App Vetting Profile for MATHstream

Product: MATHstream

Vetted by Kevin Lewis, Data Privacy Officer at 1EdTech on 2024-07-02

App Vetting Capability: Expert (Self Rated)

Privacy Rubric Results

This product has met the criteria required to achieve the 1EdTech Data Privacy Seal.

N/A
UNMET
PARTIAL
MEETS

Data Collection

Security

3rd Party Data

Advertising

Certified

Rubric Area	Expectations
General	Meets	Partially Meets	Doesn't Meet
User Notes User Notes GEN1 - How are changes to key policies managed? ANSWER: Notification is provided to the user in advance and a history of policy revisions are available User Notes: If we make material changes to the way we treat personal information we have previously collected about you, we will provide notice through the Sites and may also notify you in other ways, such as by email to your registered email address, in our discretion. However, we will not make material changes to how we treat previously collected personal information without your consent (opt-in or opt-out for adults and prior parental consent for Children), as required by law. You may need to consent to the new Privacy Policy in order to continuing using the Sites. If we make material changes to the way we treat personal information we have previously collected about you, we will provide notice through the Sites and may also notify you in other ways, such as by email to your registered email address, in our discretion. However, we will not make material changes to how we treat previously collected personal information without your consent (opt-in or opt-out for adults and prior parental consent for Children), as required by law. You may need to consent to the new Privacy Policy in order to continuing using the Sites.	Answer Meets Expectations	Unselected Option:	Unselected Option:
Data Collected	Meets	Partially Meets	Doesn't Meet
User Notes User Notes DCQ1 - Do the policies list all data collected? ANSWER: Policies list the data collected OR policies state no data is collected User Notes: Visitors may provide certain information directly to the Sites, such as when you contact us for information about our products, customer support, or research inquiries, when you register for an account, or when you sign-up for our email mailing list. In order to obtain access to and use our Learning Platforms, we ask you to register to become a member. During this member registration process, and through other interactions on our Sites and across the Learning Platforms, we collect information that teachers and administrators provide to us as well as information about their students, including, but not limited to, your name, the school or school district you work for, the physical address of your school, your job title, the grades and curricula you teach, your student roster, your email address, and your phone number. When you register for the Learning Platforms, we will also ask you to create a password. When you use the Learning Platforms, we collect information about your interactions with the Learning Platforms, including the courses you use. Some of our Learning Platforms offer live courses, which may be recorded and made available for later viewing within the Learning Platform. We may also ask you for feedback about usage of various products and services as well as satisfaction with those products and services. Visitors may provide certain information directly to the Sites, such as when you contact us for information about our products, customer support, or research inquiries, when you register for an account, or when you sign-up for our email mailing list. In order to obtain access to and use our Learning Platforms, we ask you to register to become a member. During this member registration process, and through other interactions on our Sites and across the Learning Platforms, we collect information that teachers and administrators provide to us as well as information about their students, including, but not limited to, your name, the school or school district you work for, the physical address of your school, your job title, the grades and curricula you teach, your student roster, your email address, and your phone number. When you register for the Learning Platforms, we will also ask you to create a password. When you use the Learning Platforms, we collect information about your interactions with the Learning Platforms, including the courses you use. Some of our Learning Platforms offer live courses, which may be recorded and made available for later viewing within the Learning Platform. We may also ask you for feedback about usage of various products and services as well as satisfaction with those products and services.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes DCQ2 - Do the policies indicate how data is collected? ANSWER: Policies state specifically how data is collected OR policies state no data collected User Notes: Visitors may provide certain information directly to the Sites, such as when you contact us for information about our products, customer support, or research inquiries, when you register for an account, or when you sign-up for our email mailing list. In order to obtain access to and use our Learning Platforms, we ask you to register to become a member. During this member registration process, and through other interactions on our Sites and across the Learning Platforms, we collect information that teachers and administrators provide to us as well as information about their students, including, but not limited to, your name, the school or school district you work for, the physical address of your school, your job title, the grades and curricula you teach, your