| Data | User TYPE | HOW IS THE DATA COLLECTED | What is the purpose for the collection? | How will the data be used? | SECURITY MEASURES IS DATA encrypted in transit and storage? IS DATA encrypted in transit and storage? List type of encryption LIST ANY OTHER TYPES OF SECURITY | Where is the data stored (location and vendor)? where is the back-up stored (location and vendor)? | Retention When is the data deleted? *Include automatic deletion (e.g. after 6 months) and upon request | IS DATA SHARED OR ACCESSED BY A SERVICE PROVIDER (OR PROCESSOR)? * These are companies that process the data on behalf of your company (there may be more than one processor) * For example - potential third-party service providers who may provide some back-end service in the operation of the product or application (i.e. caching and abuse service providers, cross-device tracking providers, advertising, etc.) *please fill out the additional SERVICE PROVIDER chart for each vendor | WHAT other THIRD PARTIES (non-service PROVIDER) IS THE DATA SHARED WITH (or GIVEN access to the data)? * For example - press, researchers, etc. | IS THIS DATA SOLD? |
|---|---|---|---|---|---|---|---|---|---|---|
| First and Last Name (include if you capture this from other users (e.g. teacher or parent provides student) | Student, Administrator, Teacher, Parent | On-line registration - data could also come from an intergration with Clever, Google Classroom (although it is not mandatory - if used, these services can pass email, user name and school) | Identify / Authenticate and contact users for app purposes (NOT MARKETING) Teachers also sees this information to identity student's progress and activities completed. | For students to view their profiles. For teachers to view the list of students in class and activitiesx completed. | Encryption in tansit from client to setver with (SSL) DB encryption in transit with TLS, LDAPS, in Google cloud VPC (Virtual Private Cloud) Storage is encrypted at rest with AES-256 DB encrypted at rest with WiredTiger MultiVersion Concurrency Control (MVCC) | Mongo Atlas Google Cloud in the U.S. REGION GCP / Iowa (us-central1) | After user requests to be deleted or one year of inactive session | First name and last name are not accessed by service third party or processors | None | No |
| Individual’s Phone number/mobile number | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | No |
| Individual’s Email address | Student, Administrator, Teacher, Parent | On-line registration - data could also come from an intergration with Clever, Google Classroom (although it is not mandatory - if used, these services can pass email, user name and school) | Identify / Authenticate and contact users for app purposes (NOT MARKETING) | Login and send account notifications | Encryption in tansit from client to setver with (SSL) DB encrypted in transit with TLS, LDAPS, in Google cloud VPC (Virtual Private Cloud) Storage is encrypted at rest with AES-256 DB encrypted at rest with WiredTiger MultiVersion Concurrency Control (MVCC) | Mongo Atlas Google Cloud in the U.S. REGION GCP / Iowa (us-central1) | After user requests to be deleted or one year of inactive session | Sendgrid is used to send email notifications to users. Notifications are app related messages and no marketing messages are included | None | No |
| Business name | Administrator, Teacher | On-line registration for teachers or school admins | Identify teacher's school and state location | Teachers follow up and support | Encryption in tansit from client to setver with (SSL) DB encrypted in transit with TLS, LDAPS, in Google cloud VPC (Virtual Private Cloud) Storage is encrypted at rest with AES-256 DB encrypted at rest with WiredTiger MultiVersion Concurrency Control (MVCC) | Mongo Atlas Google Cloud in the U.S. REGION GCP / Iowa (us-central1) | After user requests to be deleted or one year of inactive session | No | None | No |
| Password | Student, Administrator, Teacher, Parent | On-line registration (if not using an intergration service (such as Clever, Google Classroom, etc,) | Security for user account | Login | Encryption in tansit from client to setver with (SSL) DB encrypted in transit with TLS, LDAPS, in Google cloud VPC (Virtual Private Cloud) Storage is encrypted at rest with AES-256 DB encrypted at rest with WiredTiger MultiVersion Concurrency Control (MVCC) | Mongo Atlas Google Cloud in the U.S. REGION GCP / Iowa (us-central1) | After user requests to be deleted or one year of inactive session | No | None | No |
| Age/DOB | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | No |
| Language information (native, preferred or primary language spoken by a student) | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | No |
| Any other demographic information | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | No |
| School name | Administrator and Teacher | On-line registration for teachers or school admins | Identify teacher's school and state location | Separate users per school | Encryption in tansit from client to setver with (SSL) DB encrypted in transit with TLS, LDAPS, in Google cloud VPC (Virtual Private Cloud) Storage is encrypted at rest with AES-256 DB encrypted at rest with WiredTiger MultiVersion Concurrency Control (MVCC) | Mongo Atlas Google Cloud in the U.S. REGION GCP / Iowa (us-central1) | After user requests to be deleted or one year of inactive session | School name is not accessed by service third party or processors | None | No |
