COPPA and FERPA Compliance

Last updated November 26, 2025

INTRODUCTION

At Knowlej, protecting student privacy is central to our mission. Our platform is designed for schools, districts, educators, parents, and students, and we maintain strict adherence to the Children’s Online Privacy Protection Act (COPPA) and the Family Educational Rights and Privacy Act (FERPA). We work closely with districts to ensure all student information is handled in a lawful, transparent, and secure manner.

HOW KNOWLEJ COMPLIES WITH COPPA

COPPA regulates how online services collect personal information from children under 13. Knowlej complies with COPPA through the following practices:

• Verifiable Parental Consent: Knowlej requires verifiable parental or guardian consent before collecting personal information from children under 13.
• Verifiable Parental Consent: Knowlej requires verifiable parental or guardian consent before collecting personal information from children under 13.
• School Consent (Where Permitted): When Knowlej is used in a school context, a school or district administrator may provide consent on behalf of parents strictly for educational use, as allowed under COPPA’s “school official” provision.
• Approved Consent Pathways: Consent may be obtained through one of the following school-approved methods:
• Enrollment-based parent/guardian opt-in checkboxes
• Clickwrap consent during Knowlej onboarding (when implemented by the district)
• Paper or PDF consent forms collected and stored by the school or district
• Dual Confirmation for Direct Consent: When Knowlej collects parental consent directly, the process requires both:
• parent or guardian approval, and
• verification by the school or district administrator.

Knowlej does not knowingly allow children under 13 to create accounts or submit personal information without documented consent.

How Knowlej Complies with FERPA

FERPA protects the privacy of student education records. When Knowlej is used in conjunction with a school or district:

• School Official Role: Knowlej functions as a “school official” or authorized service provider under FERPA.
• District Ownership of Data: All student information and engagement data remain the property of the school or district. Knowlej does not claim ownership or reuse rights over student data.
• Access Based on Legitimate Educational Interest: Knowlej employees only access data necessary to support platform operations, student engagement, and district-approved use cases.der COPPA’s “school official” provision.
• No Data Selling or Monetization: Knowlej does not share, sell, or monetize student data for advertising or commercial purposes.
• Parent & Student Access Rights: Parents or eligible students may request access to, correction of, or deletion of their information through their school or through Knowlej with school authorization.

These practices align with Knowlej’s Terms of Service and Privacy Policy, ensuring consistency across all governance documents.

Data We Collect

Knowlej follows strict data minimization principles. We collect only the information necessary to deliver core platform features such as engagement tracking and reward fulfillment.
‍
Typical data collected includes:

• Student first name
• School-issued email or unique identifier
• Engagement, challenge, and reward metadata
• Program participation timestamps

Knowlej does not collect academic, demographic, or behavioral data unless the district explicitly requests integration through a contract addendum.

Data collection and retention follow the policies defined in Knowlej’s internal Privacy, Security & Risk Management SOPs.

Data Security & Protection

Knowlej protects data using industry-standard safeguards:

• Encryption of data in transit and at rest
• Role-based access controls with mandatory two-factor authentication
• Comprehensive audit logging
• Secure U.S.-based cloud infrastructure
• Monthly server patching and continuous monitoring
• Annual third-party penetration testing
• Incident response protocols with required notification timelines

These safeguards align with Knowlej’s Terms of Service and Privacy Policy and are consistent with FERPA and COPPA expectations.

Parental Rights

In accordance with COPPA and FERPA:

• Parents and guardians may request access to their child’s data
• They may request correction or deletion of information
• They may review the school’s use of Knowlej
• Additional rights may apply depending on district policies

All requests can be made through the student’s school or, with authorization, directly through Knowlej at: hello@knowlej.io.

School & District Responsibilities

When a school or district uses Knowlej, they are responsible for:

• Obtaining required parental consents
• Selecting the appropriate consent pathway
• Verifying student enrollment and eligibility
• Maintaining documentation of consent records (if collected directly)
• Communicating role changes for staff with data access
• Ensuring the platform is used in alignment with their internal policies

Knowlej supports districts with onboarding guidance, documentation templates, and access to policy summaries.

Questions or Requests

If you have questions about our privacy practices or need copies of our policies, contact us anytime at: hello@knowlej.io.

‍We are committed to transparency and to helping schools and families feel confident in how student data is protected.

Legal & Compliance Disclaimer

The information on this page is provided for general transparency regarding Knowlej’s privacy and data-handling practices. It is not intended as legal advice. Knowlej’s Terms of Service and Privacy Policy govern all use of the platform. In the event of any inconsistency between this page and those governing documents, the Terms of Service and Privacy Policy will control. Schools and districts are encouraged to review these materials with their legal counsel as part of their procurement and compliance processes