Ziplet only collects the minimum amount of personally identifiable information necessary for use of the product:

• The name a student enters when answering questions
• The name of the class the student belongs to
• IP address

For students using legacy Connect accounts, we also collect:

• Student emails
• Profile images if uploaded by the student

In addition the above personally identifiable student information, Ziplet also collects:

• user name and password
• user category (whether a student user, teacher user or leader user)
• age at time of registration if student user was selected (so that we know if we need to comply with age-related legal requirements)
• images, if provided, or provided from Google or Microsoft if a student's Google or Microsoft account is connected to Ziplet
• name of the institution or school (if any) that has paid for student access to Ziplet and any related class, faculty, department, campus, qualification, workplace, internship, or placement
• depending on the questions asked by users via Ziplet, information about students contained in communications or responses by or from students or other users (whether or not sent to students) via Ziplet (Content), including feedback, comments, scoring scales and multiple choice responses of any kind
• - analytical data about a student's use of Ziplet, which we use solely for the purposes of encouraging use of Ziplet, providing any Client Reports (as described below) and improving Ziplet.

Yes.

Ziplet is compliant with The Children's Online Privacy Protection Act (COPPA) which requires parental consent for all Ziplet users under 13 years of age to use an online service that collects personal information.

Where a child under 13 wishes to become a student user and use Ziplet we require consent to them doing so from a parent (or other person with the relevant legal authority, which may include the child’s teacher if a parent has given them authority) in a form acceptable to us. Please see our Student Privacy Best Practices and Parent Consent Form for guidelines on how parents and teachers can provide consent.

If you are a parent of a child under 13, then you may also withdraw your consent to further collection of your child’s personal information. In the case of a registered student, please advise the Ziplet Privacy Officer and we will cancel your child’s registration and they will cease to be able to use Ziplet. If a student is not a registered user, you may withdraw your consent via your child’s teacher who will not provide a GO pin to your child.

Our parental consent form is available here.

Further guidance on how to use Ziplet with students under 13 can be found in our Help Centre.

Ziplet Privacy Officer

Sarah Connelly

Post: Level 23, 697 Collins Street, Docklands, Victoria, 3008, Australia

Email: privacy@nousdatainsights.com

No.

We will never advertise on Ziplet.

No.

Ziplet will never sell or rent student information.

Yes.

School districts can reach out to help@ziplet.com to begin the process.

All educator and student data is encrypted in transit (TLS) and at rest (AES‑256). Passwords are securely hashed using bcrypt with salt.

We notify affected users of any confirmed data breach involving staff or student records. This notice is provided within 72 hours of confirmation.

We process data under the basis of Legitimate Interests (Art. 6(1)(f)) for institutions gathering student feedback and improving teaching and learning, in a manner proportionate and within user expectations.

Ziplet’s user data is stored in Australia.

We do not disclose or transfer your personal information outside Australia, except:

• where you use Ziplet outside Australia, in which case personal information may be sent to your device as a necessary part of your use of Ziplet;
• in the course of sending emails to you, as the emails may be sent from a server in the United States; or
• in the course of sending push notifications to you, as the notifications are sent from overseas servers as used by the providers of the Apple and Android platforms.  

Yes.

A list of Ziplet's third-party vendors can be found here.

Ziplet automatically deletes or de-identifies personal information 7 years after a user’s last interaction with Ziplet.

Ziplet will destroy personal information within 1 month of receipt of a request.

All privacy and security enquiries about Ziplet can be sent to the Ziplet Privacy Officer:

Sarah Connelly

Post: Level 23, 697 Collins Street, Docklands, Victoria, 3008, Australia

Email: privacy@nousdatainsights.com