| School Address | Administrator and Teacher | On-line registration for teachers or school admins | Identify teacher's school and state location | Separate users per school | Encryption in tansit from client to setver with (SSL) DB encrypted in transit with TLS, LDAPS, in Google cloud VPC (Virtual Private Cloud) Storage is encrypted at rest with AES-256 DB encrypted at rest with WiredTiger MultiVersion Concurrency Control (MVCC) | Mongo Atlas Google Cloud in the U.S. REGION GCP / Iowa (us-central1) | After user requests to be deleted or one year of inactive session | School name is not accessed by service third party or processors | None | No |
| Geolocation data (non-precise) | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | No |
| Photographs, videos or audio files | Students | When uploaded by student to their journal question answers | Allow teachers to request deep answers to students by using different ways to answer than text | For teachers to review students answers | Encryption in tansit from client to setver with (SSL) DB encrypted in transit with TLS, LDAPS, in Google cloud VPC (Virtual Private Cloud) Storage is encrypted at rest with AES-256 DB encrypted at rest with WiredTiger MultiVersion Concurrency Control (MVCC) | Mongo Atlas Google Cloud in the U.S. REGION GCP / Iowa (us-central1) | After user requests to be deleted or one year of inactive session | files are not accessed by service third party or processors | None | No |
| Device specific information (i.e. operating system, hardware version, device settings, etc.). Specify | Administrator, Teacher, Student | When a user logins there is a timestamp of the session | To record when a user entered the site | Login and send account notifications | Encryption in tansit from client to setver with (SSL) DB encrypted in transit with TLS, LDAPS, in Google cloud VPC (Virtual Private Cloud) Storage is encrypted at rest with AES-256 DB encrypted at rest with WiredTiger MultiVersion Concurrency Control (MVCC) | Mongo Atlas Google Cloud in the U.S. REGION GCP / Iowa (us-central1) | After user requests to be deleted or one year of inactive session | This data that we collect on sessions is not used by any third party. | None | No |
| IP Address (specify if logged in user or website visitor or otherwise obtained) | Administrator, Teacher, Student | When a user logins there is a timestamp of the session | To record when a user entered the site | Login and send account notifications | Encryption in tansit from client to setver with (SSL) DB encrypted in transit with TLS, LDAPS, in Google cloud VPC (Virtual Private Cloud) Storage is encrypted at rest with AES-256 DB encrypted at rest with WiredTiger MultiVersion Concurrency Control (MVCC) | Mongo Atlas Google Cloud in the U.S. REGION GCP / Iowa (us-central1) | After user requests to be deleted or one year of inactive session | This data that we collect on sessions is not used by any third party. | None | No |
| Browser Type of logged in user or website visitor | Administrator, Teacher, Student | When a user logins there is a timestamp of the session | To record when a user entered the site | Login and send account notifications | Encryption in tansit from client to setver with (SSL) DB encrypted in transit with TLS, LDAPS, in Google cloud VPC (Virtual Private Cloud) Storage is encrypted at rest with AES-256 DB encrypted at rest with WiredTiger MultiVersion Concurrency Control (MVCC) | Mongo Atlas Google Cloud in the U.S. REGION GCP / Iowa (us-central1) | After user requests to be deleted or one year of inactive session | This data that we collect on sessions is not used by any third party. | None | No |
| Access time of logged in user or website visitor | Administrator, Teacher, Student | When a user logins there is a timestamp of the session | To record when a user entered the site | Login and send account notifications | Encryption in tansit from client to setver with (SSL) DB encrypted in transit with TLS, LDAPS, in Google cloud VPC (Virtual Private Cloud) Storage is encrypted at rest with AES-256 DB encrypted at rest with WiredTiger MultiVersion Concurrency Control (MVCC) | Mongo Atlas Google Cloud in the U.S. REGION GCP / Iowa (us-central1) | After user requests to be deleted or one year of inactive session | This data that we collect on sessions is not used by any third party. | None | No |
| Time spent on site of logged in user or website visitor | Administrator, Teacher, Student | When a user logins there is a timestamp of the session | To record when a user entered the site | Login and send account notifications | Encryption in tansit from client to setver with (SSL) DB encrypted in transit with TLS, LDAPS, in Google cloud VPC (Virtual Private Cloud) Storage is encrypted at rest with AES-256 DB encrypted at rest with WiredTiger MultiVersion Concurrency Control (MVCC) | Mongo Atlas Google Cloud in the U.S. REGION GCP / Iowa (us-central1) | After user requests to be deleted or one year of inactive session | This data that we collect on sessions is not used by any third party. | None | No |
