Introduction
The iKeepSafe FERPA Program© is available to operators and service providers of websites and
online services, data management systems and other technologies that are, in whole or in part,
intended for use or often used in and by schools, and which may collect, store, process or
otherwise handle student data.
Quizlet targets both individual teachers and students as end users of the Quizlet product. Quizlet
requires individual end users to accept an online Terms of Use and Privacy Policy to create an
account and access the service for the rst time.
This iKeepProle is intended to assist you in determining whether or not Quizlet Inc. can be used
in accordance with your FERPA obligations, as well as with your state laws and district policies. It
indicates that Quizlet Inc. has been assessed for alignment with the iKeepSafe FERPA Program
Guidelines.
The iKeepProle is not legal guidance, nor does it guarantee or otherwise assure compliance
with FERPA. If you have questions on how to use the iKeepProle to support your school’s
compliance eorts, please contact your school attorney.1
Agreement
Quizlet Inc.
Quizlet - https://quizlet.com/
Quizlet is a free website providing learning tools for users to help with memorization. It can be
used by the general public, students, and teachers - anyone with a desire to learn and/or teach.
As such, Quizlet allows users to create "sets" of terms customized for their own needs that can
be studied via several study modes including ash cards, spelling, practices tests, and
competitive learning games. Additionally, teachers can create classes to organize their students
around study sets.
Accounts may be upgraded to bring additional functionality to the learning experience including
adding your own images and voice to study sets as well as the ability to view student activity and
progress.
Quizlet is also available via iPhone, iPad, and Android apps.
1
To help supportschools in meeting their FERPA obligations, Quizlet Inc. agrees:
1. Education records as provided by teachers and students using the Quizlet product continue
to be the property of and under the control of those students and teachers ; and Quizlet is
willing to stipulate as such in their terms of use agreement and/or privacy policy.
2. Students may retain possession and control of their own student generated content .
3. It will only use education records as provided by individual teachers and students for the
purposes authorized by agreement to the Quizlet Terms of Use and Privacy Policy .
4. It will not use personally identiable information in student records to engage in targeted
advertising . Advertising on Quizlet is minimal. Upgraded users, mobile app users, and children
under 13 are never served ads. Users 13 and over are served ads based on basic browsing
activity, which is not linked to individual user accounts. Quizlet does not provide any additional
information to advertisers.
5. It will provide a means by which students or, in the case of students under the age of 13, a
parent or legal guardian, may review personally identiable information in the student’s
records and correct erroneous information.
6. It will take actions to help ensure the security and condentiality of education records as
provided by teachers and students using the Quizlet product .
7. It will conduct annual training related to data privacy and security , including FERPA
requirements, for all employees responsible for any aspect of student data management.
8. It has a data breach procedure in place and will notify the aected end users, including
teachers, students, and parents or legal guardians of those students under 13 years of age, in
the event of an unauthorized disclosure of the educational records.
9. It is willing to include in the terms of use and/or privacy policy details of how end users,
including teachers and students, have direct access to the education records that they provide
to Quizlet.
10. It will not make material changes to its privacy and security policies , including adding
practices around new or additional data collection, or changes that may lessen the previously
noted protections without prior notice to the end user , including teachers, students, and
parents or guardians of those students under the age of 13 separate from any notice in a “click
wrap” agreement.
2
Data Review Process
Quizlet provides users direct access to the personally identiable information that they provide to
Quizlet via product functionality. The following is the process for handling such requests:
Control of Information Provided to Quizlet
All users, including students and teachers, remain in control of the data they provide to Quizlet;
more specically:
Teachers remain in control of the information they provide to Quizlet. They may review, edit or
delete any information submitted to Quizlet at any time by signing into their Quizlet account.
Teachers may also delete their account at any time which will delete all study sets, folders, and
classes that they’ve created.
Users 13 years of age and older remain in control of the information they provide to Quizlet. They
may review, edit or delete any information they submit to Quizlet at any time by signing into their
Quizlet account. They may also delete their account at any time which will delete all study sets,
folders, and classes that they’ve created.
Children under the age of 13: The parent or guardian remains in control of the information the
child provides to Quizlet. P arents or guardians may review, edit or delete the child’s information
at any time by signing into the child’s account via password reset, or by contacting Quizlet at
quizlet.com/feedback . Quizlet will respond to your request within a reasonable timeframe . A
parent or guardian can also delete the child’s account which will delete all study sets, folders,
and classes that the child has created.
Quizlet has posted within their Privacy Policy appropriate contact information for comments and
questions:
Attention Privacy
Quizlet Inc.
501 2nd Street, Suite 500
San Francisco, CA 94107 USA
+1-510-495-6550
3
Security Protocols
The following is a general overview of Quizlet Inc.’s data security protocols:
4
Product Data List
Quizlet gathers potentially personally-identifying and personally-identifying information based on
the nature of the product interaction.
Data Collected for Operation: General Purpose of Data Collection
Required: General Account
1
Self-created User name
Required to create an account
2
Date of Birth
Required to create an account.
