Effective date: July 1, 2020
A note about Student Data: This Service may be purchased by providers of educational services, such as schools, school districts, or teachers (collectively referred to as "Schools") that use our services for educational purposes. When IXL contracts with a School to provide the Service, we may collect or have access to Student Data (defined below), which may be provided by the School or by the student. We consider such Student Data to be strictly confidential and in general do not use such data for any purpose other than improving and providing our Services to the School or on the school's behalf. Our collection, use and sharing of Student Data is governed by our contracts with the School and any applicable laws and regulations including, in the U.S., provisions of the Family Educational Rights and Privacy Act ("FERPA"), the Children's Online Privacy Protection Act ("COPPA") and applicable state laws. If you have any questions about reviewing, modifying, or deleting personal information of a student, please contact your School directly. See Section 11 to understand the principles which guide our collection, use and disclosure of Student Data.
1. What information does IXL collect about you?
IXL collects information in several ways from different parts of the Service.
Information you provide to us. The type of personal information we collect may vary depending on your account type.
- School Information. When a teacher, school administrator, or other authorized person associated with a School registers for an account on our Service or corresponds with us, we may collect personal information such as a name, e-mail address, payment information, username and password, and information about the School.
- Student Information. Once registered, a School may provide information about its students, such as student names or other identifiers, passwords, e-mail address for the student or the student's parent or legal guardian, and educational level and topic of study. Personal information collected from or about students, along with other information associated with that personal information is "Student Data." The School may elect to provide user names or identifiers which are not readily identifiable to anyone outside of the School community in lieu of a full student name, at its discretion. Additionally, some Schools may elect to use a single-sign on (SSO) service like G Suite for Education rather than usernames and passwords to authenticate student access.
- Parent and Child Information. When a parent or guardian ("Parent") registers for an account on our Service or corresponds with us, we may collect personal information such as a name, e-mail address, payment information, username and password. We may also collect information about the child(ren) authorized by the Parent to use the Service through the Parent's account, including a profile name for the child user and selection of a profile avatar. Each child user profile must be associated with a Parent account, and children cannot access the Service without the Parent first signing in to the Parent account with the Parent's sign in credentials.
- Learning and Activity Information. During the course of providing the Service, we collect information about your use of the Service, as well as any information that you submit to the Service, such as answers to questions or content or messages posted or shared through the Service. In addition, we may ask you for personal information at other times, such as when you contact our technical support team, send us an e-mail, complete a user survey or otherwise communicate with IXL.
Information we receive automatically from your use of our Service. Like most websites and online services, IXL and our vendors automatically collect certain types of usage information when you visit www.ixl.com, read our e-mails, use our Service or otherwise engage with us. This information is typically collected through a variety of tracking technologies, including cookies, web beacons, Locally Stored Objects (LSOs such as Flash or HTML5), log files, and similar technology (collectively, "tracking technologies"), and we may use third party providers to collect this information on our behalf. These tracking technologies collect information about how you access and use the Service (e.g., referring / exit pages and URLs, how frequently you access the Service, the pages you view, the links you click, and other actions you take on the Service); information about your browser and information about the device(s) you use to access the Service (e.g., Internet Protocol (IP address), browser type, browser language, Internet service provider, device type, model and manufacturer, a unique ID that allows us to uniquely identify your browser, device or account, operating system brand and model, and whether you access the Service from multiple devices). We may also collect information about your geographical location data at the city level. We may collect analytics data, or use third-party analytics tools, such as Google Analytics, to help us measure traffic and usage trends for the Service and to understand more about the demographics and behaviors of our users. You can learn more about Google's practices at http://www.google.com/policies/privacy/partners. We may also work with third party partners to employ technologies, including the application of statistical modeling tools, which permit us to recognize and contact you across multiple devices. Although we do our best to honor the privacy preferences of our users, we are unable to respond to Do Not Track signals set by your browser at this time.
