Compliance with government laws and industry privacy standards
SPLAT is fully compliant with the following Acts in both the USA and Philippines (without consideration of the country of use):
We commit to:
We receive foundational data from your school system about learners, teachers, school system personnel and parents/guardians. This is enriched by teachers and personnel who add information about learners’ progress and performance. Depending on your school’s use of SPLAT, this may include attendance, participation in classroom activities, grades, positive and unexpected behaviors, communications with families and limited health data.
Family members, including learners, can view most of this information. Families can communicate with the school system using SPLAT and learners can receive education materials and submit class requirements including graded activities. All of this data is linked to the learner, relevant school system personnel and family members.
SPLAT tracks and records usage of the systems which is linked to the user. Usage tracking may include course location data in the future to combat cheating, but this is not tracked as of the publish date of this policy.
For all learners, we receive roster data which may include Personally Identifiable Information (PII). This typically includes learner name, ID number, grade level, class schedule. For Philippine learners, we receive additional data, some of which may be Sensitive Personal Information (SPI). This includes information about date-of-birth, ethnicity, spoken language and contact information for parents and guardians. Depending on the school’s use of SPLAT, we may collect and store additional information such as attendance, classroom participation, grades, behavior data as well as height and weight health data.
School personnel may use SPLAT Teacher or SPLAT Administrator depending on their roles. For teachers and personnel, your school system usually provides name, ID number and email address. Depending on features selected, the school may also provide or we may collect information such as occupation, title, academic history, employment history, date-of-birth, gender / gender identity and contact information including phone numbers. Usage data, including time and date stamps for actions such as attendance entry, are tagged to the user. SPLAT may be used to route personnel’s personal information through approval cycles, such as Professional Development training requests. In these cases, additional PII and SPI may be collected and stored.
SPLAT Family collects and stores different data depending on its use:
We are committed to protecting the personal information used and stored by SPLAT. All information is encrypted, in transit and at rest, using current best-practices for data security. Data is restricted to only those with a “need to know” on a tiered basis. PII is encrypted in all data stores: cloud, school servers and gadgets. All data “in motion” is encrypted. Secondary personnel see limited Learner data and only when explicitly allowed by school management. Gadgets require a Personal Identification Number (PIN) in addition to log-in. Only full-time, regularized employees of RightSize will have access to Learner or Employee data and these employees have signed a confidentiality agreement, which includes this data access. RightSize has documented processes for maintaining the confidentiality of data, which are incorporated into our Human Resources Policy.
SPLAT is designed with situational security. This security model restricts faculty and staff to only access the data they have justification to see. For example, a teacher can only see the learners in the classes they teach, and then only the data generated in those classes. Certain school personnel, for example a lunch-room monitor, can use SPLAT to reward a learner, but they cannot see any other information about the learner’s classes, schedule, etc.
We may use anonymized data for analytical purposes. We will assist your school to use the data we collect as they deem appropriate.
While we strive to protect user information, no server, computer, communications network or system, or data transmission over the Internet can be guaranteed to be 100% secure. We also do not have control over the security of computers, mobile devices, or electronic communication and transmission methods that you may use. By using our products or services on your own equipment, you agree that you are solely responsible for any information that you provide and transmit to us. You can help us maintain a secured community and protect your account against unauthorized access by keeping your password confidential at all times.
Information Collected Automatically
We use Google Analytics and Google Tag Manager for web, Android and iOS to learn about how people use SPLAT. This usage data is not tagged to the individual. We may use geo-location in the future to analyze usage patterns and to combat cheating, but these features have not been implemented as of the date of this document.
How We Communicate With You
We may contact you regarding your account, software updates and new features, security and privacy notices, customer service purposes, and other information regarding our products and services. We may communicate with you through email, SMS messages, social media updates and push notifications. You may opt-out of marketing messages in your SPLAT profile or by sending an email to Splat.firstname.lastname@example.org.
Your school maintains their data stored in SPLAT and determines which features of the software to enable. If you wish to know what is stored, or to correct or delete any information, you may contact the school directly. For data privacy reasons, we are unable to release any information directly. Your After School program may store data in SPLAT. Contact the after school program regarding this data.
If you subscribe to SPLAT Home or SPLAT Custody, your application data will be removed or anonymized upon termination of use. If you wish to remove your information from our marketing database, contact us by sending an email to Splat.email@example.com.
Compliance with Laws
RightSize stores school and learner data exclusively on servers located physically in the same country as the school. We will work with any school system who wishes to audit or inspect our compliance with applicable laws, security protocols or physical locations.
Notification of Changes
SPLAT is a registered trademark of RightSize Business Systems