Kahoot Student Privacy Policy

1. Overview

Kahoot! is dedicated to making learning awesome and we take the privacy of our users seriously. Keeping students’ personal information safe is a priority at Kahoot!. This Student Privacy Policy explains how we use the personal information we collect from and about students when they engage with Kahoot! in the classroom through the products that are offered to schools and teachers in Kahoot! EDU and our individual plans for teachers (the “School Services”). As set forth below, we use such personal information solely as a service provider or “data processor” to our school and school district customers.

To learn about our practices with respect to other users, including teachers who sign up for Kahoot! and student accountholders who use Kahoot! outside of the school environment, please read our Privacy Policy.

2. Our handling of student information

As a trusted provider of tools that help teachers and schools make learning awesome for students, Kahoot! is particularly concerned about the collection and use of students’ personal information. We only request the personal information of students that we need to provide the School Services to our customer, and we comply with applicable privacy laws, such as the EU’s General Data Protection Regulation (“GDPR”), the Family Educational Rights and Privacy Act (“FERPA”), the Children’s Online Privacy Protection Act (“COPPA”), the California Student Online Personal Information Protection Act (“SOPIPA”) and other U.S. state education privacy laws

Kahoot! does not collect, retain, use or share students’ personal information, except as necessary for authorized school purposes, at the direction of our school and school district customers and pursuant to our agreements with them. Without limitation, this means that:

• We do not sell students’ personal information.
• We do not serve targeted ads on our platforms and do not use information we collect from students or others to serve targeted ads on other services. Kahoot! does not use or disclose information collected through the School services for any targeted advertising purposes.
• We do not build a profile of a student other than in support of authorized school purposes, such as for purposes of attendance or assessment.
• We retain students’ personal information only for as long as permitted by our agreements with our school or school district customers.

We support our school customers in providing parents and eligible students with access to their personal information and in fulfilling other requests that parents and eligible students may make, such as to request deletion of students’ personal information or to refuse its further collection or use. If you are, or your child is, a student and you have questions or wish to exercise any rights that may be available to you or your child under applicable law, please contact your school.

3. Students’ information

3.1 Personal information we collect from or about students

Student players: Kahoot! collects only a nickname, which is not linked to any other personal information, including any persistent identifier, from a student who merely plays a Kahoot! game. We use the nickname to permit the student to play.

Player ID feature: A school or school district may enable the Player ID feature, which requests a student’s name (for grades K-12) and (for higher education only) email address for purposes of attendance or assessment.

Personal information collected at a teacher’s direction: Certain features of the School Services permit a teacher to collect information about the class, as well as about individual students, such as attendance, results, answers submitted when playing Kahoot! games (including in response to open-ended questions) and performance on Kahoot! games. We use such information only to provide the services to the teacher, such as to permit the teacher to interact with students and track their progress over time. A school or teacher may permit students to share information with others, such as with other students in the same class, school, or school district.

3.2 Information collected automatically

Kahoot! collects certain information automatically from students who engage with Kahoot! through the School Services. For example, certain technical information is collected by most browsers or automatically through a student’s device, such as IP address (from which we may derive approximate location), device type, operating system name and version, device manufacturer and model, language and browser type and version. We use this information to ensure that our services function properly. We also use cookies and similar technologies for security purposes, to facilitate navigation, to display information more effectively, and to understand how our services are used so that we can continuously improve them.

3.3 Anonymized information

Kahoot! anonymizes information collected automatically before using it, such that it cannot be linked to individual students. We may also anonymize personal information so that it no longer identifies any student. Subject to applicable law and our agreements with our customers, we may use and disclose such anonymized information for any purpose, including for analytics purposes, to help us understand how our products are used and improve upon them. We will not seek to re-identify any information that we have anonymized.

4. Security

Kahoot! maintains a comprehensive security program designed to protect the security, privacy, confidentiality and integrity of personal information within our organization. We have in place appropriate and reasonable technical and organizational measures designed to protect personal information from loss, misuse, and unauthorized access, disclosure, alteration, and destruction, taking into account the risks involved in the processing and the nature of the personal information.

5. Compliance with FERPA, COPPA,SOPIPA and similar education privacy laws

We comply with FERPA, COPPA, SOPIPA and similar laws when applicable to our relationship with our school or school district customer. When FERPA applies, we act as a “school official” to our customer, which means that we are under the direct control of the school or district and use students’ personal information to provide our services to the school or district , as set forth in our agreement with it. To the extent COPPA applies, our school or district customer provides us with any necessary consent on behalf of students’ parents or guardians to permit use of Kahoot! in the classroom.

6. Compliance with GDPR

For our School Services offered in the EU/EEA, Kahoot! processes personal data as described in this policy as a processor under the GDPR, whilst the school or school district located in the EU/EEA is a controller under the GDPR. Our legal basis under the GDPR for our processing of personal data stems from the agreement for the School Services. For the processing purposes described above in section 3.2 and 3.3, specifically stable functionality, security and analytics, Kahoot! is a controller pursuant to the GDPR. Please refer to our main Privacy Policy for more information about these processing activities, our legal bases, and your GDPR rights as an end user.

7. Changes to this Policy

We may change this Student Privacy Policy as the services we provide to our school and school district customers evolve over time. The most recent version of the Privacy Policy is reflected by the version date located at the top of this Student Privacy Policy. We encourage you to review this Student Privacy Policy periodically if you are interested in learning about of changes that may affect you.

8. About Kahoot!

Kahoot! AS
Fridtjof Nansens plass 7
0160 Oslo
Norway

Kahoot! EDU Inc.
3300 N. Interstate Hwy 35
Suite 700
Austin, TX 78705
USA