We use or may use the data collected through tracking technologies to secure the Service, improve the Service, to save you time, to provide better technical support, for promotional purposes, and to track website usage. For example, tracking technologies help us to:
- Keep track of whether you are signed in or have previously signed in so that we can display all the features that are available to you.
- Remember your settings on the pages you visit, so that we can display your preferred content the next time you visit.
- Customize the function and appearance of the pages you visit based on information relating to your account; for example, to default you to a particular grade level, or to remember customized settings for a report.
- Track website usage for various purposes including website optimization, website improvement, sales, marketing, and billing.
Most browsers are initially set up to accept cookies, but you can reset your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features and services (particularly those that require you to sign in) may not function properly if your cookies are disabled. You may also set your e-mail options to prevent the automatic downloading of images that may contain technologies that would allow us to know whether you have accessed our e-mail and performed certain functions with it. Deleting cookies does not prevent the collection of information through non-cookie technologies and does delete Local Storage Objects (LSOs) such as Flash objects and HTML5. You can learn more about Flash objects — including how to manage privacy and storage settings for Flash cookies — on Adobe's website or by clicking here. If you choose to delete Flash objects from our sites, then you may not be able to access and use all or part of the sites or benefit from the information and services offered.
2. How IXL uses the information we collect
We use the information we collect for the following purposes:
To provide and maintain the Service. We use the information we collect to deliver the Service to you. For example, we need to use your information to process payments, personalize learning curriculums, provide Schools, Parents and students with information and reports about student and child performance and use of the Service, respond to inquiries and provide customer support.
To improve, personalize, and develop the Service. We use information to tailor the content and information that we may send or display to users, to offer personalized content and instructions, and to otherwise personalize your experience while using the Service, including on various devices you may use to access the Service. We collect statistics to better understand how users access and use our Service, monitor the effectiveness of our Service, detect usage patterns, and to diagnose or fix technology problems. We also use information to demonstrate the effectiveness of the Service and perform research, and to develop, support, and improve our Service and other educational products and services.
To communicate with you. We use your information to provide transactional notifications for certain activities relating to your use of our Service. For example, we may send e-mail notifications when a user completes an activity, to provide receipt for payment or other subscription notices. From time to time, we may send periodic promotional or informational e-mails to School or Parent users. We do not use Student Data to send marketing communications, and we do not send marketing communications to student or child users. You may opt-out of certain communications (e.g., marketing or certain notifications about your use of the Service) by following the opt-out instructions contained in the e-mail. You may not opt out of service-related communications (e.g., account verification, transactional communications, changes/updates to features of the Service, technical and security notices).
To promote safety and security and respond to legal process. We use information to promote the safety and security of our Service, our uses and other third parties. For example, we may use the information to authenticate users, facilitate secure payments, detect and prevent fraud and other harmful activities, respond to legal requests or claims, and enforce our terms and policies.
3. How does IXL share your information?
IXL may share or disclose your personal information as needed to provide our Service or with your consent or permission. We may also share personal information in the circumstances described below.
Third parties with Consent or as Instructed We share information with consent and at the direction of Schools and Parents. For example, a School or Parent may direct IXL to share specific information with another individual, such as when a teacher directs IXL to send a communication to a parent. Similarly, we may share personal information with third parties, for example, if a School authorizes Google login or similar authentication tools for that School's user accounts.
Others within the School. IXL may share information collected from users associated with a School with other users or persons designated by the School, such as teachers and school administrators of that School. Messages and content shared or posted by members of a School community, such as messages between a teacher and students in a class, will be accessible by School administrators or other designated School users.
Vendors and Service Providers. IXL may share information with our trusted vendors, third party service providers and individuals to provide services or products for us or on our behalf, which may include analytics, hosting, billing, targeted advertising, and marketing (provided however, that IXL will not knowingly use any Student Data to target advertising or marketing). Vendors and service providers who have access to Student Data, if any, shall be contractually bound to uphold privacy and confidentiality terms no less protective than those provided herein.
