Knowt for Schools Privacy Policy

Last Updated: 10/26/2026

Knowt, Inc. (“Knowt,” “we,” “us,” or “our”) provides study tools and classroom features through our websites, browser extensions, mobile apps, and related services (collectively, the “Services”). This Knowt for Schools Privacy Policy explains what personal data we collect, how we collect it, how we use and protect it, when we share it, and the choices and rights available to you if you use our Services through your school as a student. You can read about how we process personal data when you use our Services outside of the school setting here: https://knowt.com/privacy

We ask schools to provide this Privacy Policy to students and/or parents or guardians of students. We rely on consent obtained from the school for our collection and processing of children’s personal data subject to the Children’s Online Privacy Protection Act (COPPA) and this Knowt for Schools Privacy Policy serves as our COPPA notice to schools and parents about how we process data about students who are children under 13. We act as a school official with a legitimate educational interest under FERPA and process data only for educational purposes, at the school’s direction.

Education-first commitment: For students, parents/guardians, and schools/districts (and their personnel) using Knowt for learning, we do not display targeted ads and do not sell or share student personal data for cross-context behavioral advertising where our services are used within a school setting.

Our agreements with schools govern Knowt for Schools services, our standard terms can be found here: https://knowt.com/terms

What Personal Data We Collect & How We Collect It

Knowt for Schools is an educational service created and managed by a school for use by its students. School admins manage how students use core and additional services. The personal data we collect depends on how students interact with us and the Services they use.

Personal Data We Collect Directly from Students:

• Account & Profile Information: When students use our services we may collect their name, username, avatar (if provided), email address, and birthdate.

• Other Profile Information. We may collect information about students’ education level, intended use of our service, and their classes or course roster.

• Content, Files, and AI interactions. Depending on school settings, we may collect content and files that students input or upload, such as their classroom assignments, notes, lecture recordings, ratings and reviews of content, profile picture, interactions with AI features (including chat history), and other content and messaging. If a student emails us or otherwise communicates with us (for example, to ask for technical or customer support), we collect and retain those communications.

• Account Access Information. We may collect information such as a username in combination with a password or access code or other credential to allow access to a student’s Knowt account.

Personal Data We Collect Automatically from Students:

• Device Information and Identifiers. When students visit our websites or use our Services, we collect their IP address and information about their device, including device identifiers and mobile IDs, device type, and their device’s operating system, browser, and software including type, version, language, settings, and configuration. As further described in the “Cookies and Local Storage” section below, our Services store and retrieve cookie identifiers and other data.

• Usage Information. We collect students’ activity on our websites, apps, and Services, including the URL of the website from which they came to our sites, pages visited, length of time spent on a page, access times and days, and other actions taken on our sites and services.

• Geolocation Data. Depending on a student’s device and application settings, we collect geolocation data (city, state, and country) when they use our apps or online Services.

Personal Data We Collect from Others about Students:

• Classroom/Student Records: Schools may disclose information about a student’s academic performance and activities to us as part of their use of our websites, apps, and Services.

• Name and Contact Information, Profile Information, Content and Files: Schools may also provide us with any of the information we would otherwise collect from students. In addition, where a student connects to our services using other school-managed accounts, such as Google, or a school enables an integration with other school-managed services (such as Canvas) we may receive any personal data that these organizations are permitted to share with Knowt.

We use some of the information we collect from students to generate information about their likely preferences or other characteristics (“inferences”). For example, we infer students’ general location (city, state, country) from their IP address.

When students are asked to provide personal data, they may decline. And they may use web browser or operating system controls to prevent certain types of automatic data collection. But if they or you choose not to provide or allow information that is necessary for certain services or features, those services or features may not be available or fully functional.

Who Controls the Data

Students and schools retain control of notes, flashcards, study sets, submissions, and other user-generated content.

Schools control Student Education Records in accordance with FERPA or applicable law. See the Knowt Student Data Processing Addendum for information about ownership and licensing of content.

Deletion and Retention of Personal Data

We retain personal data for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, enforce our agreements, and for other legitimate and lawful business purposes (e.g., for tax and security purposes). For example,

• System & security logs: Retained ≤ 60 days unless required longer for security, fraud prevention, or legal holds.

• Payment records: Transaction records retained as required by financial laws (typically 7 years), separated from profile data.

Subject to an applicable exception, we delete data when a school, parent, or student requests within the timeframes required under applicable law. If a student account is inactive for 36 months, we notify the user and the school; and unless to the extent that the school instructs us to retain student personal information for their purposes, we will delete the students’ personal information and account within 30 days of notification. This inactivity period is decreased to 12 months for users under 13.

Cookies and Local Storage

We use essential, functional and analytics cookies/local storage items to provide, support, and improve the Service (e.g., authentication and security). No advertising, retargeting, or cross-site tracking cookies are used in the school experience.

If you block these, the Service may not function as intended.

How We Use Personal Data

We use the personal data we collect only for educational purposes at the school’s direction, including for example to:

• Provide and deliver the Services. To provide and deliver our Services, including troubleshooting and improving the Services.

• Business operations. To operate our business, such as billing, accounting, improving our internal operations, securing our systems, detecting fraudulent or illegal activity, and meeting our legal obligations.

