Full privacy evaluation | See all
Thumbnail
Updated February 9, 2019

Kahoot!

  • Privacy polices do indicate a version or effective date.
  • Unclear whether data are sold or rented to third parties.
  • Data are shared for advertising or marketing.
  • Unclear whether this product displays behavioral or contextual advertising.
  • Unclear whether this product allows data collection by third-party advertising or tracking services.
  • Unclear whether this product uses data to track and target advertisements on other third-party websites or services.
  • Unclear whether this product allows third parties to use data to create ad profiles, data enhancement, and/or targeted advertisements.
The criteria for "Use with Caution" are narrowly focused around data uses related to creating profiles that aren't related to any educational purpose, and using data to target ads. We include both first party (ie, the vendor that builds the service) and third party (any company given access by the vendor) data use. It's worth highlighting that using data to profile students violates multiple state laws, and in some cases also violates federal law.

A service can be designated "Use with Caution" for either a lack of transparency around data use -- which creates the potential for profiling and behavioral targeting -- or for clearly stating that they use data to target advertisements and/or create profiles. As with any application being considered for use within schools, school and/or district staff should review the privacy policies and terms of service to ensure that they meet the legal and practical requirements of their state laws and school policies.

As with the "Not Recommended" criteria, a "Use with Caution" designation is NOT a sign that a vendor is necessarily doing anything unethical or illegal. It is a sign that, based on publicly available policies,  we do not have adequate guarantees that data will not be used by first or third parties to create non-educational profiles or to target behavioral ads.
Use with Caution
Full evaluation
44
Overall Scoreinfo-bubble

This overall score represents how the service addressed all our evaluation questions. A higher score (up to 100) means the service provides more transparent and comprehensive policies.

Overview

Kahoot! is a free game-based learning platform that makes it fun to learn any subject, in any language, on any device, for all ages. Kahoot! allows sharing of a student's Kahoot! quizzes, answers, and surveys with other students and teachers in educational institutions for the educational purpose of in-class graded coursework. Kahoot! collects personally identifiable information and other automatically collected usage information through its services and may receive a user’s personal information from other sources, such as public databases, joint marketing partners, and other third parties. The terms of Kahoot! state they use reasonable organizational, technical, and administrative measures to protect users' personal information, and if a user has reason to believe that their interaction with Kahoot! is no longer secure, they should immediately contact Kahoot!. Lastly, When a Kahoot! user who is under the age of 13 creates an account, Kahoot! collects his or her name and email address, but does not collect any other personal information.

Kahoot! can be accessed through its website, and is available for download at the iOS App Store, and the Google Play Store. The Privacy Policy and Terms of Use used for this evaluation can be found on Kahoot!'s website, iOS App Store, and the Google Play Store. Additionally, other policies used for this evaluation include: Inclusion and Accessibility policy. This evaluation only considers policies that have been made publicly available prior to an individual using the application or service.

Read the Common Sense standard privacy report (SPR)arrow
The standard privacy report (SPR) displays the most important privacy practices from a product’s polices in a single easy-to-read outline. The report displays an alert when a particular privacy practice is risky, unclear, or not evaluated. This alert indicates more time should be focused on these particular details prior to use.
SafetyPromoting responsible use
arrow
Evaluating safety takes into consideration best practices that protect a user's physical and emotional health. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to safety.
34

Kahoot! allows sharing of a student's Kahoot! quizzes, answers, and surveys with other students and teachers in educational institutions for the educational purpose of in-class graded coursework. Kahoot! may provide various open communication tools on their service, such as blog comments, blog posts, public chat, forums, message boards, newsgroups, product ratings, reviews, and various social media services. Kahoot! does not pre-screen or monitor the content posted by users of these various communication tools and content may be used to identify a user with anyone they share a Kahoot! or other messages through the services.

In addition, a user's information may be visible from their profile page and other services to which they post information and materials. Kahoot! provides a warning to users that any information they post or disclose through the services will become public and may be available to other users and the general public. Kahoot! recommends users be very careful when deciding to disclose any information on the services.

PrivacyProtecting collected information
arrow
Evaluating privacy takes into consideration best practices that protect the disclosure of a user's personal information. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to privacy.
42

Kahoot! collects personally identifiable information and other automatically collected usage information through its services and may receive a user’s personal information from other sources, such as public databases, joint marketing partners, and other third parties. Kahoot! does not collect any personal information from a person who merely plays a Kahoot, but in order to create and host a Kahoot!, a user must register and create an account with the service. When an adult account holder registers for the service, Kahoot! asks that they not disclose any sensitive personal information.

In addition, Kahoot! may share a user’s data with third-party service providers to support its services and if a user participates, data may be shared with sponsors of sweepstakes, contests and other similar marketing promotions. Kahoot! may also send marketing communications and newsletters to a user personalized form their experience on the services such as products and offers that are tailored to them. However, the terms do not disclose whether Kahoot! may sell a user's personal information to third parties or use personal information for behavioral advertising or tracking purposes.

SecurityProtecting against unauthorized access
arrow
Evaluating security takes into consideration best practices that protect the integrity and confidentiality of a user's data. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to security.
47

The terms of Kahoot! state they use reasonable organizational, technical, and administrative measures to protect users' personal information, and if a user has reason to believe that their interaction with Kahoot! is no longer secure, they should immediately contact Kahoot!. However, Kahoot! does not disclose whether a user’s personal information is encrypted while in transit or while at rest. Lastly, Kahoot! does not disclose whether they implement access controls to personal information, or if they provide notice to users in the event of a data breach.

ComplianceFollowing statutory laws and regulations
arrow
Evaluating compliance takes into consideration best practices of companies that collect personal information from children or students and the legal obligations for the privacy and security of that information. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to compliance.
60

When a Kahoot! user who is under the age of 13 creates an account, Kahoot! collects his or her name and email address, but does not collect any other Personal Information. Kahoot! immediately and permanently alters a child’s email address so that it can only be used as a password reminder and cannot be reconstructed into its original form or used to contact the child.

In addition, If a parent or guardian submits any personal information of their child to Kahoot! they must represent that they have the authority to do so and to permit Kahoot! to use the information. In addition, Kahoot! and third-party service providers may perform data analytics on information from child account holders. This includes use of certain persistent identifiers to collect information about the use of the services for internal purposes only.

A parent or guardian can request Kahoot! to review, request no further collection, or delete the information Kahoot! has collected from their child. Kahoot! requires parents to include their name and child’s Kahoot username, and specify the action they would like Kahoot! to take. For a child’s protection, Kahoot! may need to verify a parent or guardian’s identity before processing a request. However, the terms of Kahoot! do not address any compliance obligations under the Family Educational Rights and Privacy Act (FERPA), given that the collection and sharing of a student's Kahoot! quizzes, answers, and surveys with other students and teachers in educational institutions for the educational purpose of in-class graded coursework and discussions utilizes student education records.

About Privacy Evaluations

The privacy evaluations have been designed with the help and support of a consortium of schools and districts across the United States. These evaluations are designed to streamline making an informed decision about the potential privacy implications of educational technology used to support teaching and learning.

Our core evaluation criteria are freely available and will remain freely available. People are encouraged to read the questions we use and the information security primer we released. Vendors are encouraged to use our questions and the information security primer to self-evaluate. You can also learn more about our evaluation process.

Please be in touch with any questions or feedback.