Aggregate or De-Identified Information. We may share information in aggregated and/or anonymous form that cannot reasonably be used to identify an individual. For example, IXL may disclose aggregated user statistics (i.e., the total number or percentage of IXL users from a particular geographic region) in order to describe our Service to current and prospective partners and other third parties, and for other lawful purposes.
Other. IXL may release personal information if it has a good faith belief that access, use, preservation, or disclosure of such information is reasonably necessary to (a) satisfy any applicable law, regulation, legal process, or enforceable governmental request; (b) enforce applicable Terms of Service, including investigation of potential violations thereof; (c) detect, prevent or otherwise address fraud, security or technical issues; (d) protect the rights, property, or personal safety of IXL, its users, or the public; or (e) as required or permitted by law.
4. Third-party tracking and online advertising
IXL does not display any targeted advertising on the Service.
Please note that although we may permit third party advertising partners to collect information from visitors to adult-directed areas of the Service for the purpose of displaying advertisements on other websites or online services on our behalf, we take many steps to prevent these third-party advertising networks from collecting information for targeted advertising purposes once a subscriber to our Service signs into our Service. Please note that we rely on cookies to identify whether you are a subscriber to our Service and if you delete or block cookies, you may also delete the IXL cookie which prevents subscribers from receiving targeted IXL advertisements on other websites or online services.
We work with third-party online advertising networks which use technology to recognize your browser or device and to collect certain types of usage information about your visit to or use of our Service to provide customized content, advertising and commercial messages to you on other websites or services, or on other devices you may use. We (through the third-party advertising networks) use this information to direct our online advertisements to those people who may find them relevant to their interests. Typically, though not always, the information is collected through cookies or similar tracking technologies. You may be able to set your browser to reject cookies or other tracking technology by actively managing the settings on your browser or mobile device, though these tools may not be effective for all third-party tracking technologies, including Flash or HTML5 cookies. To learn more about cookies, clear gifs/web beacons and online advertising technologies and how you may opt-out of some of this advertising, you may wish to visit the Digital Advertising Alliance's resources at www.aboutads.info/choices and/or the Network Advertising Initiative's online resources, at www.networkadvertising.org.
If you do not want to receive targeted advertising from IXL based on your visit to our website, you can use the below link to request that IXL take steps to prevent third-party advertising networks from using information about your visit to our website to display targeted IXL advertisements to you on other websites or services on behalf of IXL. IXL cannot, however, guarantee that such steps will eliminate all collection and/or display of targeted advertising, and it may take some time for your request to take effect. Such requests will not prevent you from receiving contextual advertising or other types of advertisements that are displayed without taking into consideration whether you have previously visited www.ixl.com (for example, advertisements shown on the basis of a search term keyword). Such requests will not stop the collection of information for purposes other than advertising (e.g., for website analytics). This opt-out requires the setting of a cookie in your browser to record your request (and thus will no longer be effective if the required cookie is deleted), will be effective only in the browser from which you make the request, and will be effective for a maximum of one year from the request. If you delete cookies, change your browser settings, switch browsers or computers, or use another operating system, you will need to make the request again. You may make additional requests at any time.
5. How to control e-mail communications
IXL may, from time to time, send you e-mail regarding our products and services, or your use of our products and services. Only IXL (or its vendors or service providers operating on its behalf) will send you these e-mails. You can choose not to receive these e-mails by clicking the unsubscribe link in any e-mail or by contacting firstname.lastname@example.org. Please note that you are not permitted to unsubscribe or opt-out of non-promotional messages regarding your account, such as account verification, changes or updates to features of the Service, or technical or security notices.
6. How to access, update or delete your personal information
If you are a parent or guardian of a student who uses the IXL Service through a School, please refer all questions and requests regarding access, modification, or deletion of your student's user account or Student Data to your child's school. The School may, at its discretion, address such requests with IXL and IXL shall respond promptly to all access, modification and deletion requests it receives from Schools.
