Full privacy evaluation | See all
Thumbnail
Updated January 10, 2018

NoRedInk

  • Privacy polices do indicate a version or effective date.
  • Data are not sold or rented to third parties.
  • Unclear whether data are shared for advertising and/or marketing.
  • Unclear whether this product displays behavioral or contextual advertising.
  • Unclear whether this product allows data collection by third-party advertising or tracking services.
  • Unclear whether this product uses data to track and target advertisements on other third-party websites or services.
  • Unclear whether this product allows third parties to use data to create ad profiles, data enhancement, and/or targeted advertisements.
The criteria for "Use with Caution" are narrowly focused around data uses related to creating profiles that aren't related to any educational purpose, and using data to target ads. We include both first party (ie, the vendor that builds the service) and third party (any company given access by the vendor) data use. It's worth highlighting that using data to profile students violates multiple state laws, and in some cases also violates federal law.

A service can be designated "Use with Caution" for either a lack of transparency around data use -- which creates the potential for profiling and behavioral targeting -- or for clearly stating that they use data to target advertisements and/or create profiles. As with any application being considered for use within schools, school and/or district staff should review the privacy policies and terms of service to ensure that they meet the legal and practical requirements of their state laws and school policies.

As with the "Not Recommended" criteria, a "Use with Caution" designation is NOT a sign that a vendor is necessarily doing anything unethical or illegal. It is a sign that, based on publicly available policies,  we do not have adequate guarantees that data will not be used by first or third parties to create non-educational profiles or to target behavioral ads.
Use with Caution
Full evaluation
49
Overall Scoreinfo-bubble

This overall score represents how the service addressed all our evaluation questions. A higher score (up to 100) means the service provides more transparent and comprehensive policies.

Overview

NoRedInk is an online writing tool. The terms state interactions within NoRedInk are generally organized by class, and student sign-ups are managed via a class code generated when teachers add students into a course. NoRedInk shares both aggregate and de-identified data with third parties. The terms do not specify any contractual limits or requirements on third parties reusing or protecting the data. In addition, NoRedInk's terms discuss password protection practice, but do not provide details about any additional security measures. The terms specify that users joining the site must be of legal age to enter into a contract. Any user who is under the legal age to create a legally binding contract must have parental consent. Additionally, the terms specify that any teacher creating an account on the site and creating accounts on behalf of students has the authority to create a legally binding contract for their school or district.

NoRedInk can be accessed through its website. NoRedInk offers a free and a premium service. It is unclear from the website whether or not the free and the premium service have the same terms. This evaluation looks at the terms for the free service. Teachers, schools, or districts using the premium service should inquire whether or not the terms for the premium service differ from the terms of the free service.

The Privacy Policy and Terms of Use accessed for this evaluation can be found on NoRedInk’s website. This evaluation only considers policies that have been made publicly available prior to an individual using the application or service.

Read the Common Sense standard privacy report (SPR)arrow
The standard privacy report (SPR) displays the most important privacy practices from a product’s polices in a single easy-to-read outline. The report displays an alert when a particular privacy practice is risky, unclear, or not evaluated. This alert indicates more time should be focused on these particular details prior to use.
SafetyPromoting responsible use
arrow
Evaluating safety takes into consideration best practices that protect a user's physical and emotional health. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to safety.
12

The terms state social interactions within NoRedInk are generally organized by class, and student sign-ups are managed via a class code generated when teachers add students into a course. Class codes need to be handled securely and students can create user profiles containing information that would be readily known to their classmates. In addition, most social interactions in the site are driven by teacher initiated activities.

PrivacyProtecting collected information
arrow
Evaluating privacy takes into consideration best practices that protect the disclosure of a user's personal information. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to privacy.
48

The terms of NoRedInk state they share both aggregate and de-identified data with third parties. The terms do not specify any contractual limits or requirements on third parties reusing or protecting the data. In addition, the terms do not list third parties used to support the service, but state that users can request a list of third parties used by the service by emailing support@noredink.com. In the event NoRedInk goes out of business or is acquired, user data will only be transferred if the acquiring party maintains the business and commits to abiding by the terms of NoRedInk's privacy policy. Lastly, the terms state they provide user-initiated sharing with social media sites like Facebook and Twitter, and federated login with Google and Clever.

SecurityProtecting against unauthorized access
arrow
Evaluating security takes into consideration best practices that protect the integrity and confidentiality of a user's data. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to security.
39

The terms of NoRedInk discuss password protection practices, but do not provide any additional details about security measures. The terms do not provide details about NoRedInk's response in the event of a data breach. While the service may have excellent security practices, the precise practices are not clear based on what is disclosed in the terms.

ComplianceFollowing statutory laws and regulations
arrow
Evaluating compliance takes into consideration best practices of companies that collect personal information from children or students and the legal obligations for the privacy and security of that information. A higher score (up to 100) means the service provides more transparent and comprehensive responses related to compliance.
63

NoRedInk's terms specify that users joining the site must be 18 years of age or older. Any user who is under the legal age to create a legally binding contract must have parental consent. Additionally, the terms specify that any teacher creating an account on the site and creating accounts on behalf of students has the authority to create a legally binding contract for their school or district.

According to the terms, the school or district is responsible for getting parental consent to comply with COPPA. Teachers signing up for accounts should verify that they have the required authority within their district, and the appropriate parental consent to create a legally binding contract that meets the school's or district's FERPA obligations and COPPA guidelines. Lastly, the terms specify that California residents can receive a full breakdown of the categories of personal information NoRedInk shares with third parties for marketing purposes.

About Privacy Evaluations

The privacy evaluations have been designed with the help and support of a consortium of schools and districts across the United States. These evaluations are designed to streamline making an informed decision about the potential privacy implications of educational technology used to support teaching and learning.

Our core evaluation criteria are freely available and will remain freely available. People are encouraged to read the questions we use and the information security primer we released. Vendors are encouraged to use our questions and the information security primer to self-evaluate. You can also learn more about our evaluation process.

Please be in touch with any questions or feedback.