3
User Email Address
Required to create an account
4
Parent (s) Email Address
Required if user is identied as under the age of
13
5
IP
Required for internal operations
6
Device Identier (UDID)
Required for internal operations
Optional: Product Upgrade
1
First and/or Last Name
Required for optional use of “Send an invoice”
feature that allows someone else to pay for
your upgrade. Not available to users under 13.
2
Credit Card Number
Required for optional product upgrade
Note: If a user chooses to use a single sign on feature, they collect Facebook login info (photo,
birthday, name, school name(s), email, Facebook identier), Google login (photo, name, email,
Google identier).
Third Parties
Quizlet does not rent or sell potentially personally-identifying and personally-identifying
information to anyone.
Quizlet discloses potentially personally-identifying and personally-identifying information only to
those of its employees, contractors and aliated organizations that (i) need to know that
information in order to process it on Quizlet's behalf or to provide services available on Quizlet's
website and mobile applications, and (ii) that have agreed not to disclose it to others.
Quizlet uses encryption technology for the information they share with third parties, and the list of
third parties they share with is accurately documented in their Privacy Policy as demonstrated
below.
iKeepSafe technical assessment indicated appropriate use of third parties for product
functionality and analytics.
5
Name of Third
Party Partner
What info is shared with or collected by this
partner
Partner's purpose
Link to
Partner's
privacy policy
AWS
Compressed archives of certain database
content
Serving images and
data backup
AWS Privacy
Policy
Cloudare
Trac data
Provider of network
infrastructure for basic
service delivery
Cloudare
Privacy Policy
comScore
(Scorecard
Research)
Anonymous usage data (e.g., what pages
on our site people visit)
Analytics
comScore
Privacy Policy
Desk
Email address and username
Customer service
management
Desk Privacy
Policy
Google Inc.
(Analytics)
Anonymous usage data (e.g., what pages
on our site people visit)
Analytics
Google Analytics
Privacy Policy
Google Inc.
(Cloud
Platform)
Trac data
Provider of servers and
network infrastructure
for basic service
delivery
Google Privacy
Policy
Google Inc.
(DFP)
Anonymous demographic and site-usage
information
Serving ads on Quizlet
Google DFP
Privacy Policy
Looker
Anonymous usage data (e.g., what pages
on our site people visit)
Analytics
Looker Privacy
Policy
Mailgun
Email address and username
Email service for
sending emails to our
users
Mailgun Privacy
Policy
New Relic
Anonymous page-speed metrics (e.g.,
how fast Quizlet loads on a user's screen)
and anonymous usage data (e.g., what
pages on our site people visit)
Help websites load
faster for better use
New Relic
Privacy Policy
Quantcast
Corporation
Anonymous usage data (e.g., what pages
on our site people visit)
Data provider,
aggregator
Quantcast
Privacy Policy
Rollbar
Username and site usage data
Website code error
tracking
Rollbar Privacy
Policy
TRUSTe
IP address
Privacy verication
TRUSTe Privacy
Policy
6
Accuracy Statement
Quizlet Inc. hereby conrms the accuracy and truthfulness of all information contained in the
prole, and has authorized iKeepSafe to make the prole available to any interested schools
Signed and agreed:
_________________________________________
(Signature)
Thompson Paine
VP, Operation and Business Development
Quizlet Inc.
05/10/16
Quizlet Inc. has been reviewed and found in alignment with iKeepSafe's FERPA Evaluation Program
Guidelines as indicated by this product prole. Quizlet Inc. has been awarded the iKeepSafe FERPA
Program badge.
_________________________________________
(Signature)
Marsali Hancock
President & CEO
iKeepSafe
05/10/16
(Date)
7
Copyright
© 2016 Internet Keep Safe Coalition (iKeepSafe). All rights reserved.
iKeepSafe’s FERPA Evaluation Program materials have been developed, copyrighted, and
distributed for incidental, classroom use only. iKeepSafe’s copyright notice and distribution
restrictions must be included on all reproductions whether in electronic or hard copy form. These
materials are intended to convey general information only and not to provide legal advice or any
other type of professional opinion.
Disclaimer
1
FERPA Evaluation Program or accepting any materials related to the FERPA Evaluation
Program, you expressly acknowledge and agree that neither Internet Keep Safe Coalition, their aliates,
subsidiaries, or designees nor each of their respective ocers,
directors, employees or agents (collectively, Associates), can guarantee, certify or ensure that
you are in compliance with the Family Educational Rights and Privacy Act (FERPA). You
understand that the FERPA Evaluation Program does not constitute legal or any other type of
professional advice and the FERPA Seal is not a legal determination.
You further acknowledge that the FERPA Evaluation Program is not ocially recognized by the U.S.
Department of Education or any other legislative or regulatory body, and the program does not provide any
legal safe harbor. You are encouraged to consult with your attorney. Under no circumstances
shall Internet Keep Safe Coalition, or their Associates be liable for any direct,
indirect, incidental, special or consequential damages that result from you not being in
compliance with FERPA or for any claim that you are not in compliance with FERPA. You
acknowledge and represent that it is your sole responsibility to evaluate whether or not you are in
compliance with FERPA.
8