• Product improvement, development, and research. To improve our Services or features and conduct research.

• Customer support. To provide customer support and respond to questions.

• Communications. To send students information, including support and administrative messages.

We do not use student personal data to display targeted ads or otherwise sell or share student personal data for cross-context behavioral advertising where our services are used within a school setting. We do not train generalized AI models on Student Education Records or on data from Google Workspace APIs.

Security

We maintain administrative, technical, and physical safeguards appropriate to the risk. Such measures include:

• Encryption at rest and in transit

• Key management

• Network security, including firewalls.

• Monitoring

• Backups & disaster recovery

• Access controls, including role-based access and strong password enforcement.

• Vendor risk management

• Secure software development

• Incident response, including breach notification procedures consistent with applicable law

A full list of safeguards is available on request.

Our Disclosure of Personal Data

We share information as directed by students within the school environment (e.g., to post comments to fellow students or educators), as needed to provide the Services. In addition, we disclose each of the categories of personal data described above, to the types of third parties described below, for the following business purposes. We do not sell student personal data and do not share student personal data for targeted advertising.

Service providers. We provide personal data to service providers working on our behalf to help us provide and secure the Services. We have written contracts in place with each Service Provider with privacy and security obligations at least as protective as this Policy and applicable law. Service Providers may not use personal data for their own purposes and must delete or return data upon termination. We will provide school administrators prior notice (as required by applicable law or our contract with the school) before adding or replacing a Service Provider that processes Student Education Records. Examples of our service providers include:

Non-essential integration. Our services allow non-essential integrations such as school-selected third party apps or single-sign-on services (SSOs). Your school may opt out by disabling that integration in settings or via written request to team@knowt.com.

Corporate transactions. We may disclose personal data as part of a corporate transaction or proceeding such as a merger, financing, acquisition, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our business or assets.

Legal and law enforcement. We will access, disclose, and preserve personal data when we believe doing so is necessary to comply with applicable law or respond to valid legal process, including from law enforcement, national security, or other government agencies.

Security, safety, and protecting rights. We will disclose personal data if we believe it is necessary to:

• protect our customers and others, for example to prevent spam or attempts to commit fraud, or to help prevent the loss of life or serious injury of anyone;

  • operate and maintain the security of our services, including to prevent or stop an attack on our computer systems or networks; or

  • protect the rights or property of ourselves or others, including enforcing our agreements, terms, and policies.

Location of Personal Data

The personal data we collect may be stored and processed in your country or region, or in any other country where we or our affiliates, subsidiaries, or service providers process data, some of which may have laws that offer different levels of data protection than the country in which you reside. Currently, we primarily use data centers in the United States. The storage location(s) are chosen to operate efficiently and improve performance. We take steps to process and protect personal data as described in this statement wherever the data is located.

Location of Processing European Personal Data. We transfer personal data from the European Economic Area (EEA), United Kingdom (UK), and Switzerland to other countries, some of which have not been determined by the European Commission to have an adequate level of data protection. When we do so, we use legal mechanisms, including contracts, to help ensure your rights and protections. To learn more about the European Commission’s decisions on the adequacy of personal data protections, please visit: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en.

Privacy Choices and Controls

We provide a variety of controls that enable students, school administrators, and parents to make meaningful choices about how information is used by Knowt for Schools.

• Depending on the settings enabled by a school’s administrator, a student can use controls available on their account profile to manage certain privacy and information settings. Students can also delete certain content (e.g., notes, flashcards, files) and may request account deletion in Settings → Privacy → Delete Account A student, their parent, and/or their guardian may request to review, correct, or delete the student’s personal data by contacting the school or team@knowt.com (“COPPA QUESTION” or “STUDENT REQUEST” in the subject line of your email).

European Data Protection Rights

If the processing of personal data about you is subject to European Union data protection law, you have certain rights with respect to that data:

• You can request access to, and rectification or erasure of, personal data;

  • If any automated processing of personal data is based on your consent or a contract with you, you have a right to transfer or receive a copy of the personal data in a usable and portable format;

    • If the processing of personal data is based on your consent, you can withdraw consent for future processing at any time;

      • You can object to, or obtain a restriction of, the processing of personal data under certain circumstances; and

      • For residents of France, you can send us specific instructions regarding the use of your data after your death.

To make such requests, please use the contact information at the bottom of this statement. You also have the right to lodge a complaint with a supervisory authority, but we encourage you to first contact us with any questions or concerns. To contact our Data Protection Officer, please see the contact information below.

We rely on different lawful bases for collecting and processing personal data about you, for example, as necessary to provide the services you use, operate our business, meet our contractual and legal obligations, protect the security of our systems and our customers, or fulfil other legitimate interests.

Changes to This Policy

We will post updates here and revise the “Last Updated” date. For material changes impacting education customers or Student Education Records, we will provide advance notice to schools (or as required by law or our contract with the school) and obtain additional consent where required.

Contact Us

Knowt, Inc.
16192 Coastal Hwy, Lewes, DE 19958
Email: team@knowt.com
Phone: 848-391-0575

Data Protection Officer (EU/UK):
Submit a request via our DPO portals or write to the addresses listed on our website.