Full privacy evaluation | See all
Thumbnail
Updated December 8, 2018

FETCH! Lunch Rush

  • Intended for children under 13.
  • Collection or use of data is limited to product requirements.
  • Personal information is not displayed publicly.
  • Users can interact with trusted users and/or students.
  • Notice is provided in the event of a data breach.
  • Parental consent is required.
Indicates that the product meets all our required privacy safeguards, but more research should be completed prior to use.
Use Responsibly
Full evaluation
51
Overall Scoreinfo-bubble

This overall score represents how the service addressed all our evaluation questions. A higher score (up to 100) means the service provides more transparent and comprehensive policies.

Overview

In FETCH! Lunch Rush, you need to keep up with lunch orders from Ruff’s movie crew. The challenge is keeping track of how many pieces of sushi everyone wants. The terms state the service provides safe social interactions between users and allows for the collection of comments and other information that children post through interactive online features. The terms also specify they do not rent or sell information to third parties and will not use children's collected personal information for any marketing, online advertising, or third-party tracking that would directly identify a child. In addition, the terms state the service is committed to protecting parents and their children's information. The terms disclose they do not have actual knowledge that personal information from children under 13 years of age or education records from students in K-12 settings are collected by the service.

FETCH! Lunch Rush is available for download at the iOS App Store. The Privacy Policy and Terms of Use used for this evaluation can be found on FETCH! Lunch Rush’s iOS App Store. This evaluation only considers policies that have been made publicly available prior to an individual using the application or service.

Read the Common Sense standard privacy report (SPR)arrow
The standard privacy report (SPR) displays the most important privacy practices from a product’s polices in a single easy-to-read outline. The report displays an alert when a particular privacy practice is risky, unclear, or not evaluated. This alert indicates more time should be focused on these particular details prior to use.
SafetyPromoting responsible use
arrow
Evaluating safety takes into consideration best practices that protect a user's physical and emotional health. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to safety.
52

The terms state the service provides safe social interactions between users and allows for the collection of comments and other information that children post through interactive online features. If a child user chooses to create an account, they will be required to create a custom username. The terms state child usernames are moderated with the aim of preventing children from using any personal information to create an account. In addition, the terms state social interactions and user generated content is either canned or moderated to avoid collecting personal information. Lastly, the terms specify the service avoids making any personal information publicly visible to others in order to help maintain a safe environment for users.

PrivacyProtecting collected information
arrow
Evaluating privacy takes into consideration best practices that protect the disclosure of a user's personal information. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to privacy.
59

The terms state the service does not collect information that directly identifies a child. However, the terms also describe that the service may collect information about a user's device, including hardware model, operating system version, IP address, and unique identifiers. The terms also specify they do not rent or sell information to third parties and will not use children's collected personal information for any marketing, online advertising, or third-party tracking that would directly identify a child. Lastly, the terms state the service may share a user's aggregated or de-identified information with third parties for their own product development or research purposes.

SecurityProtecting against unauthorized access
arrow
Evaluating security takes into consideration best practices that protect the integrity and confidentiality of a user's data. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to security.
75

The terms state the service is committed to protecting parents and their children's information. The terms specify they have adopted reasonable technical, administrative, and physical procedures to help protect users' information from loss, misuse, and alteration, including encryption of passwords and information in transit. Additionally, the terms state a child is not required to create an account in order to use the services. However, users may want to do so in order to save their progress, settings, or content created while using the services. Lastly, the terms state the service will provide users notification in the case of a data breach.

ComplianceFollowing statutory laws and regulations
arrow
Evaluating compliance takes into consideration best practices of companies that collect personal information from children or students and the legal obligations for the privacy and security of that information. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to compliance.
37

The terms disclose they do not have actual knowledge that personal information from children under 13 years of age or education records from students in K-12 settings are collected by the service. However, parents and educators should be aware that the service would likely appeal to students and children under 13 years of age and therefore would be subject to COPPA and FERPA regulations. This determination takes several factors into account, including subject matter, visual content, age of models, and the activities provided.

The terms also state that the service will obtain a parent or legal guardian's consent before collecting, using, or disclosing personal information from children. However, the terms are unclear how verified parental consent is actually requested or obtained. The terms specify that parents or legal guardians may contact the company to ask if the service has collected their child's personal information, to review that information, and request that the company stop collecting any information, or have it deleted. Additionally, the terms disclose the service is not required to provide any modification, access, correction, deletion, or portability requests to users because the service claims they have no actual knowledge children under 13 years of age or students in K-12 are using the service. If this service is used within a school context, teachers and school staff are strongly encouraged to review how their school or district defines education records, and whether the activities within the service would create educational records.

About Privacy Evaluations

The privacy evaluations have been designed with the help and support of a consortium of schools and districts across the United States. These evaluations are designed to streamline making an informed decision about the potential privacy implications of educational technology used to support teaching and learning.

Our core evaluation criteria are freely available and will remain freely available. People are encouraged to read the questions we use and the information security primer we released. Vendors are encouraged to use our questions and the information security primer to self-evaluate. You can also learn more about our evaluation process.

Please be in touch with any questions or feedback.