies involving your data.
- If your data is used in research, you have the right to contact the research team and ask questions. If you would like to know if your data has been used for research purposes, please contact us at firstname.lastname@example.org. All research we engage in is designed to be low risk, meaning that there are little to no risk of your identity being revealed or of discomfort to you. You may benefit by allowing researchers to examine your data, because our goal in conducting research is to make a better, easier to use, and more effective product with the ultimate goal of improving teaching and learning. Your data helps us better understand where we can improve.
We will share data when required by law.
Spiral may also disclose User information if required to do so by law, or if we have a good-faith belief that such action is necessary to comply with local, state, federal, international, or other applicable laws (such as U.S. Copyright law) or respond to a court order, judicial or other government subpoena, or warrant, or administrative request. In some cases, we may make such disclosures without first providing notice to Users.
We may share data in the context of a change of business, including a merger or acquisition.
In the event that Spiral is acquired by or merged with a third-party entity, we may transfer or assign the information that we have collected from Users as part of such merger, acquisition, sale, or other change of control. We will only transfer this information in one of the following cases:
- The Successor Entity does not reduce our security and privacy practices with regards to student data. One way to achieve this is through the entity similarly signing the Student Data Privacy Pledge.
- If, after we send a notice telling Users of the sale and potential transfer of data and giving them the option to deny the data transfer, a User has not replied within 15 days.
If both of the two above scenarios do not hold true, we will not transfer your data.
We may share data when necessary or appropriate to protect Spiral or others.
Spiral may disclose information that we believe, in good faith, is appropriate or necessary to take precautions against liability; to protect Spiral from fraudulent, abusive, or unlawful uses; to investigate and defend ourselves against any third-party claims or allegations; to assist government enforcement agencies; to protect the security or integrity of our Properties; or to protect the rights, property, or personal safety of Spiral, our Users, or others.
Limitations on Access to your Personal Information by Employees and Authorized Parties.
General Policies on Working with Third Parties
When dealing with Third Parties in any data transfer context mentioned above, we will only do so if they adhere to similar privacy policies to ourselves, safeguarding student data at a similar or definitively same level to the Student Data Privacy Pledge.
Your choice and options in our data collection, use, and transfer
You can choose to not provide us with Personal Information.
You may always decline to share your Personal Information with Spiral. Registration is not required to access many portions of our Properties. If you decline to register, however, Spiral will not be able to provide to you certain features and functionalities found on our Properties. You may later enable or access those features by providing Spiral with the necessary Personal Information.
You can edit or delete Personal Information in our records.
We want you to have access to your information, so that you can help keep it as accurate as possible. If you register and provide Spiral with Personal Information, you may update your account and information at any time by reviewing your profile information. To delete your account permanently or make other changes, email email@example.com. Parents can modify or delete Child User accounts. If you experience any difficulties in this process, please contact us as described below.
You can disconnect us from Integrated Services.
Exceptions for Students
The policies above apply to all Users, with exceptions for how we handle student data listed here.
- We will never provide behaviorally targeted ads to students
- We will not provide personal information with other third-party organizations for their marketing or promotional use, even if consent were given,which we won’t ask for.
Spiral is committed to children’s privacy.
Protecting the privacy of young children is especially important to Spiral. For that reason, we created certain features designed to help protect Personal Information relating to children who are less than 13 years of age (“Child Users”). Spiral also seeks parental consent for all “Child Users”. If you are a parent or guardian (“Parent”) and discover that your child under the age of 13 has a registered account with our Properties without your consent, please alert Spiral at firstname.lastname@example.org and request that we delete that child’s personal information from our systems.
How children may register for and use our Properties.
If a Child User attempts to register for our Properties, Spiral will request the email address of that Child User’s Parent in order to seek consent from that Parent. Child Users information is restricted during their registration attempt, except the Parent email address for purposes of seeking consent.
If you are a Parent, you may provide consent for your child’s registration via email. Parents may revoke a child’s permission to use the Properties by emailing email@example.com to delete the account.
