Bloomsights Privacy Policy
Effective Date: August 1, 2024
Bloomsights Privacy Ethos
At Bloomsights US, LLC, we take privacy very seriously. We know that in order for our platform to provide the greatest degree of benefit to students, there must be transparency in how we utilize student data. It is the goal of this Privacy Policy to inform students, parents, guardians, teachers, and administrators of how we collect, store, share, or otherwise handle the sensitive data within the Bloomsights platform. The following contact information is also provided as a point of contact for any additional privacy questions or to report privacy concerns:
Adam Rockenbach, CEO Bloomsights US, LLC
Email Address: [email protected]
Physical Correspondence Address: 7056 Lightning Court Timnath, CO 80547
Telephone Number: 970.413.4535
Bloomsights Collects Specific User Data
The Bloomsights platform provides insight by analyzing student responses to carefully crafted prompts as well as educator and parent/guardian input about particular students. Additionally, Bloomsights also creates new data related to the collected data.
All data collected directly from students within the Bloomsights platform is authorized through informed, unambiguous, user consent provided by the user students (through their parent(s)/guardian(s)) to each user student’s school district. Additionally, users (through their parent(s)/guardian(s)) may withdraw consent to collect additional data at any time using the contact information listed above or through an authorized contact at the student’s school.
Specifically, Bloomsights collects, analyzes, or creates:
- Survey Responses — Bloomsights uses a broad range of key learning and health-related questions that are used to collect student data on attitudes, behaviors, and experiences related to school and learning. This feedback helps support educators' work to promote student well-being, well-functioning social and academic communities, and positive learning environments in schools.
- Educator and Parent/Guardian Input — At this time, Bloomsights does not receive input from educators or parents. However, it is anticipated that such functionality may be utilized in the future.
- Teacher Reports — Based on student reception data (and, eventually, on educator and parent/guardian input) Bloomsights utilizes evidence-based social and emotional development research to analyze student responses. Educators and school counselors have access to tools designed to inform and guide efforts to identify student needs early, address social and emotional behaviors, and monitor student social, emotional, and academic growth. Bloomsights equips educators and school counselors with expert recommendations and best practices to promote well-being that are tailored to meet the needs of the class and individual students.
- Bloomsights Indicators — Bloomsights provides a calculated real-time status of each student’s and each class’ well-being based on data within the platform.
- Historical Charts — Bloomsights provides teachers and staff with on-going well-being and school climate data over the course of the school year.
- Bloomsights Sociograms — Bloomsights provides teachers and staff with a mapping of student connections at the class and grade levels to aid in detecting signs of social isolation and pinpoint opportunities to improve student social interactions with peers.
In addition to the types of data indicated above, the Bloomsights platform also collects some additional Personally Identifiable Information (PII) as part of an initial account setup. Specifically, when a class joins Bloomsights, a teacher or school administrator generates individual user accounts for each student that includes:
- First and Last name
- Student email
- Grade level
- Birthdate
- Gender
Bloomsights does not collect or generate any personal data that is not required to provide the functions and services of the Bloomsights platform. A description of the data elements of PII that Bloomsights collects, the learning purpose for which the PII is collected, and how Bloomsights uses and shares the student’s PII is described in further detail below.
How Bloomsights Ensures Data Security
Depending on the existing infrastructure capabilities or demands at a particular school, Bloomsights may operate as either a standalone service or in conjunction with an existing Learning Management System (LMS). In either scenario, data needed by the Bloomsights platform to provide services is stored within a Bloomsights specific data repository. In some instances, information needed by the Bloomsights platform may be directly accessed from an existing LMS system.
Regardless of how data enters the Bloomsights platform, all data is encrypted while at rest. Additionally, all data transmissions between any remote Bloomsights data repository and an end user is encrypted during transfer using secured HTTP (HTTPS) through a web-browser or secure application. Bloomsights utilizes standard security measures, such as firewall, limited access, and SSL encryption technology, designed to help protect against misuse and alteration of user information collected by Bloomsights during its transmission.
Bloomsights is committed to reacting quickly on any information or hints regarding unauthorized access to sensitive data and will inform applicable regulatory bodies of any such discovery within 72 hours, and any affected parties of any such discovery without undue delay (in compliance with the EU General Data Protection Regulation EU GDPR.)
Bloomsights Does Not Own Your Data
Bloomsights makes no claim of ownership to any individual collected student data or data generated directly from student data. Bloomsights users can request access to their own data by sending a request to Bloomsights using the contact information included at the beginning of this document. Bloomsights guarantees a response within 60 days from receiving the request.
Users can also request to have their personal data deleted or anonymized at any time (including from live databases and backups.) Bloomsights guarantees to remove requested data within 60 days from receiving the request. Live data and archived data may be removed at different times based on the age of the data within the archives.
Bloomsights guarantees to completely anonymize student data within 60 days following being notified of the student’s exit from the school. This includes a student changing schools or graduating from a school.
Additionally, Bloomsights will store student information and feedback a maximum of 60 days after termination of the school official relationship (e.g., when the contract ends), or when no longer needed for the purpose for which it was disclosed, whichever comes first.
Bloomsights Does Not Track
Some functions within the Bloomsights platform require the use of session identifiers in the form of “cookies” or other browser-based user tracking methods. Because of this, Bloomsights does not currently follow “Do Not Track” flags present in a user’s web browser.
