Last Updated August 5, 2015

Kinvolved Privacy Policy

At Kinvolved, we take seriously your trust in us to maintain the privacy of student and family information. We designed our platform with data security and privacy in mind.

By using or accessing the Services in any manner, you acknowledge that you accept the practices and policies outlined in this Privacy Policy, and you hereby consent to our collecting, using, and sharing your information in the ways covered by this Policy.

Your use of Kinvolved’s Services is at all times subject to our Terms of Use, which incorporates this Privacy Policy. Any terms we use in this Policy without defining them have the definitions given to them in the Terms of Use.

If you have questions or concerns with anything in this policy, or about Kinvolved’s data practices generally, please contact us at privacy@kinvolved.com.

  1. What is Kinvolved?

    1. Kinvolved offers an application that supports schools and programs to more effectively communicate with families through SMS messaging, email, push notifications and telephone calls. The company offers high touch support to its users including a dedicated School Specialist, as well as customized analytics and interventions around the initiatives that are important to them, such as attendance, homework completion, and parent engagement. (Collectively, “Services.”)

  2. What information does Kinvolved collect?

    1. At all times, the company collects only the information it needs to deliver the contracted Services. No unnecessary information is collected.

      1. Information that is inadvertently collected as part of the raw data set but is not required in order to deliver the Services is removed and is not stored on the system.

    2. Information collected from schools and programs:

      1. Kinvolved collects a finite set of fields from schools and programs: student rosters (i.e., student names); names of parent and family contacts; mobile number and/or email of parents and family contacts (all of whom must be authorized by the parents to receive information about the student); teacher names; teacher emails; teacher mobile numbers; class schedules; and student IDs (this is optional, at the discretion of the school).

      2. Kinvolved also captures the content of all messages sent on the platform, meaning the company may be privy to school events, individual student achievements, and any other matters that are discussed by school staff.

        1. However, all data is de-identified so the company does not track specific messages or users.

      3. The team reviews school reports and information and recommends customized interventions based on the data we see, but only if the school consents to sharing this information.

      4. Within a school or program account, staff may only see data on the students whom they serve. Administrators have access to data for all students in their school.  

    3. Information automatically collected through technology:

      1. Whenever users interact with our Services, we automatically receive and record information on our server logs from your browser or device, which may include your IP address, “cookie” information, the type of browser and/or device you use to access our Services, and the page or feature you requested. “Cookies” are identifiers we transfer to your browser or device that allow us to recognize your browser or device and tell us how and when pages and features in our Services are visited and by how many people. You may be able to change the preferences on your browser or device to prevent or limit your device's acceptance of cookies, but this may prevent you from taking advantage of some of our features. If you click on a link to a third party website or service, such third party may also transmit cookies to you. Again, this Privacy Policy does not cover the use of cookies by any third parties, and we are not responsible for their privacy policies and practices.

      2. When we collect the usage information described above, we only use this data in aggregate form, and not in a manner that would identify you personally. For example, this aggregate data can tell us how often users use a particular feature of the Services, and we can use that knowledge to make the Services more effective.

      3. We use software tools such as Inspectlet to collect page interaction information such as clicks, drags, and hover-overs, response times, errors, and length of visits to certain pages.

    4. Why we collect information

      1. We collect certain limited information in order to deliver the contracted Services to schools and programs.

      2. We also collect usage data to diagnose problems and ensure that schools and programs are effectively using the features that will benefit them the most.

      3. We use aggregated and de-identified student data to create reports and recommendations that we believe will be effective in driving improvements in attendance, drop-out rates, homework completion, and other school and program goals.

      4. We do not collect superfluous data that is not directly relevant to the goals of the schools and programs that work with us. Nor do we build a personal profile on students other than as needed to support the authorized delivery of our Services.

  3. Whom do we share data with?

    1. Kinvolved uses third party vendors that act as the company’s agents. We employ these vendors to perform tasks on our behalf and we need to share user information with them to provide products or services to you. For example, we may use Amazon Web Services to provide server space. These agents do not have any right to use information we share with them beyond what is necessary to assist us in providing the services. To see a list of the agents to whom we are sending this information, please email support@kinvolved.com.