Please contact email@example.com for further instructions about deleting or deactivating your account or deleting your personal information. We may not be able to comply with your request in all circumstances. For example, certain requests to access, update or delete personal information and data associated with a School account or license may be subject to approval by the School. When account information is deleted or de-identified, certain residual information may remain within our archive records, such as for customer and technical support, billing and tax purposes.
7. How long does IXL retain your information?
Student Data. We will not knowingly retain Student Data beyond the time period required to support an educational purpose, unless authorized by a School or parent. We do not delete or de-identify any Student Data from an active student user account associated with a School except at the direction of the School. The School is responsible for maintaining current student rosters and identifying Student Data which the School no longer needs for an educational purpose by removing students from the school's master roster or by submitting a deletion request.
Unless otherwise directed by a School or Parent, we will delete or de-identify personal information of student and child users after a period of inactivity, after the termination or cancellation of the license subscription, or after termination of our agreement with the School, in accordance with the terms of any applicable written agreement with the School, written requests from authorized School administrators, and our standard data retention schedule. Authorized School administrators may contact us at firstname.lastname@example.org to request additional information about our standard data retention schedule and available options for customizing IXL's standard data retention schedule to meet individual School requirements.
We may not be able to immediately or completely delete all data in all instances, such as information retained in technical support records, customer service records, backups, and other similar business records. We will not be required to delete any information which has been de-identified or disassociated with personal identifiers such that the remaining information cannot reasonably be used to identify a particular individual.
8. How does IXL protect your information?
Information Security. The security of your personal information is very important to us. We have implemented a variety of physical, administrative and technological safeguards designed to preserve the integrity and security of the personal information we collect and to protect against unauthorized access to data. These include internal reviews of our data collection, storage, and processing practices and security measures, as well as physical security measures to guard against unauthorized access to systems where we store personal data. We restrict access to personal information to IXL employees, contractors, and agents who need to know that information in order to operate, develop, or improve our services. Our employees may be subject to disciplinary action, including termination, if they fail to meet privacy and confidentiality obligations. However, no security system is impenetrable—for that reason, we cannot guarantee the security of your personal information. If personal information under our control is compromised as a result of a breach of security, we will take reasonable steps to investigate the situation and take all steps required by applicable laws and regulations and our agreements with any affected Schools.
Maintaining the security of your personal information also requires your cooperation and involvement. For your protection, remember to sign out of all accounts before closing your browser. There is a sign out link available on most IXL pages. After signing out, make sure to close all browser windows. In addition, do not use the "Remember" feature if you are signing in to your account from a computer that other persons may have access to. This is to ensure that others cannot access your personal information if you share a computer with someone else or are using a public computer.
Please keep your password secure. If you have forgotten your password, you may request a new one by contacting email@example.com. A new password will be sent to the e-mail address you specified during registration. For all other problems signing in to the IXL Service, please contact our technical support team using the contact information at the end of this policy.
If you have any concerns about the security of your account or the security of the Service, we ask that you report your concern to us immediately at firstname.lastname@example.org. While we are unable to respond to all security concerns, we appreciate your feedback and take all reported concerns seriously.
Data storage and transfer. IXL is located in the United States. Personal information collected through our Website and Service may be stored and processed in the United States or any other country in which IXL or its affiliates or service providers maintain facilities.
9. Region-specific disclosures
We may choose or be required by law to provide different or additional disclosures relating to the processing of personal information about residents of certain countries, regions or states. Please refer below for disclosures that may be applicable to you.
Notice for California Residents
This section applies to you if you are a resident of the state of California and for purposes of this section the term "personal information" has the meaning provided by the California Consumer Privacy Act (the "CCPA"). Please note this section does not apply to Student Data that we process on behalf of our School customers. Because IXL provides the Services to Schools as a "School Official," we collect, retain, use and disclose Student Data only for or on behalf of our School customers for the purpose of providing the Services specified in our agreement with the School and for no other commercial purpose. If you have any questions or would like to exercise your California rights, please contact your School directly.
