Security
We take this stuff seriously and are ISO/IEC 27001 certified for security and privacy.
We comply with these privacy laws:
Membean complies with the requirements of the Children's Online Privacy Protection Act (COPPA) and the FTC's Rule interpreting COPPA (16 CFR § 512).
If you are located in the United States and are under the age of thirteen (13) you must have your parent's or legal guardian's approval prior to posting any content on the Website. This is either obtained through your school or school district administrator or directly from your parents or legal guardian. If you are located outside the United States and are under the age of sixteen (16), depending on your location, you may need to obtain your parent's or legal guardian's approval prior to posting any content on the Website or otherwise using the Services.
Membean collects limited personal information from students, including the Student Information described above ("Children's Personal Information"), but only where that student's school, school district, parent and/or legal guardian has contracted with Membean to collect Children's Personal Information from students for the use and benefit of the learning environment. Membean requires schools and school districts to obtain consent from students' parents and/or legal guardians before collecting any such Children's Personal Information.
We comply with all applicable provisions of the Family Educational Rights and Privacy Act (FERPA) (20 U.S.C. § 1232g; 34 CFR Part 99). FERPA provides parents and guardians of students' rights with respect to their student's education records. Parents have the right to inspect their student’s records, including the PII that is contained in these electronic systems. Parents can seek amendment of the student’s education records that the parent or eligible student believes to be inaccurate, misleading or otherwise in violation of the student’s privacy rights.
The Protection of Pupil Rights Amendment (PPRA (20 U.S.C. § 1232h; 34 CFR Part 98) applies to any local educational agency that receives funding from the U.S. Department of Education. A local educational agency means an elementary school, secondary school, school district, or local board of education that is the recipient of funds from the U.S. Department of Education. The focus of PPRA is on the requirement for parental consent for the collection of certain sensitive information, such as medical data or sexual attitudes or practices from school children via surveys and evaluations.
Membean fully complies with the Student Online Personal Information Protection Act (SOPIPA). SOPIPA prohibits operators of online, educational websites from sharing student data and using that data for targeted advertising on students for a non-educational purpose in the state of California. It requires the above operators to implement and maintain reasonable security procedures and practices to protect student data. It also requires operators to delete a student's information at the request of the school or district.
Membean fully complies with the California Consumer Privacy Act (CCPA). CCPA allows California residents to ask businesses to disclose what personal information they posess about them and what the business does with that information, to delete personal information and not to sell personal information.
California residents also have the right to be notified, before or at the point businesses collect personal information, of the types of personal information they are collecting and what they may do with that information. Generally, businesses cannot discriminate against California residents for exercising their rights under the CCPA . Businesses cannot make you waive these rights, and any contract provision that says you waive these rights is unenforceable.
Our GDPR Commitment
We are fully committed to compliance with the General Data Protection Regulation and the protection of personal data and rights of users.
To learn more, check out our GDPR Policy.
Differentiated vocabulary for your students is just a click away.