Privacy for Schools and Districts
- Purpose
- Our Role
- Information We Collect
- Purposes of Processing
- Legal Bases for Processing
- Advertising and Cookies
- Sharing and Disclosure of Information
- Data Retention and Deletion
- Data Security
- Access, Correction, and Deletion Requests
- Children’s Privacy
- Applicable Student Privacy Laws
- Updates to This Privacy Policy
- Contact Information
Purpose
This Privacy Policy describes how Taito Learning Oy (“Taito Learning”, “we”, “us”, “our”) collects, uses, processes, and discloses information, including personally identifiable information (“PII”), in connection with the use of our educational services, including Typetastic School Edition and other school- or district-authorized services (“Service”).
This Privacy Policy is intended for schools, school districts, and other educational authorities (“Schools” or “Districts”) that procure and use our Services for educational purposes.
Our Role
The Service is purchased and used by Schools and Districts. The School or District is the sole owner and controller of the student personal data processed through the Service.
Taito Learning acts as a service provider and data processor and processes personal data only on documented instructions from the School or District and solely for authorized educational purposes. We do not use Student Data for any commercial purpose unrelated to the provision and improvement of the Service.
The collection, use, and sharing of Student Data is governed by the applicable agreements between Taito Learning and the School or District, including Data Protection Agreements, and by applicable laws in the United States and the European Union.
Information We Collect
The type of personal information processed may vary depending on user role (e.g., student, teacher, administrator).
School and District information
Authorized educators or administrators may create and manage accounts and communicate with us regarding the Service. In these cases, we may process information such as name, email address, role, username, and information about the School or District.
Student information
Schools or Districts may provide Student Data necessary to deliver the Service. This may include student identifiers (such as name or unique ID), username, grade level, class affiliation, and data generated through use of the Service, such as learning progress or activity results. Student Data remains under the ownership and control of the School or District at all times.
We do not require students to provide personal information beyond what is reasonably necessary for educational use of the Service.
Purposes of Processing
We process personal information only for the following purposes:
- to provide, operate, and maintain the Service
- to support instructional use and reporting as directed by the School or District
- to diagnose, troubleshoot, and improve the functionality and quality of the Service
- to communicate with authorized School or District representatives regarding the Service
- to promote safety, security, and integrity of the Service
- to comply with legal obligations and enforce contractual terms
Where data is used for analytics, research, or service improvement, it is processed in aggregated or de-identified form where appropriate.
Legal Bases for Processing
Where applicable under the GDPR, Taito Learning relies on the following legal bases:
- performance of a contract with the School or District
- compliance with legal obligations
- legitimate interests related to service improvement, security, and operational integrity
- consent, where explicitly obtained for specific purposes
Advertising and Cookies
The Service does not include advertising. Students and other users of the Service are not tracked for advertising purposes, and no targeted or interest-based advertising is directed to students.
The Service uses only cookies and similar technologies that are strictly necessary for functionality and technical operation.
Sharing and Disclosure of Information
We do not sell personal data.
We may disclose information only as necessary to provide the Service, including:
- to authorized personnel within the School or District
- to subcontractors and service providers who support the Service under contractual obligations consistent with this Privacy Policy
- to comply with applicable laws or lawful requests by authorities
- in connection with a merger or acquisition, subject to continued protection of Student Data under equivalent privacy commitments
In the United States, Stepware, Inc. provides localized sales support, onboarding coordination, and professional development services. Stepware does not have access to Student Data.
Data Retention and Deletion
Student and school data is retained only for as long as necessary to provide the contracted services and to meet applicable legal or contractual requirements.
Upon request by the School or District, or upon termination of the service agreement, data is securely deleted in accordance with agreed-upon terms.
Student Data is not retained beyond the agreed retention period unless explicitly instructed by the School or District or required by law.
Data Security
We maintain administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, or destruction.
Details of our security practices are described in the Security section of the Trust Center.
Access, Correction, and Deletion Requests
Requests related to Student Data should be directed to the School or District, which remains the data controller.
Authorized School or District representatives may contact Taito Learning for assistance in fulfilling access, correction, or deletion requests in accordance with applicable agreements and laws.
Children’s Privacy
The Service is designed for educational use under the authorization and supervision of Schools and Districts. We do not knowingly collect personal information from children outside of a school-authorized educational context.
Applicable Student Privacy Laws
Taito Learning complies with applicable student data protection laws, including FERPA, COPPA, SOPIPA, SOPPA, and other relevant federal and state regulations.
We adhere to the Student Privacy Pledge and its principles regarding the responsible use and protection of student information.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements or service practices. Material changes will be communicated to Schools and Districts in accordance with applicable agreements.
Contact Information
If you have questions regarding this Privacy Policy or our data privacy practices, please contact:
Taito Learning Oy
Mannerheiminaukio 1 A
00100 Helsinki
Finland
Email: [email protected]