Residents of California may be entitled to certain rights with respect to personal information that we have collected about them under the CCPA:
- Right to Know. The right to request to know more about the specific pieces or categories of personal information we have collected, the categories of data sources, and the categories of third parties with whom we have shared the personal information for a business or commercial purpose in the last 12 months.
- Right to Request Deletion. The right to request the deletion of personal information that we have collected from you, subject to certain exceptions.
- Right to Opt Out of Personal Information Sales. The right to direct us not to sell (as such term is defined by the CCPA) personal information we have collected about you to third parties.
You also have the right to be free of discrimination for exercising these rights. However, please note that if the exercise of these rights limits our ability to process personal information (such as in the case of a deletion request), we may no longer be able to provide you the Service or engage with you in the same manner.
To request to exercise your right to know and/or right to deletion, please submit a request by emailing email@example.com with the subject line, "California Rights Request." We will need to verify your identity before processing your request, which may require us to request additional personal information from you or require you to log into your account, if you have one. In certain circumstances, we may decline or limit your request, particularly where we are unable to verify your identity or locate your information in our systems, or as permitted by law.
We do not "sell" personal information to third parties without consent, however, we do allow certain third party advertising networks and other third party businesses to collect your personal information directly from your browser or device through cookies and related technologies for advertising, attribution, analytics and research purposes. These third parties may use such personal information for their own purposes in accordance with their own privacy statements, which may include reselling this information to additional third parties. By visiting www.privacyrights.info, you can opt out from sales of this type of personal information by businesses that participate in the DAA's CCPA App-based Opt-Out Tool.
Shine the Light. California "Shine the Light" law (Civil Code Section §1798.83) provides certain rights to California residents that have an established business relationship with us with regard to the disclosure of certain types of personal information to third parties for their direct marketing purposes. We do not share your personal information with third parties for their direct marketing purposes without consent.
Minors. We do not sell the personal information of consumers we know to be less than 16 years of age, unless we receive affirmative authorization (the "Right to Opt In") from either the minor who is between 13 and 16 years of age, or the parent or guardian of a minor less than 13 years of age.
Notice for Nevada Residents
To exercise your individual rights under the Nevada Privacy Law (NRS Ch. 603A, Sec. 2(2)), please contact us at firstname.lastname@example.org. Please include "Nevada Rights Request" in the subject line.
Notice for Residents in the European Economic Area ("EEA") Residents
For personal information subject to the European Union General Data Processing Regulation ("GDPR"), we rely on several legal bases to process the data. These legal bases include where:
- The processing is necessary to perform our contractual obligations in our Terms of Service or other contracts with you (such as to provide you the Service as described in our Terms of Service);
- You have given your prior consent, which you may withdraw at any time (such as for marketing purposes or other purposes we obtain your consent for from time to time);
- The processing is necessary to comply with a legal obligation, a court order or to exercise or defend legal claims;
- The processing is necessary for the purposes of our legitimate interests, such as in improving, personalizing, and developing the Service, marketing the Service, such as new features or products that may be of interest, and promoting safety and security as described above.
If you have any questions about or would like further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided below in Section 14.
Residents in the EEA are entitled to certain rights with respect to personal information that we hold about them under the GDPR:
- Right of access and portability. The right to obtain access to your personal information, along with certain related information, and to receive that information in a commonly used format and to have it transferred to another data controller;
- Right to rectification. The right to obtain rectification of your personal information without undue delay where that personal information is inaccurate or incomplete;
- Right to erasure. The right to obtain the erasure of your personal information without undue delay in certain circumstances, such as where the personal information is no longer necessary in relation to the purposes for which it was collected or processed;
- Right to restriction. The right to obtain the restriction of the processing undertaken by us on your personal information in certain circumstances, such as where the accuracy of the personal information is contested by you, for a period enabling us to verify the accuracy of that personal information; and
- Right to object. The right to object, on grounds relating to your particular situation, to the processing of your personal information, and to object to processing of your personal information for direct marketing purposes, to the extent it is related to such direct marketing.