student roster, your email address, and your phone number. When you register for the Learning Platforms, we will also ask you to create a password. When you use the Learning Platforms, we collect information about your interactions with the Learning Platforms, including the courses you use. Some of our Learning Platforms offer live courses, which may be recorded and made available for later viewing within the Learning Platform. We may also ask you for feedback about usage of various products and services as well as satisfaction with those products and services. Visitors may provide certain information directly to the Sites, such as when you contact us for information about our products, customer support, or research inquiries, when you register for an account, or when you sign-up for our email mailing list. In order to obtain access to and use our Learning Platforms, we ask you to register to become a member. During this member registration process, and through other interactions on our Sites and across the Learning Platforms, we collect information that teachers and administrators provide to us as well as information about their students, including, but not limited to, your name, the school or school district you work for, the physical address of your school, your job title, the grades and curricula you teach, your student roster, your email address, and your phone number. When you register for the Learning Platforms, we will also ask you to create a password. When you use the Learning Platforms, we collect information about your interactions with the Learning Platforms, including the courses you use. Some of our Learning Platforms offer live courses, which may be recorded and made available for later viewing within the Learning Platform. We may also ask you for feedback about usage of various products and services as well as satisfaction with those products and services.	Answer Meets Expectations	Unselected Option:	Unselected Option:
DCQ3 - Do the policies state who owns the data? ANSWER: Policies state the user owns the data alone OR policies state no data collected	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes DCQ4 - Do the policies allow users to delete their data entirely? ANSWER: Policies allow users to delete data entirely after a period of time OR policies state no data collected User Notes: Erasure: You have the right to request that we erase data we have collected from you. Please note that we may have a reason to deny your deletion request or delete data in a more limited way than you anticipated, e.g., because of a legal obligation to retain it. Erasure: You have the right to request that we erase data we have collected from you. Please note that we may have a reason to deny your deletion request or delete data in a more limited way than you anticipated, e.g., because of a legal obligation to retain it.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes DCQ5 - Do the policies state the retention of data? ANSWER: Policies have a 60-day or less retention policy OR policies state no data collected User Notes: We will retain all categories of personal information described in this California Privacy Notice for as long as it is reasonably necessary for the purposes set out in this California Privacy Notice, considering the time period reasonably necessary to: provide the Sites to you; exercise the choices and rights you have requested; comply with our contractual obligations; enforce our terms for use of the Sites; and, comply with legal and regulatory requirements. Except as noted differently on specific pages or apps, we retain your personal information while you have an account with us, or while you are using our Sites or continuing to visit us. We will retain all categories of personal information described in this California Privacy Notice for as long as it is reasonably necessary for the purposes set out in this California Privacy Notice, considering the time period reasonably necessary to: provide the Sites to you; exercise the choices and rights you have requested; comply with our contractual obligations; enforce our terms for use of the Sites; and, comply with legal and regulatory requirements. Except as noted differently on specific pages or apps, we retain your personal information while you have an account with us, or while you are using our Sites or continuing to visit us.	Answer Meets Expectations	Unselected Option:	Unselected Option:
Security	Meets	Partially Meets	Doesn't Meet
SECQ1 - Do the policies state how data is protected? ANSWER: Policies list the steps taken to protect data or OR policies state no data collected	Answer Meets Expectations	Unselected Option:	Unselected Option:
SECQ2 - Do the policies state all confidential & sensitive information is encrypted throughout? ANSWER: Data encrypted throughout OR passes an encryption test with no vulnerabilities OR policies state no data collected	Answer Meets Expectations	Unselected Option:	Unselected Option:
SECQ3 - Do the policies state whether or not it enforces strong password creation? ANSWER: Supplier enforces strong password creation OR supplier user base exempt from password requirements or OR no account creation required	Answer Meets Expectations	Unselected Option:	Unselected Option:
