PUBLIC - Learning League Schedule of Data & Register of Processing Data


1	Data Element	User Type (e.g. parent, student, teacher)	How is the Data Collected and who is the source?	What is the purpose for the collection?	How will the data be used?	Security Measures	Where is the data stored?	1st Party (LL) Collecting from School	1st Party (LL) Collecting from Parents	1st Party (LL) Collecting from Student	Zearn (access to data from school rostering tutors as authorized users, not passed directly to LL)	Amplify (access to data from school rostering tutors as authorized users, not passed directly to LL)	Included in LL Passport Platform (collected directly, passed to or uploaded from access by authorized users) )	Incuded in LL Tutoring Database (collected directly, passed to or uploaded from access by authorized users)	Accessed or Passed to Researchers under FERPA Studies Exemption	Remind (access to data from parents and teachers who sign up for accounts)

2	First and Last Name	parent, student, teacher	tutoring on-line registration Passport on-line registration shared by school	communication	Used for email and SMS communication between Learning League and families about the program and how they can supplement tutoring and in-school learning at home.	Registration data is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm. Data provided by schools to Learning League will be encrypted in-transit via SFTP and imported over SSL to a database encrypted at rest using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region Google Workspace	yes	yes	no	no	no	yes	yes	No	yes
3	Individual's Postal Code	student	tutoring on-line registration Passport on-line registration shared by school	evaluation	Used to report in aggregate on the number of students being served in geographic regions of Colorado.	Registration data is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm. Data provided by schools to Learning League will be encrypted in-transit via SFTP and imported over SSL to a database encrypted at rest using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region	yes	yes	no	no	no	yes	yes	No	no
4	Individual’s Phone number/mobile number	parent, teacher	tutoring on-line registration Passport on-line registration shared by school	communication	Used for phone and SMS communication between and families regarding tutoring and program services; Used for emergency contact.	Registration data is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm. Data provided by schools to Learning League will be encrypted in-transit via SFTP and imported over SSL to a database encrypted at rest using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region Google Workspace	yes	yes	no	no	no	yes	yes	No	yes
5	Individual’s Email address	parent, teacher, student	tutoring on-line registration Passport on-line registration shared by school	communication	Used for email communication between Learning League and families regarding tutoring and program services. Used for email communication between Learning League and teachers regarding tutoring and student progress.	Registration data is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm. Data provided by schools to Learning League will be encrypted in-transit via SFTP and imported over SSL to a database encrypted at rest using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region Google Workspace	yes	yes	no	no	no	yes	yes	No	yes
6	Social network or other login credentials	parent, student, teacher	Google OAUTH account registration Clever account registration	account management	Alternate to specifying an email address and password for login for 3rd party and 1st party services	tokens have expirations	Encrypted Amazon Relational Database, United States Region	no	yes	no	no	no	yes	no	No	no
7	Password	parent, student, teacher	Passport on-line registration	account management	Used for secure login to 1st and 3rd party digital platforms	passwords are stored salted and encrypted	Encrypted Amazon Relational Database, United States Region	no	yes	no	no	no	yes	no	No	no
8	Teacher names	student	shared by school shared by parent through Passport account	service delivery	Learning League Navigators may reach out to students teachers to align in-school and tutoring efforts. Parents may prompt teachers through Academic Passport to provide recommendations for ways parents or out-of-school providers can supplement in-school learning.	Data provided in Passport is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm Data provided by schools and third party platforms to Learning League will be encrypted in-transit via SFTP and imported over SSL to a database encrypted at rest using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region	yes	yes	no	no	no	yes	yes	No	yes
9	Communications (online communications that are captured (emails, SMS)	parent, teacher	Tutors and Learning League staff will be communicating with teachers and parents using Google hosted Learning League accounts and SMS.	service delivery	Email and SMS communications are used by Learning League to communicate with teachers and families in order to better align in school, after school and at home learning	Google hosted email is encrypted using TLS. The Remind platform is compliant with FERPA, COPPA, TCPA and GDPR.	Google, https://www.google.com/about/datacenters/locations/	yes	yes	no	no	no	yes	no	No	yes
10	Demographic and Special Indicator Data – specify what fields are collected	See data elements below
