Toddle & CCPA

How does Toddle comply with CCPA

Toddle acts in two roles under the CCPA.

When a school uses Toddle, Toddle is a service provider. It processes student, parent and staff personal information only on the school's documented instructions.

When you interact with Toddle directly, for example by visiting toddleapp.com, requesting a demo, registering for a webinar, subscribing to our newsletter, completing a form or applying for a job, Toddle decides how that information is used, as described in our Privacy Policy.

If your personal information was shared with Toddle by your school, please send any request under the rights below to your school. You can also write to privacy@toddleapp.com and we will pass it on and support your school in responding. For personal information you gave Toddle directly, write to privacy@toddleapp.com. We may need to verify your identity before we respond.

Right to Know

Toddle recognizes your right to know what personal information Toddle collects and how it's used. Toddle's Privacy Policy outlines the categories of personal information collected, the sources, purposes for collection, and the third parties with whom this information may be shared. Individuals can request a copy of the specific personal information held about them by contacting their school or privacy@toddleapp.com.

Right to Delete

If you want your personal information deleted, please write to privacy@toddleapp.com, or contact your school if your school shared your information with Toddle. Your personal information will be deleted from Toddle's records unless Toddle is legally required to keep it.

Right to Opt-Out of Sale or Sharing

Toddle does not sell personal information. Toddle does not sell or share student or school data, and does not use it for cross-context behavioral advertising.

On our marketing website (toddleapp.com), we use the Facebook pixel to understand how visitors use the site, and information collected through it may be shared with Facebook. You can opt out of this sharing using the cookie settings link in our Cookie Policy, by disabling cookies in your browser settings, or by writing to privacy@toddleapp.com.

Right to Non-Discrimination

Toddle will not discriminate against you if you exercise any of your rights under the CCPA. You will continue to have the same access to its services and features regardless of your decision to exercise these rights.

Right to Limit Use of Sensitive Personal Information

Toddle does not collect sensitive personal information such as precise geolocation, biometric identifiers or health data, and does not use personal information to infer characteristics about you.

Right to Correct Information

Toddle respects your right to have accurate and complete information. If you find that any personal data Toddle holds is inaccurate, incomplete, or needs updating, you can request its correction, updation, or completion by contacting privacy@toddleapp.com.

Automated Decision-Making Technology (ADMT)

Toddle does not use automated decision-making technology to make significant decisions about students, families or staff. Toddle's AI features support educators in their work. For example, Grading AI produces grading suggestions for a teacher to review, and decisions about students stay with the school.

The CCPA gives California residents rights where a business uses automated decision-making technology to make a significant decision about them, including a notice before use, the option to opt out, and access to information about how the technology was used. Toddle does not make such decisions, so these rights do not arise from Toddle's own processing. If you have any questions, please write to privacy@toddleapp.com.

Parental Consent

When a school uses Toddle, the school is responsible for complying with applicable laws relating to children’s personal information, including providing required notices and obtaining any parental consents or authorizations required by law before sharing a child’s personal information with Toddle. Toddle acts as a service provider, processes personal information only on the school’s documented instructions, and does not sell or share personal information for cross-context behavioral advertising. A sample parental consent form is available from Toddle for schools that choose to use it.

Authorized Agents

You can designate an authorized agent to make a request on your behalf. Toddle will uphold your designated agent’s authority. Toddle may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with the CCPA.

Data Security

Toddle adheres to the internationally recognized standards of the International Organization for Standardization (ISO) and holds ISO/IEC 27001:2022, ISO/IEC 27017:2015, ISO/IEC 27018:2019, ISO/IEC 27701:2019 and ISO/IEC 42001:2023 certifications.

Toddle is certified by iKeepSafe for data protection laws under COPPA and FERPA and has also successfully completed a SOC 2 Type II audit. All your data is encrypted in transit and at rest, and stored on Amazon Web Services servers in the US, unless the school chooses a different hosting region.