Privacy Policy for Product Users

Last Updated Date: February 14, 2023

Introduction

Welcome! GoGuardian (formally — Liminex, Inc. doing business as GoGuardian)  and its family of company Affiliates including Pear Deck, Inc. (“Pear Deck”), Edulastic (formally - Snapwiz, Inc. doing business as Edulastic — referred to throughout as “Edulastic”), and Pear Practice (“Pear Practice”) (together, Liminex, Inc. dba GoGuardian, Pear Deck, Edulastic, and Giant Steps as “Liminex”, “we”, “us”, “our”) is an educational technology company that provides K-12 schools and school districts with digital learning tools designed to supercharge the learning potential of every student.  The privacy of each and every user matters deeply to us, and we strive for transparency in all of our data privacy practices—especially when it comes to identifying the information that we collect, use, share, and disclose, as well as how we help keep your information safe. We take our responsibility to protect your information very seriously. Please remember that we are always here to answer any questions you have, and we look forward to working with you for years to come. Capitalized terms used herein that are not expressly defined are as defined in our Product Terms of Service and End User License Agreement.

This Product Privacy Policy (“Product Privacy Policy”) explains how we collect, use, share, disclose, and protect information collected from and about our School customers that are using our Offering(s) and such School’s Authorized School Personnel. Our Offerings include the following:

This Product Privacy Policy does not apply to:

By using our Offerings, you, the school or school district (“School,” “you,” “your”), are declaring that you have read and understand this Product Privacy Policy. If you are acting on behalf of a School, you represent and warrant that you are at least eighteen (18) years old and have the authority, the right, and the capacity to legally bind the school and have read and understand this Product Privacy Policy. Our Combined Terms of Service and End User License Agreement ("EULA"), and as applicable to the extent your School is in the European Economic Area ("EEA"), our Data Protection Addendum ("DPA"), also apply to how we treat your information.

Information Provided Directly to Us through our Offerings

The information that we collect depends on the Offerings and features within those Offerings that a School uses. We collect some business information directly from a School (e.g., information collected when signing up to use our Offerings) or from Schools about their students or directly from the School’s students (e.g., browsing information) when we act as their service provider. We also collect some information automatically (e.g., Offerings usage information).

School and School Official Information

We collect the following information that we collectively label as “School Information”:

Personal Student Information for All Offerings

When addressing a specific Offering in this Product Privacy Policy, we may refer to the name of the entity and the Personal Student Information collected by such entity. Each school in the United States must comply with any legal requirements applicable to it, which may include, providing appropriate notice and/or obtaining parental consent. Schools located in countries outside of the United States must also obtain and provide appropriate consent from parents and/or guardians of students or as otherwise required by applicable law. We only collect Personal Student Information where Schools have provided consent required by applicable law, including the Children’s Online Privacy Protection Act (“COPPA”). The Personal Student Information collected may change if a School utilizes new features or Offerings.

GoGuardian Personal Student Information

This section applies to the GoGuardian Offerings only. In providing our GoGuardian Offerings to Schools, we collect information that may, alone or in combination with other available information, be reasonably used to identify a current or former student enrolled in a K-12 School (“Personal Student Information”). GoGuardian only collects Personal Student Information on school-managed devices and/or accounts where a School has already registered with GoGuardian and chosen to use GoGuardian Offerings and where such Schools have consented as set forth above. The Personal Student Information collected by our GoGuardian Offerings on behalf of a School depends on the particular GoGuardian Offerings and features selected by a School and the particular settings enabled or disabled by the School. Pursuant to such selections, the Personal Student Information that we collect includes:

Pear Deck Personal Student Information

This section applies to the Pear Deck Offerings only. The Personal Student Information collected by the Pear Deck Offerings on behalf of a School depends on the particular features selected by a School and the particular settings enabled or disabled by the School. Pursuant to such selections, the Personal Student Information that we collect includes:

Edulastic Personal Student Information

This section applies to the Edulastic Offerings only. The Personal Student Information collected by the Edulastic Offerings on behalf of a School depends on the particular features selected by a School and the particular settings enabled or disabled by the School. Pursuant to such selections, the Personal Student Information that we collect includes:

Pear Practice Personal Student Information

This section applies to the Pear Practice Offerings only. The Personal Student Information collected by the Pear Practice Offerings on behalf of a School depends on the particular features selected by a School and the particular settings enabled or disabled by the School. Pursuant to such selections, the Personal Student Information that we collect includes:

Student’s School-Managed Account Information and Association Information:  For students who log into Pear Practice with a School-Managed Account, we collect student’s name, email address, the school-managed account ID ( for example the Google ID or Microsoft ID), as well as identifiers and associated information necessary to associate a student with a certain device, account, session, teacher and/or school. When a student joins a session with a code in anonymous mode, we do not collect student name or email address to join such session.