11	Age/DOB	student	tutoring on-line registration Passport on-line registration shared by school tutor onboarding	evaluation service delivery	Used to report in aggregate on the number of students being served by age. Used to recommend parents age appropriate out-of-school opportunities and online services.	Registration data is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm. Data provided by schools to Learning League will be encrypted in-transit via SFTP and imported over SSL to a database encrypted at rest using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region	yes	yes	no	no	no	yes	yes	No	no
12	Ethnicity/Race	student	tutoring on-line registration shared by school	evaluation service delivery	Used to ensure our program serves the needs of all groups equitably. Used to report in aggregate on the number of students being served by gender.	Registration data is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm. Data provided by schools to Learning League will be encrypted in-transit via SFTP and imported over SSL to a database encrypted at rest using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region	yes	yes	no	no	no	no	yes	Yes	no
13	Gender	student	tutoring on-line registration shared by school	evaluation service delivery	Used to ensure our program serves the needs of all groups equitably. Used to report in aggregate on the number of students being served.	Registration data is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm. Data provided by schools to Learning League will be encrypted in-transit via SFTP and imported over SSL to a database encrypted at rest using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region	yes	yes	no	no	no	no	yes	Yes	no
14	Grade	student	tutoring on-line registration Passport on-line registration shared by school	evaluation service delivery	Used to report in aggregate on the number of students being served by age. Used to assign students to grade relevant tutoring groups. Used to recommend parents age appropriate out-of-school opportunities and online services.	Registration data is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm. Data provided by schools to Learning League will be encrypted in-transit via SFTP and imported over SSL to a database encrypted at rest using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region	yes	yes	no	no	no	yes	yes	Yes	no
15	Special education status	student	shared by school tutoring on-line registration	evaluation service delivery	Used to ensure our program serves the needs of all groups equitably. Used to report in aggregate on the number of students being served.	Registration data is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm. Data provided by schools to Learning League will be encrypted in-transit via SFTP and imported over SSL to a database encrypted at rest using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region	yes	no	no	no	no	no	yes	Yes	no
16	Language information (native, preferred or primary language spoken by a student)	parent	tutoring on-line registration	service delivery	Used to communicate with parents in their primary language.	Registration data is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm. Data provided by schools to Learning League will be encrypted in-transit via SFTP and imported over SSL to a database encrypted at rest using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region	yes	yes	no	no	no	yes	yes	Yes	no
17	English language learner status	student	shared by school tutoring on-line registration	evaluation service delivery	Used to ensure our program serves the needs of all groups equitably. Used to report in aggregate on the number of students being served.	Registration data is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm. Data provided by schools to Learning League will be encrypted in-transit via SFTP and imported over SSL to a database encrypted at rest using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region	yes	yes	no	no	no	no	yes	Yes	no
18	Low income status (Economically disadvantaged status)	student	shared by school tutoring on-line registration	evaluation service delivery	Used to ensure our program serves the needs of all groups equitably. Used to report in aggregate on the number of students being served.	Registration data is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm. Data provided by schools to Learning League will be encrypted in-transit via SFTP and imported over SSL to a database encrypted at rest using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region	yes	no	no	no	no	no	yes	Yes	no
19	Academic Data and Academic Assessment Data – specify what fields are collected	See data elements below
20	Student ever retained status	student	shared by school tutoring on-line registration	evaluation service delivery	Used to ensure our program serves the needs of all groups equitably. Used to report in aggregate on the number of students being served.	Registration data is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm. Data provided by schools to Learning League will be encrypted in-transit via SFTP and imported over SSL to a database encrypted at rest using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region	yes	no	no	no	no	no	yes	Yes	no