SECQ4 - Do the policies indicate whether or not it leverages 2 step (or other forms of multifactor) authentication? ANSWER: Supplier uses SSO or an LTI launch OR no account creation is required OR supplier user base exempt from 2-step authentication requirements	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SECQ5 - Do the policies state the use of cookies? ANSWER: Policies list all cookies used and each cookie's purpose OR policies state that it only uses cookies that are crucial for app functionality User Notes: When you use our Sites, Carnegie Learning may store data in “cookies” or similar technology on your devices, which are data files placed on your computer or other device when you visit the Sites or otherwise access our online content. We use both session and persistent cookies (which remain on your computer after the browser has been closed). Carnegie Learning may use cookies for many purposes, including, without limitation, to collect information about how you use our Sites (including to track the pages you’ve visited), to remember you and your settings and your preferences, and to show you personalized content based on information we have collected or inferred about you, such as your school district and your academic interests. This information allows us to customize your Carnegie Learning experience so that your visit is as relevant and as valuable to you as possible. When you use our Sites, Carnegie Learning may store data in “cookies” or similar technology on your devices, which are data files placed on your computer or other device when you visit the Sites or otherwise access our online content. We use both session and persistent cookies (which remain on your computer after the browser has been closed). Carnegie Learning may use cookies for many purposes, including, without limitation, to collect information about how you use our Sites (including to track the pages you’ve visited), to remember you and your settings and your preferences, and to show you personalized content based on information we have collected or inferred about you, such as your school district and your academic interests. This information allows us to customize your Carnegie Learning experience so that your visit is as relevant and as valuable to you as possible.	Answer Meets Expectations	Unselected Option:	Unselected Option:
Third Party Data	Meets	Partially Meets	Doesn't Meet
User Notes User Notes SHRQ1 - Do the policies state the use of third parties? ANSWER: Policies list each third party separately OR policies state third party use strictly for app functionality OR policies state that they do not use third parties User Notes: Carnegie Learning does not knowingly sell or share personal information of users younger than 16. Carnegie Learning does not knowingly sell or share personal information of users younger than 16.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SHRQ2 - Do the policies state what information is shared with each 3rd party? ANSWER: Policies list the data it shares with each third party separately OR policies state that it does not share any data with any third party User Notes: Carnegie Learning does not knowingly sell or share personal information of users younger than 16. Carnegie Learning does not knowingly sell or share personal information of users younger than 16.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SHRQ3 - Do the policies state whether or not users can opt out of 3rd party data sharing? ANSWER: Policies include an easy opt out process for users OR policies state that it does not share any data with any third party User Notes: California consumers have the right to opt-out of the sharing of your personal information to a third party for cross-context behavioral advertising (i.e., targeted advertising), whether or not for monetary or other valuable consideration. If you are a California consumer with whom we have a direct business or potential business relationship and would like exercise your Right to Opt-Out of Sharing, please submit your request by emailing privacy@carnegielearning.com. California consumers have the right to opt-out of the sharing of your personal information to a third party for cross-context behavioral advertising (i.e., targeted advertising), whether or not for monetary or other valuable consideration. If you are a California consumer with whom we have a direct business or potential business relationship and would like exercise your Right to Opt-Out of Sharing, please submit your request by emailing privacy@carnegielearning.com.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SHRQ4 - Do the policies state if the supplier requires 3rd parties to adhere to the terms of the vendor/customer agreement? ANSWER: Supplier claims responsibility for third party privacy practices OR policies state that it does not share any data with any third party User Notes: As discussed above, we provide the access to our Learning Platforms through agreements with Schools. Accordingly, Schools (and those who obtain authorized access from the Schools, including administrators) have access to all of the information we collect via registration and interactions with the Learning Platforms (including courses and videos viewed or used and how you interact with those courses and videos) by users associated with that School. A School may also direct us to share information with a third party affiliated with the School. For example, you may be asked to sign-in to our Learning Platforms through a third-party platform with whom your School has a relationship. When you choose to sign-in through a third-party platform, data collected through your use of the Learning Platforms may be shared with those third parties. We encourage you to read the privacy policies of the Schools and third-party platforms you use that may collect and use your information and the information that we share via registration and interactions with the Learning Platforms, as those parties have their own policies. Please contact us as detailed below if you have questions about which entities may be