You may also have the right to make a GDPR complaint to the relevant Supervisory Authority. A list of Supervisory Authorities is available here: https://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm. If you need further assistance regarding your rights, please contact us using the contact information provided below and we will consider your request in accordance with applicable law. In some cases our ability to uphold these rights for you may depend upon our obligations to process personal information for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request.
10. How does IXL protect children's privacy?
IXL does not permit children under the age of 13 to create an account and does not knowingly collect personally identifying information from children under the age of 13 without the consent and at the direction of a Parent. Please contact us at email@example.com if you believe we have inadvertently collected information from a child under 13 without parental consent so that we may delete the information as soon as possible.
When IXL is used by a School in an educational setting, the School may authorize IXL to collect information from a child under 13. Please refer to Section 11 to learn more about how IXL protects Student Data, including Students who may be under the age of 13, when the Service is used by a School.
11. How does IXL protect Student Data and comply with laws?
When IXL provides the Service to Schools, our collection, use and disclosure of Student Data is governed by our Terms of Service and/or any other agreement with the School, by the provisions of the Family Educational Rights and Privacy Act ("FERPA"), the Children's Online Privacy Protection Act ("COPPA") and other applicable laws that may relate to the collection and use of personal information of students. If you have any questions about our collection and use of Student Data, please contact us at firstname.lastname@example.org. If you have any questions about reviewing, modifying, or deleting the personal information of a student, please contact your School directly.
The Student Privacy Pledge ("The Pledge"). IXL adheres to the Student Privacy Pledge, an industry standard approach to privacy for K-12 service providers. The Pledge was created by the Future of Privacy Forum (FPF) and The Software & Information Industry Association (SIIA) and has been endorsed by the National School Boards Association (NSBA), the National Parent-Teacher Association (PTA), and the White House.
As part of our commitment to The Pledge, when we have access to Student Data through the provision of our Services to a School, the following core principles guide our decisions around data, security, and technology:
- IXL does not collect, maintain, use or share Student Data beyond that needed for an authorized educational or school purpose, or as authorized by our agreement with a School.
- IXL does not use or disclose Student Data for targeted advertising purposes.
- IXL does not build a personal profile of a Student other than in furtherance of a K-12 School purpose, or as authorized by a parent.
- IXL will maintain a comprehensive data security program designed to protect the types of Student Data maintained by IXL.
- IXL will not knowingly retain Student Data beyond the time period required to support the School's purpose, unless authorized by the parent.
- IXL will clearly and transparently disclose our data policies and practices.
- IXL will never sell Student Data unless the sale is part of a corporate transaction, such as a merger, acquisition, bankruptcy, or other sale of assets, in which case we will use our best efforts to ensure the successor entity honors the privacy commitments made in this policy and/or we will notify the School of such a sale and provide the School an opportunity to opt-out by terminating its account before the data transfer occurs.
12. Links to other websites and services
13. Updates to this Policy
IXL may, in its sole discretion, modify or update this Policy from time to time, which will be reflected in the 'Last Updated' date set forth at the beginning of this Policy. If we change this Policy in a material manner, we will do our best to notify you of the changes by posting a notice on our website or through other appropriate communication channels. Your continued use of the Services following the effective date of such update constitutes your acceptance of the revised Policy. If you do not agree to any of the terms in this Policy or to any future terms in a future revision of this Policy, do not use or access (or continue to access) the Service.
In the event that you or your School has entered into a signed, written agreement with IXL, changes to this Policy may not be effective as to you until either (a) you or your School affirmatively accepts the changes to this Policy, either electronically or in a signed writing or (b) upon renewal of the School's agreement with IXL at the end of the current term.
14. Contact Us
Last Updated: July 1, 2020