21	Academic achievement status	student	shared by school tutoring on-line registration	evaluation service delivery	Used to ensure our program serves the needs of all groups equitably. Used to report in aggregate on the number of students being served.	Registration data is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm. Data provided by schools to Learning League will be encrypted in-transit via SFTP and imported over SSL to a database encrypted at rest using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region	yes	no	no	no	no	no	yes	Yes	no
22	Tutoring subject area (Math or Literacy)	student	shared by school tutoring on-line registration	evaluation service delivery	Used to ensure our program serves the needs of all groups equitably. Used to report in aggregate on the number of students being served.	Registration data is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm. Data provided by schools to Learning League will be encrypted in-transit via SFTP and imported over SSL to a database encrypted at rest using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region	yes	yes	no	no	no	yes	yes	Yes	yes
23	School name	student	tutoring on-line registration Passport on-line registration shared by school	evaluation service delivery	Used to report in aggregate on the number of students being served at specific school sites. Used to coordinate delivery of tutoring at multiple physical school site locations.	Registration data is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm. Data provided by schools to Learning League will be encrypted in-transit via SFTP and imported over SSL to a database encrypted at rest using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region Google Workspace	yes	yes	no	no	no	yes	yes	Yes	yes
24	Local (school district) ID number	student	shared by school tutoring on-line registration	service delivery	School and district ids will be used to lookup and store curriculum and assessment standards. These will be used to inform academic supplements recommended by Passport and when possible align them to what is happening in a students school Used to report in aggregate the number of participating students by school or district.	Registration data is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm. Data provided by schools to Learning League will be encrypted in-transit via SFTP and imported over SSL to a database encrypted at rest using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region	yes	no	no	no	no	yes	yes	No	no
25	Vendor/App assigned student ID number	student	shared by school automatically generated by platforms during registration	account management	Used to maintain data relationships (foreign keys) between data tables and external systems. Used to add an additional layer of anonymity to customer interactions.	account data is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region	yes	no	no	no	no	yes	yes	No	no
26	Grades	student	shared by school shared by parent through Passport account	service delivery evaluation	Used to provide simplified assessment guidance to parents and providers they choose to share with in Passport. Used to inform individualized academic supplement recommendations to parents and providers they choose to share with in Passport. Used to inform individualized academic out-of-school provider recommendations to parents in Passport.	Data provided in Passport is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm Data provided by schools and third party platforms to Learning League will be encrypted in-transit via SFTP and imported over SSL to a database encrypted at rest using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region	yes	yes	no	no	no	yes	yes	Yes	no
27	Academic profile (combined data elements provided to create Academic profile)	student	shared by school shared by parent through Passport account Combination of data elements including: Standardized test scores, Platform student academic assessments, Platform student progress data, Age/DOB, Grade, Language information	service delivery	Used to provide simplified assessment guidance to parents and providers they choose to share with in Passport. Used to inform individualized academic supplement recommendations to parents and providers they choose to share with in Passport. Used to inform individualized academic out-of-school provider recommendations to parents in Passport.	Data provided in Passport is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm Data provided by schools and third party platforms to Learning League will be encrypted in-transit via SFTP and imported over SSL to a database encrypted at rest using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region	yes	yes	no	no	no	yes	yes	No	no
28	Standardized test scores	student	shared by school shared by parent through Passport account	service delivery evaluation	Used to provide simplified assessment guidance to parents and providers they choose to share with in Passport. Used to inform individualized academic supplement recommendations to parents and providers they choose to share with in Passport. Used to inform individualized academic out-of-school provider recommendations to parents in Passport. Used to report in aggregate student proficiency and tutoring impact.	Data provided in Passport is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm Data provided by schools and third party platforms to Learning League will be encrypted in-transit via SFTP and imported over SSL to a database encrypted at rest using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region	yes	yes	no	no	no	yes	yes	Yes	no
