Educreations is an interactive whiteboard and screencasting tool. The tool is intended for students and teachers, and is used with students under 13 years of age. The terms state that the only users who may view a student's profile are those who belong to that student's Limited-access User Group or class. The terms also specify that aggregate, non-identifiable data may be shared broadly, because the terms state they in no way restrict or limit the collection and use of aggregate information. In addition, the policies do not provide sufficient details on the confidentiality, security, or integrity of a student's personal information. Lastly, Educreations' terms state they require schools, districts, and/or teachers to obtain parental consent from students' parents before collecting any information.

Educreations can be accessed through its website, and is available for download at the iOS App Store. The Privacy Policy and Terms of Use accessed for this evaluation can be found on Educreations' website, and iOS App Store. This evaluation only considers policies that have been made publicly available prior to an individual using the application or service.

Safety

As part of creating an Educreations user profile on the site, students can add their name and photograph. The terms state that the only users who may view a student's profile are those who belong to that student's Limited-access User Group or class. An individual with a teacher's account and a student connected to their classroom via a unique pin number can see that student's first and last name, email, and last time active (e.g. X minutes ago, etc.). In addition, the terms state a student's lessons are stored privately on educreations.com and are only visible to the student and that student's teachers. Any content a student contributes to their Limited-access User Group will only be displayed to other members of that class.

The terms also state that if a User Submission is published using the "public" setting, that the person is "allowing everyone, including people off of Educreations, to access and use that content."

Privacy

Educreations's terms claim broad rights to reuse user data. As defined in the terms, the act of uploading or creating data within the site gives Educreations and its subsidiaries, affiliates, and/or successors a perpetual and transferable license to reuse and access user data. However, the rights claimed by Educreations to use and share data widely with affiliates appear to contradict other parts of their policy, where they state, "Personal Information and Children's Personal Information collected through the Site may be shared with companies and organizations ... that have agreed not to disclose it to others." Possibly, this indicates that PII is treated differently than other submissions uploaded to the site.

The terms also specify that aggregate, non-identifiable data may be shared broadly, because the terms state they in no way restrict or limit the collection and use of aggregate information. Educreations's terms state they may collect personal information from students including name, email address, photo, date of birth, school name, audio recordings, videos, photos, online activity, and persistent identifiers. Lastly, Educreations' terms state they may also collect information the student provides to Facebook, Google, or Dropbox if the student links their Educreations account to those third-party authentication providers.

Security

The policies do not provide details on the confidentiality, security, or integrity of a student's personal information. From a brief examination, SSL encryption is required on the login page. However, schools and districts are encouraged to request a more thorough description of the security practices and protections in place.

Compliance

Educreations' terms state they require schools, districts, and/or teachers to obtain parental consent from students' parents before collecting any information. If a student under 13 years of age attempts to create an account on their own, or enters their birth date, Educreations will not let that student create an account, and will provide notice to the student that they will either have to sign-up with a class code from their teacher or have a parent create an account for them. In addition, it is not clear from the terms if Educreations or third parties can use student data collected from the Service to target advertisements to users on other websites, or on other applications or services.

• Personal information is not sold or rented to third parties.
• Unclear whether personal information are shared for third-party marketing.
• Unclear whether this product displays personalised advertising.
• Unclear whether data are collected by third-parties for their own purposes.
• Unclear whether this product uses a user's information to track and target advertisements on other third-party websites or services.
• Unclear whether this product creates and uses data profiles for personalised advertisements.