    2. We will never share your information with any advertisers whatsoever.

    3. Data that Kinvolved collects will never be the source of targeted advertising based on behaviors.

      1. We do not use social plug-ins because social media often uses user information for targeted advertising.

    4. No data that Kinvolved collects is ever made public in any way.

    5. If the company (or our assets) are acquired, or if we go out of business, enter bankruptcy, or go through some other change of control, we will not transfer student information unless the buyer or acquirer (1) intends to maintain and provide the Services as a going concern and (2) becomes subject to the terms of this Privacy Policy, including providing notice and an opportunity for users to cease use of the Services before any changes to the terms of this Privacy Policy take effect.

  4. Who owns the data that Kinvolved collects?

    1. For public schools, the district owns the data, and ownership is never transferred to Kinvolved.

    2. For charter schools and independent schools, the school owns the data, and ownership is never transferred to Kinvolved.

    3. For programs, the program or affiliated CBO owns the data, and ownership is never transferred to Kinvolved.

    4. In each case, ownership will be specified in the contract between the client and the company.

  5. When is data deleted?

    1. If a school or program terminates their relationship with Kinvolved, the company will completely delete all data files from that school or program on the company’s system.

    2. Parents and families may opt out at any time and request that their child’s information not be collected by Kinvolved. Such a request must come in writing through the school or program, and the school or program must verify that it is in fact the parent who is making the request. Once the company receives the written request with authentication by the school or program, it will remove the student and delete all records of the student immediately.

    3. The company maintains a record of all requests to delete data.

  6. How secure is the system?

    1. No method of transmission over the internet, or method of electronic storage, is 100% secure. Kinvolved follows best practices but the company cannot guarantee absolute security.

    2. The Kinvolved platform was designed with data security in mind. Kinvolved believes in implementing and maintaining best practices as early as possible, to foster a culture of integrity, accountability and responsibility as the company grows. Examples of the company’s best practices include:

      1. The company uses best practices with password encryption.

      2. No port is available to the general public, requiring an authorized system entrant to authenticate with security appliances before making further non-HTTP connections.

      3. The company uses AWS EC2 which is a secure cloud hosting service.

  7. What is the company emergency plan in case of a breach?

    1. Although the company makes good faith efforts to maintain the security of the information we collect, no system is 100% secure. Outages, attacks, human error, system failure, unauthorized use or other factors may compromise the security of user information at any time.

    2. The company has a comprehensive security program in place that is designed to identify breaches as soon as they happen.

    3. As soon as the company learns of a security breach, we will attempt to notify you electronically (subject to any applicable laws) so that you can take appropriate protective steps. For example, we may post a notice on our homepage or elsewhere on the Service, and may also send email to you at the email address you have provided to us. Depending on where you live, you may have a legal right to receive notice of a security breach in writing.

    4. Once on notice of a breach, Kinvolved acts quickly and decisively to fix them.

    5. Users can support our secure environment by regularly changing their password, and not sharing their password with anyone.

  8. Is Kinvolved integrated with other systems?

    1. At this time, Kinvolved is integrated with PowerSchool.

  9. Kinvolved is compliant with the Family Educational Rights and Privacy Act (“FERPA”).

    1. Parents and families are informed by the school and by Kinvolved in

      writing each year that their students’ information will be collected by Kinvolved.

    2. Parents have the right to opt out of having their students’ information collected by Kinvolved.

    3. Parents may access their students’ records on Kinvolved, and they have the right to request amendment of their students’ records. For students who are 18, the right to access and amend records is held by the students.

  10. Is Kinvolved compliant with the Children’s Online Privacy Protection Act (“COPPA”)?

    1. Because the company does not provide access to its application to children under 13, COPPA is not triggered.

  11. Is Kinvolved compliant with Health Insurance Portability and Accountability Act (“HIPAA”)?

    1. Because schools are not Covered Entities under HIPAA, this law is not triggered.

  12. How are users informed of changes to this policy?

    1. We may occasionally update this Privacy Policy. We always include the date of the policy at the top of this page, next “Last Updated.”

    2. We will not reduce your rights under this Privacy Policy without your explicit consent.

    3. If we make significant changes, we will provide all users with prominent notice by posting a notice on the Service and/or notifying you by email (using the email address you provided).

    4. We encourage you to review this Privacy Policy from time to time, to stay informed about our collection, use, and disclosure of information. By continuing to use the Services after the revised Privacy Policy has become effective, you acknowledge that you accept and agree to the current version of the Privacy Policy.