Activity Information: We collect additional information about the student’s activity within a session, including engagement with and any student content generated in the session. This may include free text, multiple choice answers, drawings, or session URLs.

Device and Usage Information: We collect general device and usage information such as IP address, device identifier, operating system, browser type, non-precise geographic location (e.g. zip code and city), technical information about your device, system and app software, and peripherals, and date and time stamps associated with login.

Integration Information: If your School chooses to integrate Giant Steps Offerings with other Integration Offerings (e.g., integrate with other School software with Pear Practice), then we will collect the information necessary to integrate and perform our Offerings, including unique identifiers (e.g., Google classroom identifier to connect a student to his/her classroom if your School integrates Google Classroom with Pear Practice).

Parent/Guardian Information

If a School chooses to utilize one of our Offerings’ guardian feature (such as to enable a School to send important automated notifications to a parent/guardian about his/her child for a GoGuardian Offering or to view assessment results in Edulastic), we will receive certain information about a student’s parent(s)/guardian(s). Specifically, depending on the guardian feature, we may receive a parent’s/guardian’s name, email address, and optionally phone number from the School. To learn whether your child’s School is using this guardian role or feature or how to update a child’s legal parent/guardian contact information, please contact your child’s School and follow the instructions below in the section below titled “Requests from Parents, Legal Guardians, Eligible Students, and Authorized School Personnel”.

If you are a parent or guardian and utilize a guardian feature (including the Parent App in GoGuardian and guardian feature in Edulastic), we collect: 1) your email address to confirm your authorization from the School to use the app and to determine the student associated with you and, once verified, enable the app; and 2) automatically collected information about your app activity set forth below.

Information We Automatically Collect through Our Offerings

Our Offerings automatically collect the following additional information that we label collectively as “School Log and Cookie Information”:

How We Use Information Collected Through Our Offerings

We use School Information and School Log and Cookie Information to:

We do not sell School Information and School Log and Cookie Information or share it for cross context behavioral advertising (and have not done so in the past 12 months).

In accordance with our contractual obligations, we use Personal Student Information and Parent/Guardian Information to:

At all times, Personal Student Information is the property of and under the control of a School, or as required by applicable law, Personal Student Information is the property of and under the control of the applicable eligible student, parent, or guardian.

We do not sell Personal Student Information. We do not use Personal Student Information to target advertisements or market to students or anyone else, to amass a profile about a K-12 educational student for a non-educational purpose, or for any purposes prohibited by the Family Educational and Privacy Rights Act (20 U.S.C. § 1232g; 34 CFR Part 99.3) ("FERPA"), California Business & Professions Code section 22584 (“SOPIPA”), and California Education Code section 49073.1. We will not use Personal Student Information for any purpose other than those required or specifically set forth in this Product Privacy Policy, our EULA, DPA, or any other agreement between a School and Liminex.

We will also use your Personal Student Information in accordance with applicable student privacy laws, including, as applicable, Connecticut's "Act Concerning Student Privacy".

If you are a Product User in the EEA or the United Kingdom ("UK"), please see the “Notice to EEA and Other Non-US Residents” section for more information about how we use information and the legal bases for collecting information.

How We Disclose Information Collected Through Our Offerings

We may disclose information in the following ways:

If you are a School or other Authorized School Personnel in the EEA or the UK, please see our Notice to EEA and Other Non-US Residents below.

How Long We Keep Information

We retain Personal Student Information as directed by the School:

We generally retain information other than Personal Student Information for as long as it may be relevant to the purposes above or as required or permitted by law. We consider the nature and sensitivity of the information, the purposes for which we process the information, applicable legal requirements, and our legitimate interests in determining how long to retain information.  The purposes for which we use information may dictate different retention periods for the same types of information.  To dispose of any personal information, we may anonymize it, delete it or take other appropriate de-identifying steps. Please note that information may persist in copies made for backup and business continuity purposes for an additional period of time.