29	Platform student academic assessments	student	Amplify literacy assessment platform MAP Growth assessments Other assessment data shared by schools	service delivery evaluation	Used to provide simplified assessment guidance to parents and providers they choose to share with in Passport. Used to inform individualized academic supplement recommendations to parents and providers they choose to share with in Passport. Used to inform individualized academic out-of-school provider recommendations to parents in Passport. Used to report in aggregate student proficiency and tutoring impact.	Data provided in Passport is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm Data provided by schools and third party platforms to Learning League will be encrypted in-transit via SFTP and imported over SSL to a database encrypted at rest using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region	yes	yes	no	yes	yes	yes	yes	Yes	no
30	Student tutoring session attendance data	student	recorded by tutor at beginning of sessions	service delivery evaluation	Used to report in aggregate student tutoring attendance. Used to flag and communicate with families to encourage consistent attendance in tutoring.	data will be collected via a secure form into the AES-256 encrypted database	Encrypted Amazon Relational Database, United States Region	no	no	no	no	no	no	yes	Yes	no
31	Platform student progress data	student	Amplify Reading platform Zearn Math platform	service delivery evaluation	Used to provide simplified assessment guidance to parents and providers they choose to share with in Passport. Used to inform individualized academic supplement recommendations to parents and providers they choose to share with in Passport. Used to inform individualized academic out-of-school provider recommendations to parents in Passport. Used to report in aggregate student proficiency and tutoring impact.	Data provided in Passport is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm Data provided by schools and third party platforms to Learning League will be encrypted in-transit via SFTP and imported over SSL to a database encrypted at rest using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region Google Workspace	yes	yes	no	yes	yes	yes	yes	Yes	no
32	Student Work (student generated content; writing, etc.)	student	Amplify Reading platform Zearn Math platform	service delivery	Tutors will review student work and provide feedback in sessions		Data is not stored by Learning League	no	no	no	yes	yes	no	no	No	no
33	Student wellbeing response data	student	recorded by tutor at beginning of sessions	service delivery	Shared with parents in situations where wellness is a consistent barrier to tutoring.	data will be collected via a secure form into the AES-256 encrypted database	Encrypted Amazon Relational Database, United States Region	no	no	yes	no	no	no	yes	No	no
34	Survey Data – specify what fields are collected in surveys and if free form fields are included	See surveys below
35	Student Monthly Survey (anonymous)	student	Secure online form. See "Example Student Survey" here: https://studentsupportaccelerator.com/tutoring/data-use/measures-data-collection/examples-data-collection-tools#surveys	service delivery	Used for continuous improvement of the product. Used for reporting in aggregate on application usage.	data will be collected via a secure form into the AES-256 encrypted database	Encrypted Amazon Relational Database, United States Region Google Workspace	no	no	yes	no	no	no	yes	No	no
36	Parent Monthly Survey	parent	Secure online form. See "Example Parent Survey" here: https://studentsupportaccelerator.com/tutoring/data-use/measures-data-collection/examples-data-collection-tools#surveys	service delivery	Used for continuous improvement of the product. Used for reporting in aggregate on application usage.	data will be collected via a secure form into the AES-256 encrypted database	Encrypted Amazon Relational Database, United States Region Google Workspace	no	yes	no	no	no	no	yes	No	no
37	Teacher Monthly Survey	teacher	Secure online form. See "Example Teacher Survey" here: https://studentsupportaccelerator.com/tutoring/data-use/measures-data-collection/examples-data-collection-tools#surveys	service delivery	Used for continuous improvement of the product. Used for reporting in aggregate on application usage.	data will be collected via a secure form into the AES-256 encrypted database	Encrypted Amazon Relational Database, United States Region Google Workspace	yes	no	no	no	no	no	yes	No	no
38	School Administrator Monthly Survey	school administrator	Secure online form. See "Example School Administrator Survey" here: https://studentsupportaccelerator.com/tutoring/data-use/measures-data-collection/examples-data-collection-tools#surveys	service delivery	Used for continuous improvement of the product. Used for reporting in aggregate on application usage.	data will be collected via a secure form into the AES-256 encrypted database	Encrypted Amazon Relational Database, United States Region Google Workspace	yes	no	no	no	no	no	yes	No	no
39	Net Promoter Score (single survey question rating likelihood user would recommend service to a friend or colleague).	parent, teacher	Passport application	service delivery	Used for continuous improvement of the product. Used for reporting in aggregate on application usage.	data will be collected securely over HTTPS and stored in an encrypted Amazon RDS	Encrypted Amazon Relational Database, United States Region Google Workspace	yes	yes	no	no	no	no	yes	No	no