involved. As discussed above, we provide the access to our Learning Platforms through agreements with Schools. Accordingly, Schools (and those who obtain authorized access from the Schools, including administrators) have access to all of the information we collect via registration and interactions with the Learning Platforms (including courses and videos viewed or used and how you interact with those courses and videos) by users associated with that School. A School may also direct us to share information with a third party affiliated with the School. For example, you may be asked to sign-in to our Learning Platforms through a third-party platform with whom your School has a relationship. When you choose to sign-in through a third-party platform, data collected through your use of the Learning Platforms may be shared with those third parties. We encourage you to read the privacy policies of the Schools and third-party platforms you use that may collect and use your information and the information that we share via registration and interactions with the Learning Platforms, as those parties have their own policies. Please contact us as detailed below if you have questions about which entities may be involved.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SHRQ5 - Do the policies state whether or not user is notified of a change in third parties? ANSWER: Supplier changes third party and keeps the same data sharing terms OR supplier does not use any third parties User Notes: If we make material changes to the way we treat personal information we have previously collected about you, we will provide notice through the Sites and may also notify you in other ways, such as by email to your registered email address, in our discretion. However, we will not make material changes to how we treat previously collected personal information without your consent (opt-in or opt-out for adults and prior parental consent for Children), as required by law. You may need to consent to the new Privacy Policy in order to continuing using the Sites. If we make material changes to the way we treat personal information we have previously collected about you, we will provide notice through the Sites and may also notify you in other ways, such as by email to your registered email address, in our discretion. However, we will not make material changes to how we treat previously collected personal information without your consent (opt-in or opt-out for adults and prior parental consent for Children), as required by law. You may need to consent to the new Privacy Policy in order to continuing using the Sites.	Answer Meets Expectations	Unselected Option:	Unselected Option:
Advertising	Meets	Partially Meets	Doesn't Meet
User Notes User Notes ADVQ1 - Do the policies indicate if advertisements are displayed? ANSWER: No ads are displayed User Notes: No ads displayed on the website No ads displayed on the website	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes ADVQ2 - Do the policies indicate whether or not users are targeted for advertisement? ANSWER: Policies guarantee no ad targeting OR Policies state no ads are used on its platform User Notes: No ads displayed on the website No ads displayed on the website	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes ADVQ3 - Do the policies indicate whether or not any 3rd parties track or collect information for advertisement? ANSWER: Policies state third parties are not used for ads or tracking User Notes: No ads displayed on the website No ads displayed on the website	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes ADVQ4 - Do the policies indicate whether or not web beacons or other tracking methods are used for ad purposes? ANSWER: Policies state that it only tracks interactions within its application OR policies state that it does not use any tracking technologies for ads User Notes: No ads displayed on the website No ads displayed on the website	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes ADVQ5 - Do the policies state whether or not users can opt out of sharing data with advertisers? ANSWER: Policies state in detail how users can opt out of sharing data with advertisers OR policies state no ads are used on its platform User Notes: No ads displayed on the website No ads displayed on the website	Answer Meets Expectations	Unselected Option:	Unselected Option:

Vetting Context

Policies Cited

The following urls were cited as a basis for this information.

The person providing this information is NOT using the product.
The supplier was NOT consulted about this evaluation.

Geographical Context

(Laws and regulations can vary across regions)

Pennsylvania

United States

Regulatory Compliance

The information below provides insight into compliance with various regulatory policies.

GDPR Compliant: Yes
FERPA Compliant: Yes
COPPA Compliant: Yes

This application can be used by children under the age of 13.

Email Kevin about this record

The views and opinions expressed in this information are those of the authors and do not necessarily reflect the official policy or position of 1EdTech. The information provided is intended to surface trends about the policies and procedures of systems leveraged by the educational community. It should not be considered legal advice.

Disclaimer: 1EdTech Trusted Apps provides a vetting of a product's data policy according to the 1EdTech Trusted Apps Rubric. Achieving the TrustEd Apps Certified Seal indicates adherence to a baseline level of privacy. Institutions should review an application's detailed vetting results before approving it for use.

App Vetting Rubric Version: 2

ABOUT US

TrustEd Apps Profile for MATHstream