| Page Views of logged in user, website visitor or scraped | This data is not collected by Bleuprint although can be collected by Google Analytics on Blueprint's Website (not on the Blueprint Platform) | GA script is loaded with website load | Product research, marketing research | It’s collected by Google Analytics | Encryption in tansit (SSL) and storage | Google Analytics, data location can vary and depends on google analytics terms service | 26 months by google alnalytics policies | N/A | None | No |
| Referring URLs | This data is not collected by Bleuprint although can be collected by Google Analytics on Blueprint's Website (not on the Blueprint Platform) | GA script is loaded with website load | Product research, marketing research | It’s collected by Google Analytics | Encryption in tansit (SSL) and storage | Google Analytics, data location can vary and depends on google analytics terms service | 26 months by google alnalytics policies | N/A | None | No |
| Clicks of logged in user, website visitor or scraped | This data is not collected by Bleuprint although can be collected by Google Analytics on Blueprint's Website (not on the Blueprint Platform) | GA script is loaded with website load | Product research, marketing research | It’s collected by Google Analytics | Encryption in tansit (SSL) and storage | Google Analytics, data location can vary and depends on google analytics terms service | 26 months by google alnalytics policies | N/A | None | No |
| Click paths of logged in user or website visitor | This data is not collected by Bleuprint although can be collected by Google Analytics on Blueprint's Website (not on the Blueprint Platform) | GA script is loaded with website load | Product research, marketing research | It’s collected by Google Analytics | Encryption in tansit (SSL) and storage | Google Analytics, data location can vary and depends on google analytics terms service | 26 months by google alnalytics policies | N/A | None | No |
| Active/engagement time of logged in user, website visitor or scraped | This data is not collected by Bleuprint although can be collected by Google Analytics on Blueprint's Website (not on the Blueprint Platform) | GA script is loaded with website load | Product research, Info for the admin/teacher dashboard | It’s collected by Google Analytics | Encryption in tansit (SSL) and storage | Google Analytics, data location can vary and depends on google analytics terms service | 26 months by google alnalytics policies | N/A | None | No |
| Program or application performance (e.g. typing program – student types 60 WPM, reading program- student reads below grade level) | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | No |
| Any other data on user interaction with the application or site or in app student performance data | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | No |
| Any other application/website technology meta-data | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | No |
| Individual’s Phone number/mobile number | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | No |
| Social network or other login credentials (specify what is collected through which service and what Company collects through Oath, etc. (can Company ask for less permissions?) | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | n/a |
| Online contact information (other than email address) | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | n/a |
| Business address (non-school) | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A |
| Business phone number (non-school) | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A |
| Password hint reminder | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | No |
| App or product username | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | No |
| Social security number | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A |
| Driver’s License Number, passport number or other similar identifiers [CCPA] | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A |
| Place of birth | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A |
| Teacher names | Teacher creates a name displayed to students via chat | At signup eacher inputs their name | To identify the teacher when they chat with students | On the app UI showing to the teacher user or the the students on the chat | Encryption in tansit from client to setver with (SSL) DB encryption in transit with TLS, LDAPS, in Google cloud VPC (Virtual Private Cloud) Storage is encrypted at rest with AES-256 DB encrypted at rest with WiredTiger MultiVersion Concurrency Control (MVCC) | Mongo Atlas Google Cloud in the U.S. REGION GCP / Iowa (us-central1) | After user requests to be deleted or one year of inactive session | First name and last name are not accessed by service third party or processors | None | No |
| Conduct or behavior data | We ask for student's mood at login and class end. | At user login and curriculum end phase | Measure the class mood and how blueprint is able to improve students feelings over the courses | The data will be used in teacher, school and district dashboards. The data is not personalized as it's collected annonymously. | Encryption in tansit from client to setver with (SSL) DB encryption in transit with TLS, in Google cloud DB encrypted at rest with (AES) | Google Clous Platform, Big Query SQL DB REGION GCP / Iowa (us-central1) | Never. Data stored is anonymous and with data analysis purposes for understanding moods in groups of users. The data is not assigned to a specific user and not deleted after user deletion. | No | None | No |
Frequent asked questions