Your Rights and Choices about Information Collected through Our Offerings

You have certain rights and choices with respect to your information as further described in this section.

Your choices about School Profile Information and School Log and Cookie Information:

Privacy rights related to School Profile Information and School Log and Cookie Information:

Residents of certain jurisdictions have rights with respect to personal information, but, except as set forth below, these rights do not apply to business to business information (e.g., business contact, contract and business communications).  In addition, these rights do not apply to personal information collected by Liminex when Liminex is acting as a service provider of a School (though we assist Schools in fulfilling requests that they receive). You can read more about any such applicable rights at our Privacy Policy for Website visitors. If you are acting on behalf of your School and would like to submit a data request, please follow the instructions described in the Section titled “School’s Request for Deletion or Transfer of Personal Student Information.” Similarly, if you are a parent, guardian, eligible student, or Authorized Personnel and would like to submit a data request to us, please follow the instructions described in the Section titled “Requests from Parents, Legal Guardians, Eligible Students, and Authorized School Personnel.”

With respect to School Profile Information and School Log and Cookie Information, residents of the EEA, UK, and California may request that we:

Your choices about School Information (Except School Profile Information), Personal Student Information, and Parent/Guardian Information:

How We Protect Your Information

We take the security and privacy of your School’s data very seriously. For these reasons, we have implemented various technical, administrative, and physical safeguards to protect your information, including specific training of our personnel authorized to access Personal Student Information and other information. These safeguards vary depending on the sensitivity of the information at issue.

We are committed to preventing unauthorized access to our systems and data, and will investigate any possible occurrence. In the event of a breach of Personal Student Information, we will comply with all relevant breach laws to assist the School or provide notification as required to you, a School, affected parents, legal guardians, eligible students, and regulators.

Additional Information for California Residents

If you are a California resident, California law requires us to provide you with some additional information.  We collect the following categories of personal information: identifiers (such as name and email address); internet or other network information (how users interact with our Products); and other information that identifies or can be reasonably associated with you (such as your correspondence with us). We also collect information at the direction of Schools including education information, location information (about devices), and audio and visual information.  

We use such information to:

We retain such information as long as it is necessary to fulfill the purposes for which we collect it, unless a longer retention is required or permitted by law. We consider the nature and sensitivity of the information, the purposes for which we process the information, applicable legal requirements, and our legitimate interests in determining how long to retain information.

NOTICE TO E.E.A. AND OTHER NON-U.S. RESIDENTS

European Union (“EU”) data protection laws make a distinction between organizations that process personal data for their own purposes (known as "data controllers") and organizations that process personal data on behalf of other organizations (known as "data processors"). Depending on the particular circumstance, we and your School may act either as a data controller or a data processor of your personal data. The laws in some jurisdictions like the EU also require data controllers to share the legal ground that they rely upon to use or disclose personal information.

Liminex as a Data Controller vs. Data Processor

Liminex is considered the “processor” of School Information (except for School Profile Information), Personal Student Information and Parent/Guardian Information. We collect, use, share and disclose this information as a processor on behalf of and at the instruction of the School controller, pursuant to our EULA and, if applicable, DPA. If you have a question or complaint about how your personal data is handled, please contact your School.

We are considered the “controller” of School Profile Information and School Log and Cookie Information. We as the data controller collects, uses, shares, and discloses this information as described above in this Product Privacy Policy. We retain the personal data contained in this information for as long as necessary to provide you with Offerings, or for other important purposes such as complying with legal obligations, resolving disputes, and enforcing our agreements.

Our legal grounds for using School Profile Information and School Log and Cookie Information are as follows:

Information Transfer To The United States

The Offerings are operated in the United States. If you are located outside of the United States, please be aware that any information that you provide to us will be transferred to and/or accessed within the United States. The recipients of information described in the relevant “How We Share Information” sections above may be located in the United States. This information may be subject to United States law, including laws that may require disclosure of personal information to government authorities. Schools may export Personal Data to jurisdictions outside the European Economic Area on the basis of legal mechanisms approved by the European Commission and other relevant authorities for cross-border data transfers, such as Standard Contractual Clauses.

