Privacy Policy

Last updated: January 14, 2026

INTRODUCTION

About the Site

ASSISTments (the “Platform”) is operated by The ASSISTments Foundation ( “we” or “TAF”), a non-profit corporation.  

‍

Purpose of this Policy

This Privacy Policy (this “Policy”) explains how we collect, protect, use, and share information obtained through the Platform. 

Policy Update
We may make modifications to this policy. We will notify users of the changes by sending an email to our users and having a pop-up notice on the Platform. Users of the Platform (“you”) can access previous versions of our privacy policy here.

‍

Agreement to Terms

By using the Platform, you agree to this Policy and our Terms of Service, available at [https://www.assistments.org/terms-of-service] (together, our “Terms”). You should take the time to read through the Terms, and if you have any questions, please contact us at contact@assistments.org

INFORMATION WE COLLECT

Personally Identifiable Information (PII)

In this Policy, "Personally Identifiable Information" means information capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or that individual's household. If you wish to become a Registered User (Student User, Teacher User) of the Platform, you must provide us with certain information as part of the registration process and some of that information is Personally Identifiable Information, for example, user name and email address. We comply with all applicable laws and regulations regarding the collection, use, and retention of Personally Identifiable Information. All user data is encrypted in transit and at rest (all passwords are SALTED before being stored, so we are not aware of the passwords of any users). 

‍

When a parent, guardian, school, or district registers a User who is under 13 years of age, they are authorizing the collection of Personally Identifiable Information for those users. 

‍

We also collect PII in other ways, for example, when users communicate with us by phone or email to ask questions, request assistance, make suggestions, or apply for employment. We may collect names, contact information (such as addresses, phone numbers, and email addresses), and other information about PII Users who communicate with us, so that we can follow up with them effectively. 

‍

We use Personally Identifiable Information in a few key ways, and never for commercial purposes:

‍

1. To provide and improve the Platform and associated services that we offer to our users;
2. To process requests made through this Platform, such as registration requests, requests to receive our e-newsletters, and questions or comments submitted through the Platform; and 
3. To share with partners or collaborators who work with us to enhance, research, or provide educational services. Such sharing is never for advertising or marketing purposes and will always be subject to confidentiality and data protection obligations that align with this Policy.
   
   

As a Registered User, you may be able to submit problems, student supports, and other content to be shared with other users of the Platform (your “Content”). The user name that is assigned to you during the registration process may identify you on the Platform in conjunction with Content that you submit to the Platform, and this Content may be viewed by other Users. IF YOU INCLUDE PERSONALLY IDENTIFIABLE INFORMATION AS PART OF YOUR CONTENT, PLEASE NOTE THAT WE ARE NOT RESPONSIBLE FOR ANY USE BY OTHER INDIVIDUALS OF SUCH PERSONALLY IDENTIFIABLE INFORMATION. 

‍

We reserve the right, from time to time, to contact current and former Teacher Users for various purposes, including without limitation sending updates; surveys; and changes to terms, conditions, and policies.

‍

Automatic Collection

We may collect certain information automatically when you visit the Platform, such as the browser you are using, the Internet address from which you linked to the Platform, the operating system of your computer, the unique IP address of the computer you used to access the Platform and usage and browsing habits within the Platform. We use this information to administer and improve your experience on the Platform, to help diagnose and troubleshoot potential server malfunctions, to gather broad demographic information, and to conduct A/B testing using information gathered from the actions that users take with their accounts. To help make sure you receive information that is relevant to you, the Platform uses data cookies. Most web browsers are set to accept cookies. You can instruct your browser not to accept cookies. However, if you disable this function, you will not be able to use some of the features on the Platform.

‍

Third Party Services

We may share Personally Identifiable Information with carefully selected partners and collaborators in order to enable educational research, program evaluation, and the improvement or development of services. We also may provide Personally Identifiable Information to specific third-party companies that enable us to provide critical services for our operations. Examples include Google Analytics, Amazon Web Services, Cloudfare (to prevent denial of service attacks), HubSpot for communicating with non-student stakeholders, Userflow for support, and Mixpanel for usage analytics.

‍

We require all such third parties to be bound by terms - whether through a written agreement, data process addendum, or terms of service - that protect Personally Identifiable Information in accordance with our privacy and security policies and applicable law.

These obligations include limiting use of Student PII to providing contracted services, maintaining appropriate safeguards, and deleting or returning Student PII upon termination of services.

‍

‍Legal Disclosures

Notwithstanding any other provision of this Policy to the contrary, we reserve the right to disclose your Personally Identifiable Information to others (a) as required by applicable law; (b) to comply with any court order (c) to respond to governmental requests authorized by law; (d) to protect the rights, privacy, safety or property of TAF, you or others; and (e) to permit us to pursue available remedies or limit the damages that we may sustain. For example, we may, to the fullest extent the law allows, disclose Personally Identifiable Information about you to law enforcement agencies to assist them in identifying individuals who have been or may be engaged in unlawful activities.

School Control of Student Data and End-of-Service Obligations

Schools remain in control of their students’ Personally Identifiable Information (“Student PII”) used in the Platform at all times. ASSISTments only collects, processes, and maintains Student PII on behalf of and under the direct control of the school, and never for our own commercial purposes.

Parental Requests

FERPA requires schools to provide parents with access to their children’s education records, and parents may request that the school correct records that they believe to be inaccurate or misleading.

‍

If you are a parent or guardian and would like to review, correct, or update your child’s data stored in our Platform, contact your school. We will work with your school to enable your access to and, if applicable, correction of your child’s education records. If you have any questions about whom to contact or other questions about your child’s data, you may contact us at contact@assistments.org.

‍

At the End of Service

We retain Student PII for the period necessary to fulfill the purposes outlined in this Policy and our contracts with schools. 

‍

Upon expiration or termination of our contracts with a school or district, ASSISTments will, in accordance with applicable law and customer requirements, we will transfer its Student PII back to the school; and/or destroy its Student PII in our systems, including our third-party service providers used to provide and administer the Platform.

‍

We will provide written confirmation of data transfer or destruction upon request by the school. We may not be able to delete all data in all circumstances, such as information retained in technical support or customer service records, certain back-up formats or configurations, and similar business records.

‍

ASSISTments will destroy Student PII via de-identification in accordance with the guidelines of NIST SP 800-122, such that the relevant data can no longer be reasonably used to identify an individual. De-identified information will be retained only for educational research and product improvement purposes, and ASSISTments will never attempt to re-identify it.

Non-Personally Identifiable Information

As used in this Policy, Non-Personally Identifiable Information is defined as deidentified, aggregated information, and other information that does not reveal a person’s specific identity or any sensitive data about such a person. We may collect Non-Personally Identifiable Information when you voluntarily provide such information to us via surveys or other means. Such information constitutes Non-Personally Identifiable Information because it has been de-identified and cannot personally identify you or any other user. Other than as set forth above, we will never link student Non-Personally Identifiable Information with Student PII.

DATA SECURITY 

We have implemented software and hardware security measures, such as firewalls, intended to protect your Personally Identifiable Information from unauthorized access. Although we strive to protect your information, we cannot ensure or warrant the security of any information you transmit to us through or in connection with the Platform. Despite our precautions, no system can completely protect against unauthorized access to your Personally Identifiable Information, and your use of the Platform indicates that you are willing to assume this risk. If you have reason to believe that your interaction with us is no longer secure, you must immediately notify us of the problem by contacting us.

‍

In the event of a Security Incident, when PII is compromised, we shall (i) investigate the Security Incident, identify the impact of the Security Incident and take commercially reasonable actions to mitigate the effects of any such Security Incident, (ii) provide notification in a timely manner to Subscriber or individuals affected by the Security Incident, subject to applicable confidentiality obligations and to the extent allowed and/or required by and not prohibited by Applicable Laws or law enforcement.

‍

Except to the extent prohibited by Applicable Laws or law enforcement, ASSISTments shall, upon Users’s written request, provide Users with a description of the Security Incident and the type of data that was the subject of the Security Incident.

‍

Security Review Requests 

Upon written request by a User, which request shall be no more frequently than once per twelve (12) month period for a given school or institution associated with a User, ASSISTments shall respond to a security questionnaire regarding ASSISTments' information security program applicable to the Platform, provided that such information is available in the ordinary course of business for ASSISTments and it is not subject to any restrictions pursuant to ASSISTments’ privacy or data protection or information security-related policies or standards and that disclosure of any such information shall not compromise ASSISTments’ confidentiality obligations and/or legal obligations or privileges. Additionally, in no event shall ASSISTments be required to make any disclosures prohibited by Applicable Laws. All the information provided to Users under this section shall be Confidential Information of ASSISTments and shall be treated as such by the User.

‍

Upon written request by User, which request shall be no more frequently than once per twelve (12) month period for a given school or institution associated with a User, ASSISTments' data security measures may be reviewed by the User through an informal audit of policies and procedures or through an independent auditor’s inspection of security methods used within ASSISTments' infrastructure, storage, and other physical security, any such audit to be at the User’s sole expense and subject to a mutually agreeable confidentiality agreement and at mutually agreeable timing, or, alternatively, ASSISTments may provide the User with a copy of a third party audit of ASSISTments’ security methods, policies, and procedures.

OTHER SITES & LINKED CONTENT

‍

The Platform contains links to and displays content from third-party websites (“Linked Sites”) (such as Khan Academy videos) not under the control of TAF, and we are not responsible for the privacy policy or the contents of any such Linked Site or of any site linked directly or indirectly from any Linked Site. We provide such links and display such content only as a convenience, and the inclusion of such links and the display of such content on the Site and Platform does not imply our endorsement of the Linked Site or of any site linked directly or indirectly from any Linked Site.

‍

If you provide any Personally Identifiable Information through any Linked Site or any site linked directly or indirectly from any linked site, the Personally Identifiable Information you provide may be collected by, and controlled by the privacy policy of, that third party. We are not responsible for the privacy practices or the content of the Linked Sites or of any site linked directly or indirectly from any Linked Site. We recommend that you familiarize yourself with the privacy policies and practices of any Linked Site and of any site linked directly or indirectly from any Linked Site. 

‍

PLEASE NOTE THAT THIS POLICY DOES NOT ADDRESS THE PRIVACY OR INFORMATION PRACTICES OF ANY LINKED SITE OR OF ANY SITE LINKED DIRECTLY OR INDIRECTLY FROM ANY LINKED SITE.

‍

YOUR CALIFORNIA PRIVACY RIGHTS

‍

California Civil Code Section § 1798.83 permits users of our Platform that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. 

‍

Your rights as a data subject

‍

By law, you can ask us what information we hold about you, and you can ask us to correct it if it is inaccurate. If we have asked for your consent to process your personal data, you may withdraw that consent at any time.

‍

If we are processing your personal data for reasons of consent or to fulfil a contract, you can ask us to give you a copy of the information in a machine-readable format so that you can transfer it to another provider.

‍

If we are processing your personal data for reasons of consent or legitimate interest, you can request that your data be erased.

‍

You have the right to ask us to stop using your information for a period of time if you believe we are not doing so lawfully.

‍

Finally, in some circumstances, you can ask us not to reach decisions affecting you using automated processing or profiling.

‍

To submit a request regarding your personal data by email, post, or telephone, please use the contact information provided in the below section.

‍

Your right to complain

‍

If you have a complaint about our use of your information, we would prefer you to contact us directly.

‍

To make such a request or complaint, please contact us at contact@assistments.org or mailing address below at any time.

‍

CONTACT INFORMATION

‍

If you have any questions or concerns about this Privacy Policy, please contact us at:‍

‍

The ASSISTments Foundation

210 Park Ave #283

Worcester, MA 01609

contact@assistments.org

‍

QUESTIONS OR COMPLAINTS

If you have any questions about this Privacy Policy or our privacy practices, you may contact us using the details provided above.

‍

We are also a member of the iKeepSafe Safe Harbor Program. If you believe your privacy rights have been violated, or if you have questions or complaints that we have not adequately addressed, you may contact iKeepSafe directly at:

‍

COPPAPrivacy@ikeepsafe.org

‍

iKeepSafe will work with us to resolve your concerns.

‍

If any provision of this Policy shall be unlawful, void, or for any reason unenforceable, then that provision shall be deemed severable from this Policy and shall not affect the validity and enforceability of any remaining provisions.

‍

Under California Civil Code Section 1789.3, users of our Platform in California are entitled to the following specific consumer rights notice: The Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs may be contacted in writing at 400 R Street, Suite 1080, Sacramento, California 95814, or by telephone at (916) 445-1254 or (800) 952-5210.

‍

GEOGRAPHIC SCOPE

The Platform is solely directed to individuals residing in the United States. Those who choose to access the Site from other locations do so on their own initiative and at their own risk, and are responsible for compliance with local laws, if and to the extent local laws are applicable. Use of the Platform is forbidden in any jurisdiction that does not give effect to all provisions of these Terms, including without limitation this paragraph.

‍

‍

‍

‍

‍

‍

‍