Privacy Evaluation | Browse all
Thumbnail
Updated August 3, 2018

Khan Academy

  • Intended for children under 13.
  • The terms are unclear about whether or not this product is intended for teens.
  • Intended for adults over 18.
  • Intended for parents or guardians.
  • Intended for students.
  • Intended for teachers.
  • Personally Identifiable Information (PII) is collected.
  • Geolocation data are collected.
  • The terms are unclear about whether or not this product collects biometric or health data.
  • Behavioral data are collected.
  • Non-Personally Identifiable Information is collected.
Use Responsibly
The privacy evaluation process categorizes edtech tools into the following three tiers:
Use Responsibly
Indicates that the service meets the minimum criteria and more research should be completed prior to use.
Use with Caution
Indicates that the service does not clearly define the safeguards to protect student information.
66
Overall Evaluationinfo-bubble

This Overall Evaluation score represents how the service addressed all our evaluation questions. A higher score (up to 100) means the service provides more transparent and comprehensive policies.

Overview

Khan Academy provides educational videos on a broad range of subjects for every course and level. Khan Academy's terms state they strive to provide a safe online environment for its users, and allow users to ask public questions of other users. Khan Academy does not require a user to register for the service or provide any personal information to access most of the features on the service. In addition, Khan Academy uses certain physical, managerial, and technical safeguards designed to preserve the integrity and security of a user’s personal information. Lastly, Khan Academy restricts child accounts to automatically block features that would allow a child to post or disclose personal information.

Khan Academy can be accessed through its website, and is available for download at the iOS App Store, and the Google Play Store. The Privacy Policy and Terms of Use accessed for this evaluation can be found on Khan Academy’s website, iOS App Store, and the Google Play Store. This evaluation only considers policies that have been made publicly available prior to an individual using the application or service.

Key Points
Intended Use
  • Intended for children under 13.
  • The terms are unclear about whether or not this product is intended for teens.
  • Intended for adults over 18.
  • Intended for parents or guardians.
  • Intended for students.
  • Intended for teachers.
Data Collection
  • Personally Identifiable Information (PII) is collected.
  • Geolocation data are collected.
  • The terms are unclear about whether or not this product collects biometric or health data.
  • Behavioral data are collected.
  • Non-Personally Identifiable Information is collected.
Parental Consent
  • Parental consent is required.
  • The terms are unclear about whether or not this product limits parental consent with respect to third parties.
  • Parents can withdraw consent for the further collection of their child's information.
  • Children's personal information is deleted if collected without parental consent.
  • Parental consent notice and method for submission are provided.
  • COPPA parental consent exceptions are disclosed.
  • FERPA parental consent exceptions are disclosed.
  • The terms are unclear about whether or not this product discloses Directory Information.
  • Parental consent obligations are transferred to the school or district.
SafetyPromoting responsible use
arrow
Evaluating safety takes into consideration best practices that protect a user's physical and emotional health. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to safety.
54

Khan Academy's terms state they strive to provide a safe online environment for its users, and allow users to ask public questions of other users. A parent or guardian can register for the service and create a restricted child account that can be monitored, revoked, or deleted by the parent. In addition, the terms state that a child user under 13 years of age cannot post to public discussion forums and cannot access certain features that could result in visibility or disclosure of personal information.

The terms state a child user can choose to provide opt-in consent to share their user profile with other users, but the profile is not shared publicly, because only the parent or authorized coach can see a child's profile. However, parents and teachers should be aware a child user may inadvertently post personal information publicly in open text fields by answering questions or completing exercises.

PrivacyProtecting collected information
arrow
Evaluating privacy takes into consideration best practices that protect the disclosure of a user's personal information. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to privacy.
70

Khan Academy's terms state they do not require a user to register for the service or provide any personal information to access most features on the service. If a user registers for the service, Khan Academy's terms state they may collect personally identifiable information, and usage data from a child, student, teacher, or parent. Khan Academy's terms state they also have external partnerships and third-party apps, and people using Khan Academy via a partnership or third-party app should review any additional privacy terms and conditions.

Khan Academy may also share information with their employees and trusted vendors, third party service providers and other individuals to provide services or products for them or on their behalf. The terms specify third-party marketing is generally limited to some contests. Advertising and tracking is also limited to consent and Khan Academy does not use data collected from children or students for advertising purposes. Khan Academy's terms state they do not share any of their users’ Personal Information with third-party sponsors without explicit consent, and these sponsors do not have the ability to track or collect information about their site visitors or users.

SecurityProtecting against unauthorized access
arrow
Evaluating security takes into consideration best practices that protect the integrity and confidentiality of a user's data. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to security.
65

Khan Academy's terms state they use certain physical, managerial, and technical safeguards designed to preserve the integrity and security of a user’s personal information. The terms state Khan Academy encrypts the transmission of personal information using SSL technologies and Khan Academy takes reasonable steps to ensure that the personal information a vendor stores and uses is accurate, complete, and up-to-date. In addition, the terms state they take reasonable steps to verify the identity of a user before granting account access or making corrections to their information, but does not guarantee the accuracy of any user’s information submitted to the vendor in order to verify the identity of any user, coach, parent, guardian or child. Lastly, Khan Academy's terms state they will notify a user in the event of a data breach electronically or with notice on its website.

ComplianceFollowing statutory laws and regulations
arrow
Evaluating compliance takes into consideration best practices of companies that collect personal information from children or students and the legal obligations for the privacy and security of that information. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to compliance.
70

Khan Academy restricts child accounts to automatically block features that would allow a child to post or disclose personal information. Khan Academy does not knowingly permit a child under 13 years of age to register for the service without parental consent and if they learn they have collected information from a child under 13 without parental consent, they will take steps to delete the information immediately. A parent can create a “parent account” that can review, update, or delete information collected from a child user. In addition, an educational institution or “coach” that has a relationship with the vendor can register a child under 13, if they have parental consent to do so. Lastly, a parent or guardian with notice that information has been collected from a child under 13 without their consent, may contact the vendor to delete the information. If Khan Academy is being used within a school or district setting, teachers should review the work done and stored within the service to ensure that the school or district is meeting all of their requirements under FERPA.

About Privacy Evaluations

The privacy evaluations have been designed with the help and support of a consortium of schools and districts across the United States. These evaluations are designed to streamline making an informed decision about the potential privacy implications of educational technology used to support teaching and learning.

Our core evaluation criteria are freely available and will remain freely available. People are encouraged to read the questions we use and the information security primer we released. Vendors are encouraged to use our questions and the information security primer to self-evaluate. You can also learn more about our evaluation process.

Please be in touch with any questions or feedback.