How To Contact Us and Dispute Resolution

How to Contact Us for Non-U.S. Residents: Individuals located outside the United States who have questions or concerns regarding our Product Privacy Policy or practices may direct a complaint in writing to Chief Privacy Officer, Liminex, Inc., 2030 East Maple Avenue, Suite 100, El Segundo, California 90245. Tel: 888-310-0410 Email: privacy@goguardian.com. Within a reasonable time of receiving the written complaint, we will review and address the complaint, as appropriate, and inform the individual of the results of such review and any steps taken to address the complaint.

Dispute Resolution for EU and Swiss Residents:  For GoGuardian and for Pear Deck and Edulastic once participation in the Privacy Shield framework is effective for each of Pear Deck and Edulastic, if you are a resident of the EU or Switzerland and are dissatisfied with the manner in which we have addressed your concerns, you may seek further assistance, at no cost to you, from our designated Privacy Shield independent recourse mechanism, the JAMS Privacy Shield Program, which you can learn more about by visiting https://www.jamsadr.com/eu-us-privacy-shield. Residents of the EU or Switzerland may, in certain circumstances, elect to arbitrate unresolved complaints by invoking binding arbitration pursuant to the Privacy Shield’s Recourse, Enforcement and Liability Principle and Annex I of the Privacy Shield but prior to initiating such arbitration, you must: (1) afford us the opportunity to resolve the issue; (2) seek assistance via our recourse mechanism above; and (3) contact the U.S. Department of Commerce (either directly or through a European Data Protection Authority) and afford the Department of Commerce time to attempt to resolve the issue. Each party shall be responsible for its own attorney’s fees. Please be advised that, pursuant to the Privacy Shield, the arbitrator(s) may only impose individual-specific, non-monetary, equitable relief necessary to remedy any violation of the Privacy Shield Principles with respect to the individual. We are subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).

For Australian residents: If you are located in Australia, and are dissatisfied with the way we have handled a privacy issue, you may contact the Office of the Australian Information Commissioner for more information www.oaic.gov.au.

For Singapore residents: If you are located in Singapore, and are dissatisfied with the way we have handled a privacy issue, you may contact the Personal Data Protection Commission for more information www.pdpc.gov.sg.

Cookies Notice

What are cookies?

Cookies are small text files stored on your computer that allow us to understand usage of Offerings. Cookies include cookies, Internet server logs, tags, Software Development Kit/SDKs, tracking pixels, and other similar tracking technologies. A number of Cookies that we use last only for the duration of your session, expiring when your session ends (the so-called "session cookies"). Other Cookies are used to help our systems recognize you if you return to Offerings and will thus be retained longer (the so-called "persistent cookies"). Some of the cookies used on our Offerings are set by us, and some are set by third parties that are delivering services on our behalf.

What types of Cookies do we use and what data do they collect?

We use Cookies in the Offerings that automatically collect information to:

We do not use any advertising Cookies in our Offerings and we do not place advertisements in the Offerings.

What are my choices about Cookies?

You can learn more about how Cookies work and how to turn them off in your particular browsers. Please remember that if you replace, change or upgrade your browser, or delete your Cookies, you may need to use these opt-out tools again.

For information about Cookies used by the developers of these browsers, please visit:

For controls specific to advertising and analytics services offered by Google, click here from each of your browsers.

Note About Do Not Track: Do Not Track (“DNT”): is a privacy preference that users can set in certain web browsers to inform websites and services that they do not want certain information about their webpage visits collected over time and across websites or online services. Some browsers do not recognize DNT settings. At this time, we do not recognize or respond to browser-initiated DNT signals because we do not track you across websites.

Changes to this Privacy Policy

We reserve the right to make changes to this Product Privacy Policy such as to reflect changes in the law, our data collection and use practices, and the features of the Offerings. At the top of our Product Privacy Policy, we will indicate the date of the most recent update to this Product Privacy Policy. We will notify your School of material changes to the Product Privacy Policy on our Website, and make additional efforts to notify your School of material changes that impact the treatment of data collected via the Offerings and/or via email. We will also obtain your School’s consent before any material changes to our Product Privacy Policy apply to your School where required by applicable law.

How to Contact Us

If you have questions or concerns, the best way to reach us is by emailing privacy@goguardian.com. You can also reach us by calling 888-310-0410 or by writing to Liminex, Inc. dba GoGuardian, Attn: Chief Privacy Officer, 2030 East Maple Avenue, Suite 100, El Segundo, California 90245.

Additionally, please feel free to consult additional resources such as the ones listed below.

Student Privacy Resource List: