Privacy Evaluation | Browse all
Thumbnail
Updated January 22, 2018

EduTone

  • Intended for children under 13.
  • The terms are unclear about whether or not this service is intended for teens.
  • The terms are unclear about whether or not this service is intended for adults over 18.
  • Intended for parents or guardians.
  • Intended for students.
  • Intended for teachers.
  • Service does not allow free account creation.
  • Service offers a paid version or in-app-purchases.
  • Personally Identifiable Information (PII) is collected.
  • The terms are unclear about whether or not this service collects geolocation data.
  • The terms are unclear about whether or not this service collects biometric or health data.
  • The terms are unclear about whether or not this service collects behavioral data.
  • Non-Personally Identifiable Information is collected.
Use Responsibly
The privacy evaluation process categorizes edtech tools into the following three tiers:
Use Responsibly
Indicates that the service meets the minimum criteria and more research should be completed prior to use.
Use with Caution
Indicates that the service does not clearly define the safeguards to protect student information.
61
Overall Evaluationinfo-bubble

This Overall Evaluation score represents how the service addressed all our evaluation questions. A higher score (up to 100) means the service provides more transparent and comprehensive policies.

Overview

EduTone provides a cloud-based identity, access management, marketplace, and data analytics platform designed for educational institutions. EduTone's terms state they do not provide social interactions between students and adults, and do not make a user's information publicly visible. EduTone's terms state they collect personally identifiable information and non-personal information automatically. EduTone's terms state they use strict administrative and technical procedures to keep data safe and secure. In addition, EduTone’s terms state they do not knowingly collect any information from children under the age of 13 years of age, unless the School has obtained appropriate parental consent. EduTone states that COPPA does not apply to its Service, because children under the age of 13 are not the target users of the service, or allowed to register an account, or provide information to the Service.

EduTone can be accessed through its website. The Privacy Policy accessed for this evaluation can be found on EduTone’s website. This evaluation only considers policies that have been made publicly available prior to an individual using the application or service.

Key Points
Intended Use
  • Intended for children under 13.
  • The terms are unclear about whether or not this service is intended for teens.
  • The terms are unclear about whether or not this service is intended for adults over 18.
  • Intended for parents or guardians.
  • Intended for students.
  • Intended for teachers.
Data Collection
  • Personally Identifiable Information (PII) is collected.
  • The terms are unclear about whether or not this service collects geolocation data.
  • The terms are unclear about whether or not this service collects biometric or health data.
  • The terms are unclear about whether or not this service collects behavioral data.
  • Non-Personally Identifiable Information is collected.
Parental Consent
  • Parental consent is required.
  • The terms are unclear about whether or not this service limits parental consent with respect to third parties.
  • The terms are unclear about whether or not this service allows parents to withdraw consent for the further collection of their child's information.
  • children's personal information is deleted if collected without parental consent.
  • The terms are unclear about whether or not this service provides parental consent notice and method for submission.
  • The terms are unclear about whether or not this service discloses COPPA parental consent exceptions.
  • FERPA parental consent exceptions are disclosed.
  • Parental consent obligations are transferred to the school or district.
SafetyPromoting responsible use
arrow
Evaluating safety takes into consideration best practices that protect a user's physical and emotional health. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to safety.
6

The terms of EduTone state it does not provide social interactions between students and adults, and does not make a user's information publicly visible. However, the terms also describe a suite of related services targeted primarily to educators that support sharing content, and open discussions.

PrivacyProtecting collected information
arrow
Evaluating privacy takes into consideration best practices that protect the disclosure of a user's personal information. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to privacy.
67

The terms of EduTone state they collect personally identifiable information and non-personal automatically collected information. EduTone's terms state they will not sell, rent, or use student information to target students or their families for advertising or marketing purposes, or allow third party advertising networks to collect any information about the users of the services. EduTone's terms state they do not disclose any personal information relating to students, parents, or school officials to third parties without opt-in consent. Lastly, EduTone's terms state they contractually obligate third-party service providers to keep Student PII confidential and to only use it in order to fulfill their responsibilities.

SecurityProtecting against unauthorized access
arrow
Evaluating security takes into consideration best practices that protect the integrity and confidentiality of a user's data. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to security.
71

The terms of EduTone state they use strict administrative and technical procedures to keep data safe and secure. The terms also state that they maintain strict administrative, technical and physical procedures to protect information stored in their servers. The terms state access to information is limited (through multi-factor authentication) to those employees who require it to perform their job functions. In addition, EduTone's terms state that the vendor conducts thorough background checks for employees, as well as conducting comprehensive activity audits and ensuring that their work is entirely separate from the rest of our team.

Moreover, the terms describe multiple measures that EduTone has implemented measures designed to secure PII from accidental loss and from unauthorized access, use, alteration and disclosure. All PII is securely stored behind firewalls in a private cloud environment, and all environments are equipped with intrusion detection systems. The terms state that PII is encrypted at rest and in transit to and from the Service using industry-standard encryption technology. Lastly, Edutone's terms state they follow the Department of Education's recommendations to only store information in jurisdictions specific to their users.

ComplianceFollowing statutory laws and regulations
arrow
Evaluating compliance takes into consideration best practices of companies that collect personal information from children or students and the legal obligations for the privacy and security of that information. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to compliance.
64

EduTone’s terms state they do not knowingly collect any information from children under the age of 13, unless the School has obtained appropriate parental consent. EduTone's terms state that COPPA does not apply to its Service, because children under the age of 13 are not the target users of the service, or allowed to register an account, or provide any information to the Service.

However, under FERPA, EduTone requires access to certain student Information or educational records to remain the legal responsibility of the applicable school. EduTone's terms state they will only use personally identifiable information from student education records to enable school officials and parents access and use the services provided by EduTone. Before a school can upload, access or share any data concerning a student with a third party, the school must confirm that they have obtained verifiable parental consent from the parent or guardian of that student, or determined a limited exception under FERPA.

Moreover, the terms state that before EduTone discloses information in response to a legal request, they will contact the School with notice of the requirement, so the School may choose to seek a protective order or other remedy, if applicable. Lastly, EduTone self certifies with the privacy shield safe harbor and has signed the Student Privacy pledge.

About Privacy Evaluations

The privacy evaluations have been designed with the help and support of a consortium of schools and districts across the United States. These evaluations are designed to streamline making an informed decision about the potential privacy implications of educational technology used to support teaching and learning.

Our core evaluation criteria are freely available and will remain freely available. People are encouraged to read the questions we use and the information security primer we released. Vendors are encouraged to use our questions and the information security primer to self-evaluate. You can also learn more about our evaluation process.

Please be in touch with any questions or feedback.