Bloomsights is committed to utilizing browser-based user tracking only where necessary in order to directly provide platform services.
General Data Protection Regulation Compliance
Beginning 25 May 2018, the European Union “General Data Protection Regulation” (GDPR) places limitations and regulations on the collection, processing, and storage of PII. It is the intent of Bloomsights and this Privacy Policy to fully comply with all applicable portions of the GDPR including GDPR policies and guidelines for collecting, storing, sharing, or otherwise handling covered data.
As of the effective date of this Privacy Policy, the GDPR generally requires higher standards of data protection and disclosure than similar requirements within the United States. However, Bloomsights is committed to applying the guidelines of the GDPR within its operations within the United States and other locations not officially covered by the GDPR. If additional state or local regulations are required that supersede the GDPR or require higher standards of data protection and disclosure than the GDPR, Bloomsights is committed to complying with those additional regulations.
FERPA
Pursuant to the federal Family Educational Rights and Privacy Act (FERPA) and some states’ local laws enacted to protect student data, students and other authorized individuals may request access to personal data generated by Bloomsights in accordance with federal or state guidelines. Any such request should be directed to an appropriate individual at the school where the Bloomsights platform is being utilized. Alternatively, users may contact Bloomsights at the contact information listed at the beginning of this Privacy Policy for help in determining how to facilitate such requests.
COPPA
The Children’s Online Protection and Privacy Act (COPPA) and some states’ local laws enacted to protect student data generally regulate collection of personal data about children under the age of 13. COPPA contains an exemption allowing schools or educational service providers to collect the information in the course of providing educational services.
Waiver of Certain Liabilities
The goal of Bloomsights is to use data to provide schools with insights about the students who utilize the Bloomsights platform. However, Bloomsights is in no way liable for the manner in which schools or individuals within a school utilize any provided information. For example, the Bloomsights platform should not be utilized on its own to predict student behavior, diagnose social or psychological conditions, perform interventions, or otherwise affect the manner that a school interacts with a student or the way students interact with other students. Rather, the Bloomsights platform should only be utilized to provide insights that may function to inform decisions or other actions by students, teachers, administrators, or other authorized users.
Changes to This Privacy Policy
This Privacy Policy is effective as of August 1, 2024. Any changes to this privacy policy will be communicated directly to all users through the communications channel designated for each user as stored within the existing infrastructure within which Bloomsights operates.
Additionally, as changes are made to this Privacy Policy, archived links will be included to identify the various versions of the Privacy Policy according to their respective effective dates.
The Educational Purpose for Which Bloomsights Collects and Uses District Data
Bloomsights helps educators and school counselors use data to support students’ social and emotional needs and build positive school communities. Developed by teachers and psychologists, Bloomsights facilitates deeper communication across all key stakeholders to foster stronger, more inclusive, and happier school communities.
Bloomsights monthly student surveys help educators and school counselors gauge student well-being and improve school climate to comprehensively encourage student social and emotional development. Every four to six weeks, students use Bloomsights to share how safe, supported, engaged, and connected they feel at school and reflect on their relationships with peers and teachers. Student responses are automatically analyzed, and educators and school counselors use the results to get clarity around students’ needs and determine what interventions are necessary. Schools use Bloomsights data to implement strategies that support improved student and school outcomes.
The Data Elements of District Data or PII That Bloomsights Collects, Generates, or Uses
What Data is Collected Through the Use of Bloomsights?
- School name — Required to support product functionality
- Student first & last name — Required to support product functionality
- Student email — Required to support product functionality
- Student grade level — Required to support product functionality
- Student Clever id — Required to support product functionality
- Student gender — Required to support product functionality
- Staff first and last name — Required to support product functionality
- Staff email — Required to support product functionality
- Staff Clever id — Required to support product functionality
- Teacher first and last name — Required to support product functionality
- Teacher email — Required to support product functionality
- Teacher Clever id — Required to support product functionality
- Teacher roster data — Required to support product functionality
- Bloomsights survey question response value — Used for teacher data collection
- Student connection responses — Used for teacher data collection
- Student connection timestamp — Used for teacher data collection
- Student survey responses timestamp — Used for teacher data collection
- IP address — Stored for security examination
What Data is Generated by Bloomsights?
- Bloomsights Survey Results — Uses a broad range of key learning and health-related questions to collect data on student attitudes, behaviors, and experiences related to school and learning. This feedback helps support educators’ work to promote student well-being, well-functioning social and academic communities, and positive learning environments in school.
- Teacher Reports — Based on student perception data (and eventually, on educator and parent/guardian input), utilizing evidence-based social and emotional development research to analyze student responses. Tools help identify student needs early, address social and emotional behaviors, and monitor student social, emotional, and academic growth, with recommendations tailored to class and individual students.
- Bloomsights Indicators — Provide a calculated, real-time status of each student’s well-being based on student perception data.
- Historical charts — Provide ongoing well-being and school climate information over the course of the school year.
- Bloomsights Sociograms — Map student connections at class and grade levels to aid in detecting signs of social isolation and pinpoint opportunities to improve student social interactions with peers.
What Third-Parties Does Bloomsights Partner With?
- Google Cloud — https://cloud.google.com — Cloud provider for server & database
- Clever — https://clever.com — Rostering data
- ClassLink — https://www.classlink.com/ — Rostering data
- Sentry — https://sentry.io/welcome/ — Alerts and monitoring