Reference Guide to App Privacy Implications

Disclaimer: This assessment is based on the privacy policies and terms of use which are publicly available on the app vendors' websites. Types and degree of personal information
collected can vary depending on configuration within districts. For apps that store personal information of students outside Canada, consent for this storage is required.

What do the icons mean? SCRATCH JR NUMBER LINE by MLC

• Only anonymous usage • Information is shared with third

Collects personal information information is collected. parties to deliver services.
• Anonymous usage information • Allows users to enter drawings
DATA
is only shared with third parties DATA
or text, which can be preserved
COLLECTED for legal or technical reasons. COLLECTED in a “save state" without
Collects location information • May ask for location (e.g. at creating an account.
home, at school) but does not Best practice:
link this with any personal • Instruct students to not enter
information. personal information within
drawings or text.
All data is stored inside Canada • Keep access keys (generated
DATA DATA
RESIDENCY RESIDENCY for accessing “saved states”)
confidential and do not share
with other users.
All data is stored outside of Canada

OSMO CODING HOPSCOTCH SPHERO EDU

• Information is shared with third parties • Does not share personally • Information is shared with third
to deliver services. identifiable information with parties to enable certain
• In the Osmo Play Experience, all play is third parties. features of toys, and for other
locally stored. No personal information
DATA is collected. Other features of the app DATA
• Account creation is not DATA
business purposes.
COLLECTED may collect personal information. COLLECTED mandatory. COLLECTED • All third-party information
• Only teachers or parents can create • Accounts can be created with processors are listed in detail.
student profiles. Only a nickname is only an email address, and • Individual robotic devices
required. users must be over 13. operated by the Sphero app
• Content submissions are filtered by the have their own privacy policies.
app to ensure personal information is Best practice:
not included. • Instruct students to not include Best practice:
Best practice:
personal information within • Opt out of marketing
DATA DATA DATA
RESIDENCY • Use only non-identifiable information RESIDENCY project data. RESIDENCY communications.
when creating nicknames for student • Read privacy policies of any
profiles. devices linked to the app
• Instruct students to not add personal before using.
information, such as age, to their
profiles.

IXL - TYNKER KHAN ACADEMY

MATH AND ENGLISH
• Information is shared with third • Information is shared with third • Information is shared with third
party service providers for parties only to deliver services party service providers for
marketing purposes. and not for commercial marketing purposes.
DATA
• Users can log in with single sign DATA
purposes. DATA
• Information is only shared with
COLLECTED on (SSO) service instead of COLLECTED • Parent or teacher email is COLLECTED third party applications or services
username/password. required to activate accounts for with the consent of users.
Best practice: students under age 13. • Many features of the app are
• Use only non-identifiable Best practice: available without creating an
information when creating • Instruct students to not add account (and providing no
student accounts. their image or location to user personal information).
profiles. Best practice:
DATA DATA DATA
RESIDENCY RESIDENCY • Collect consent from parents to RESIDENCY • Use only non-identifiable
activate student accounts. information when creating student
• Use only non-identifiable accounts.
information when creating • Opt out of consenting to
student accounts. information sharing.

LIGHTBOT:
CODE HOUR DUOLINGO KAHOOT!

• No personal information is • Information is shared with third • Adult (teacher / parent)

collected unless users submit parties to deliver services. information is shared with third
their email address to be • Uses “age-gating” to restrict parties to deliver services.
DATA
notified about new apps. DATA
what services based on the DATA
• Account creation is required for
COLLECTED Best practice: COLLECTED age and location of the user. COLLECTED teachers and students to create
• Opt out of the app’s Google • For users under 13, only and host a Kahoot! (but not for
Analytics data collection. parent/guardian email is users who only play a Kahoot).
• Teachers: instruct student users collected. Also, social features, • To create accounts, the app
to not submit email addresses. mature words, and the ability to collects email address, user name
• Parents: request to have their add a bio and profile picture and password. Student accounts
child’s email address removed are disabled. also require date of birth.
DATA DATA DATA
RESIDENCY from the system if it has been RESIDENCY Best practice: RESIDENCY Best practice:
submitted. • Instruct students to limit • Instruct students to submit only
personal information added to minimum required information if
their profile, including to not creating accounts.
add a picture. • Instruct students to create
non-identifying user names.
-1-
Reference Guide to App Privacy Implications

Disclaimer: This assessment is based on the privacy policies and terms of use which are publicly available on the app vendors' websites. Types and degree of personal information
collected can vary depending on configuration within districts. For apps that store personal information of students outside Canada, consent for this storage is required.

