i-Ready is an online assessment and instruction tool that helps teachers provide all students a path to proficiency and growth in reading and mathematics. The terms say that student information is not visible publicly, and is only accessible to authorized teachers, administrators, and parents. The terms also say that the service collects student information directly from the school districts, including sensitive information such as ethnicity and free-lunch status. In addition, the terms say student information will not be sold, nor will identifiable student information be shared with third parties, and no advertising is displayed in i-Ready. The terms say that reasonable security is used, data in transit and at rest is encrypted, and users will be notified in the case of a data breach. The terms say that children under 13 are not allowed to register for an account, and if any information is collected from a child without verifiable parental consent, it will be deleted. Authorized users can access, correct, or delete personal information at any time through the service.
iReady can be accessed through its website. The Privacy Policy and Terms of Use accessed for this evaluation can be found on iReady’s website. Additionally, other policies used for this evaluation include: Your Rights under the California Consumer Privacy Act. This evaluation only considers policies that have been made publicly available prior to an individual using the application or service.
i-Ready is an online assessment and instruction tool that helps teachers provide all students a path to proficiency and growth in reading and mathematics. The terms say that student information is not visible publicly, and is only accessible to authorized teachers, administrators, and parents. The terms also say that the service collects student information directly from the school districts, including sensitive information such as ethnicity and free-lunch status. In addition, the terms say student information will not be sold, nor will identifiable student information be shared with third parties, and no advertising is displayed in i-Ready. The terms say that reasonable security is used, data in transit and at rest is encrypted, and users will be notified in the case of a data breach. The terms say that children under 13 are not allowed to register for an account, and if any information is collected from a child without verifiable parental consent, it will be deleted. Authorized users can access, correct, or delete personal information at any time through the service.
iReady can be accessed through its website. The Privacy Policy and Terms of Use accessed for this evaluation can be found on iReady’s website. Additionally, other policies used for this evaluation include: Your Rights under the California Consumer Privacy Act. This evaluation only considers policies that have been made publicly available prior to an individual using the application or service.
Safety
The terms state that student information is not visible publicly, and is only accessible to authorized teachers, administrators, and parents. The terms state that there are no user interactions between users, and there is no ability for users to upload user content created outside of i-Ready. In addition, other than responses to questions or instructional prompts, students cannot create content within i-Ready and user information does not involve the creation of a profile.
Privacy
The terms state that i-Ready collects student information directly from school districts, including: student name, birth date, gender, ethnicity or race, school enrollment, grade level, teacher, English language learner status, and eligibility for free- or reduced-price lunch. User behavioral and usage data is also collected. The service has taken the Student Privacy Pledge, and the terms disclose student information is not sold, behaviorally targeted advertising is not used, and collected information is used only for authorized purposes, with student data only used for education-related purposes.
The terms also state the service may share personal information with third-party service providers to support their business, and also share de-identified data for research purposes, but they will not share identifiable student data with third parties. In addition, the terms say no student data collected in connection with i-Ready is shared with third parties for any advertising, marketing, or tracking purposes.
Security
The terms state that accounts with passwords are required for use of the website. Reasonable security is taken with personal information, and data—both in transit and at rest—is encrypted. The service puts limits on employee access to personal data, none of which is stored outside the control of the vendor. In the event of a data breach, impacted users will be notified and the data that has been compromised will be specified, if known. In addition, the terms state schools are responsible for notifying teachers and parents of any breach, but the vendor will provide reasonable help if requested, along with reimbursing schools for reasonable expenses for providing these notices. Lastly, the terms say an annual security audit is completed by a third party, and the vendor implements recommended security changes, if practical.
Compliance
The terms are not clear regarding use of the product by children under 13. However, children may not register for an account or provide any information directly to the vendor, but the terms also specifically discuss students using the product. The terms state that the service does not knowingly collect personal information from children under 13 and will delete it if it is found to have been collected without verifiable parental consent, but parental consent methods are not clear. The terms clearly state that personal information about students is collected directly from school or districts and not from students themselves, and users are not to upload any material that could be considered an education record.
In addition, the terms say authorized individuals are able to access, correct, or delete personal information that they have provided, but no specific time period is given for how long the vendor has to make changes or deletions. The terms state that to delete a user's personal information, their user account will also be deleted. The service has taken the Student Privacy Pledge and the terms state they will not sell student information or engage in any behaviorally targeted advertising.
