Kahoot!’s statement on Ohio Senate Bill 29

What is Ohio Senate Bill 29?

Ohio Senate Bill 29 (SB 29) is legislation designed to protect the privacy and security of student educational records. It applies to technology providers contracting with Ohio school districts, requiring them to treat educational records with the same privacy and security standards as school districts.

How does Kahoot! ensure compliance with SB 29 regarding data ownership and security?

Keeping students’ personal information safe is a priority at Kahoot!. Kahoot! complies with SB 29 by ensuring any educational records created, received, or maintained as part of school district contracts are owned solely by the school district and only processes educational records as permitted or required under SB 29. 

Kahoot!’s security practices include appropriate data protection measures and safeguards that are designed to prevent unauthorized access to these records. 

Does Kahoot! use student data for commercial purposes, such as advertising?

No, Kahoot! does not use student data for advertising or other commercial purposes. SB 29 strictly prohibits using educational records for marketing to students or parents, and Kahoot! aligns with this restriction. 

To learn more about our practices with respect to user data, please read our Privacy Policy and Student Privacy Policy.

What happens to data when a contract with Kahoot! expires?

Kahoot! is committed to securely delete or return any educational records within 90 days upon the expiration or termination of a contract with a school district. This aligns with SB 29’s requirements for data retention and destruction.

Can Kahoot! share student educational records with third parties?

No, Kahoot! does not sell or share student educational records. SB 29 restricts sharing or selling educational records, and Kahoot! adheres to this prohibition. Any data sharing aligns with contract-specific obligations and applicable privacy and data protection laws, as described in our Privacy Policy.

Does Kahoot! use student records in product development?

Yes, Kahoot! may use student records in product development but only in de-identified and aggregated forms, and as described in our Privacy Policy and permitted under our contracts. In compliance with SB 29, Kahoot! may use anonymized data strictly for product development, maintenance, support, and operational improvement.

Does Kahoot! monitor students through school-issued devices?

No, Kahoot! does not electronically access or monitor location tracking features of; audio, visual, or recording features of; or student interactions with school-issued devices, as prohibited by SB 29. 

How does Kahoot! support parental transparency?

Kahoot! provides transparency by detailing its privacy and data protection practices on our Trust Center. School districts are responsible for notifying parents by August 1 each year about the technology providers they contract with, which may include Kahoot!, along with the records affected and contract inspection information. Kahoot! will support its district customers in meeting these requirements.

This statement applies to Kahoot!’s practices for all users, regardless of whether schools and districts are on a paid or free plan.

School districts, please see the information below for additional information regarding notification information.

For additional details on Kahoot!’s commitment to data security and privacy, please visit our Trust Center or contact us at privacy@kahoot.com.

 

Technology Provider Notice Information

In compliance with SB 29, school districts must notify parents and students about technology provider contracts affecting a student’s educational records. Below are the relevant details school districts can provide about its contract with Kahoot!:

Required information	Notification Details for Kahoot
Identification of the technology provider with access to educational records	Kahoot!
Identification of the educational records affected by the technology provider contract:	We only request the personal information of students that we need to provide the School Services to our customer. Student players: Kahoot! collects only a nickname, which is not linked to any other personal information, including any persistent identifier, from a student who merely plays a Kahoot! game. We use the nickname to permit the student to play. Player ID feature: A school or school district may enable the Player ID feature, which requests a student’s name (for grades K-12) and (for higher education only) email address for purposes of attendance or assessment. Personal information collected at a teacher’s direction: Certain features of the School Services permit a teacher to collect information about the class, as well as about individual students, such as attendance, results, answers submitted when playing Kahoot! games (including in response to open-ended questions) and performance on Kahoot! games. We use such information only to provide the services to the teacher, such as to permit the teacher to interact with students and track their progress over time. A school or teacher may permit students to share information with others, such as with other students in the same class, school, or school district.
Information about the contract inspection and contact information for a school department to which a parent or student may direct questions or concerns	[This must be completed by the school district]

Monitoring Notice Information

SB 29 requires that school districts must notify parents when a technology provider accesses or monitors location tracking features of; audio, visual, or recording features of; or student interactions with school issued devices. The notice must include a written description of the triggering circumstance, including which features of the device were accessed and a description of the threat, if any.

Kahoot! confirms it does not conduct any monitoring as described under SB 29.