CLASSDOJO - APP BOOK CREATOR STARFALL

LEARN TO READ
• Teacher and student information is • Books created in the app are private • Personal information is not
not shared for marketing purposes. by default and their content can be collected from student users.
• Student accounts are automatically shared by teachers. • No advertising is displayed.
deleted after 12 months of inactivity. • Personal information, including
DATA • Teachers approve any student DATA name, email and school, is collected DATA • Personal information collected
COLLECTED submissions to be shared within COLLECTED from students for the purpose of COLLECTED from adult users is name and
the app. account creation. email address.
• Student profile or portfolio are visible • Users can access through an • Information is shared with third
only to their parents, teachers and existing Office 365 account. parties to deliver services.
school leaders. Best practice:
• Uploading of content by students Best practice:
• Do not share student books with a • Keep login credentials for
takes place only with parental wider audience.
DATA consent (provided directly by DATA • Instruct students to not include DATA Parent-Teacher Centre secure
RESIDENCY parents, or via teachers). RESIDENCY personal information about RESIDENCY and do not share with other
Best practice: themselves or others in text, video users.
• Teachers collect consent from or audio files that are uploaded to
parents to activate student accounts. the app.

QR CODE SCANNER TICKLE PREZI VIEWER

BY TAP MEDIA
• Includes functionality to scan • App requests opt-in consent at • Not intended for users under
QR codes, barcodes as well as the time personal information is age 13.
PDF documents. collected. • Users between age 13 and 18
DATA Best practice: DATA • Information is shared with third DATA use accounts created by a
COLLECTED • Do not scan any documents that COLLECTED parties for marketing purposes. COLLECTED parent or guardian.
could contain personal Best practice: Best practice:
information. • Instruct students to not include • Instruct students to not include
• Do not share any documents personal information about personal information in their
containing personal information themselves or others in pictures own presentations, or when
via social media functions within and other multimedia commenting on the
DATA the app. DATA submissions. DATA presentations of others.
RESIDENCY RESIDENCY • Instruct students to opt out of RESIDENCY
marketing communications.

PUPPET PALS POPPLET KODABLE

• Personal information is not •Personal Information is shared • Personal information is not collected
shared with third parties. with third parties to deliver from students.
• No cookies or tracking services. • Students can play games on Kodable
without sharing personal information.
DATA technologies are used. DATA Best practice: DATA • Teachers can create classes, add
COLLECTED Best practice: COLLECTED • Opt out of marketing COLLECTED students and monitor progress within
• When using the "voice acting" communicaitons. their accounts.
feature, instruct students to not • Opt out of personal information Best practice:
include personal information processing not required for • Use non-identifying information when
about themselves or others in service delivery. creating student accounts.
recordings. • Instruct students to not use real
names or personal information of
DATA • Instruct students to not upload DATA DATA themselves or others in their coding
RESIDENCY photos of students or others to RESIDENCY RESIDENCY examples.
the app. • Share student and class access
codes only with appropriate students
and instruct students to keep codes
confidential.

CHATTER PIX KIDS RAZ KIDS A-Z HAIKU DECK

• Does not collect personal • Teachers create a classroom • Content submitted may be
information or include sharing roster and assign student user redistributed through the internet or
features. credentials (up to 36 per class). other media channels.
• Email address of parents / • Personal information is used to • Student accounts require only a
DATA DATA
authenticate users and monitor DATA user name.
COLLECTED teachers may be collected COLLECTED COLLECTED
optionally for communication compliance with terms of service. Best practice:
purposes. • Records audio of student's reading • Instruct students to create
for teachers to evaluate. non-identifying user names.
• Non-identifiable usage
information is collected. Best practice: • Instruct students to not include
• Use only non-identifiable personal information within
Best practice: information when creating student presentations.
DATA • Instruct students to not upload DATA credentials and classroom rosters. DATA • Use privacy settings to limit sharing
RESIDENCY pictures of themselves or others RESIDENCY • Delete classroom rosters and RESIDENCY of content with other users.
to the app. student credentials when • Instruct students to not add
application no longer being used. personal information to their profile.

-2-