Alternatively, your child can be registered to use the Properties through his or her school, or through an integration with the Properties that is supported by the child’s school, or by teachers, tutors and other similar adults who assist in the educational process (“Teachers”) who have taken steps to obtain parental consent. Parents always have the option to delete their Child User’s account by contacting firstname.lastname@example.org.
Restrictions on Child Users.
Spiral attempts to restrict a Child User’s access to certain features that could result in disclosure of Personal Information by the Child User. A restricted account limits sharing and displaying private information about the Child User in various ways, including:
- The profile is not shared publicly, and only the Parent and other permitted Teachers can see the User’s profile
- The Child User cannot post to public discussion forums
- The Parent can edit Personal Information found in the restricted account by emailing email@example.com
- The Parent can remove Child Users from view of any Teachers
Some other features of our Properties may, however, permit a Child User to enter free-form text through which the Child User could enter Personal Information that would be visible to other Users. This may occur, for instance, if a Child User enters Personal Information in answering an exercise problem or creating other projects on our Properties. If you are the Parent of a Child User, please advise your Child User of the risks of posting Personal information on our Properties or any other online services, as information posted may be used by others without restriction.
As a Parent, you have the ability to control information about your Child User. To review, update, or delete information collected from your Child User, you can do so in the “Your Children” section within your account. To refuse future collection or use of your child’s Personal Information, you can delete your Child User’s account or contact us at firstname.lastname@example.org.
Children’s Privacy Rights
If you are under the age of 18, or the parent of a User under the age of 18, residing in California, you are entitled to request removal of content or information you have posted on our Properties. If you would like to request removal of your or your child’s content or information, please email us at email@example.com for assistance, or you can delete specific information (or delete your or your child’s account) directly. Please note that removal of your content or information does not ensure complete or comprehensive removal, as there may be deidentified or recoverable elements of your content or information on our servers in some form. Additionally, we will not remove content or information that we may be required to retain under applicable federal and state laws.
Our approach to Data Security
Data security is important to you, and to us.
To protect your privacy and security, we take reasonable steps to verify your identity before granting you account access or making corrections to your information. For example, we may ask you to provide certain Personal Information to confirm your identity, and we may require that you create and use a password to access certain parts of our Properties. You should create and maintain a strong password to help ensure the security of your account.
We try to ensure that our Properties and information sent to us are safe, but no security measures are perfect.
Spiral uses certain physical, managerial, and technical safeguards designed to preserve the integrity and security of your Personal Information and other information we maintain in connection with our Properties. We cannot, however, ensure or warrant the security of any or all of the information you transmit to Spiral, and you do so at your own risk. Once we receive your transmission of information, Spiral makes commercially reasonable efforts to ensure the security of our systems. When you enter sensitive information, we encrypt the transmission of that information using secure socket layer technology (SSL) or similar technologies. However, please note that this is not a guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards.
We will notify you electronically or via the Properties if Spiral experiences a data security incident that could affect you.
If we learn of a data security incident that compromises or appears to compromise your Personal Information, then we will attempt to notify you electronically so that you can take appropriate protective steps. We may also post a notice on our Properties if a data security incident occurs.
How we maintain data integrity
At Spiral, we only use Personal Information as needed for the purposes for which it was collected or where you have consented to our use of Personal Information relating to you. We take reasonable steps to ensure that the Personal Information we store and use is accurate, complete, and up-to-date. If you discover that Personal Information or other data pertaining to you is inaccurate, incomplete, or out-of-date, please update your account information or contact us as outlined below.
Links to other sites
Our Properties are operated and managed on servers located within the United States. If you choose to use our Properties from the European Union or other regions of the world with laws governing data collection and use that differ from U.S. law, then you acknowledge and agree that you are transferring your Personal Information outside of those regions to the United States and that, by providing your Personal Information on the Properties, you consent to that transfer.
In some special requirements, we may be able to create and manage isolated servers outside of the United States based on specific international partnerships. Please contact us at firstname.lastname@example.org regarding this requirement.