40	Automatically Collected Data or Device Data and/or Metadata	See categories below
41	IP Address	parent, teacher	recorded by platform analytics tools and server logs	service delivery	Used to prevent attacks on the service platforms.	Access to analytics and server logs are tightly controlled and limited to developers and network IT staff	Encrypted Amazon Relational Database, United States Region	yes	yes	no	no	no	yes	no	No	no
42	Geolocation data (non-precise)	parent, teacher	Google analytics is installed on all platforms	service delivery	Used for continuous improvement of the product. Used for reporting in aggregate on application usage.	Access to Google Analytics is limited to key staff and reports presented to wider teams are in aggregate	Google, https://www.google.com/about/datacenters/locations/	yes	yes	no	no	no	yes	no	No	no
43	Browser Type of logged in user or website visitor	parent, teacher	Google analytics is installed on all platforms	service delivery	Used for continuous improvement of the product. Used for reporting in aggregate on application usage.	Access to Google Analytics is limited to key staff and reports presented to wider teams are in aggregate	Google, https://www.google.com/about/datacenters/locations/	yes	yes	no	no	no	yes	no	No	no
44	Access time of logged in user or website visitor	parent, teacher	Google analytics is installed on all platforms	service delivery	Used for continuous improvement of the product. Used for reporting in aggregate on application usage.	Access to Google Analytics is limited to key staff and reports presented to wider teams are in aggregate	Google, https://www.google.com/about/datacenters/locations/	yes	yes	no	no	no	yes	no	No	no
45	Time spent on site of logged in user or website visitor	parent, teacher	Google analytics is installed on all platforms	service delivery	Used for continuous improvement of the product. Used for reporting in aggregate on application usage.	Access to Google Analytics is limited to key staff and reports presented to wider teams are in aggregate	Google, https://www.google.com/about/datacenters/locations/	yes	yes	no	yes	yes	yes	no	No	no
46	Page Views of logged in user or website visitor	parent, teacher	Google analytics is installed on all platforms	service delivery	Used for continuous improvement of the product. Used for reporting in aggregate on application usage.	Access to Google Analytics is limited to key staff and reports presented to wider teams are in aggregate	Google, https://www.google.com/about/datacenters/locations/	yes	yes	no	no	no	yes	no	No	no
47	Referring URLs	parent, teacher	Google analytics is installed on all platforms	service delivery	Used for continuous improvement of the product. Used for reporting in aggregate on application usage.	Access to Google Analytics is limited to key staff and reports presented to wider teams are in aggregate	Google, https://www.google.com/about/datacenters/locations/	yes	yes	no	no	no	yes	no	No	no
48	Clicks of logged in user or website visitor	parent, teacher	Google analytics is installed on all platforms	service delivery	Used for continuous improvement of the product. Used for reporting in aggregate on application usage.	Access to Google Analytics is limited to key staff and reports presented to wider teams are in aggregate	Google, https://www.google.com/about/datacenters/locations/	yes	yes	no	no	no	yes	no	No	no
49	Click paths of logged in user or website visitor	parent, teacher	Google analytics is installed on all platforms	service delivery	Used for continuous improvement of the product. Used for reporting in aggregate on application usage.	Access to Google Analytics is limited to key staff and reports presented to wider teams are in aggregate	Google, https://www.google.com/about/datacenters/locations/	yes	yes	no	no	no	yes	no	No	no
50	Active/engagement time of logged in user or website visitor	parent, teacher	Google analytics is installed on all platforms	service delivery	Used for continuous improvement of the product. Used for reporting in aggregate on application usage.	Access to Google Analytics is limited to key staff and reports presented to wider teams are in aggregate	Google, https://www.google.com/about/datacenters/locations/	yes	yes	no	yes	yes	yes	no	No	no
51	Search history	parent, teacher	Google analytics is installed on all platforms	service delivery	Used for continuous improvement of the product. Used for reporting in aggregate on application usage.	Access to Google Analytics is limited to key staff and reports presented to wider teams are in aggregate	Google, https://www.google.com/about/datacenters/locations/	yes	yes	no	no	no	yes	no	No	no
52	Program or application performance (e.g. typing program – student types 60 WPM, reading program- student reads below grade level)	student	We or the Third-Party Platform will track product events and progress within a particular function for internal product usage analysis	internal product usage analysis	Curriculum platforms track student performance in their applications in order to assess progress.	Data provided in Passport is encrypted in-transit over HTTPS and encrypted at rest in a database using the AES-256 encryption algorithm Data provided by schools and third party platforms to Learning League will be encrypted in-transit via SFTP and imported over SSL to a database encrypted at rest using the AES-256 encryption algorithm	Encrypted Amazon Relational Database, United States Region Google Workspace	no	no	no	yes	yes	yes	yes	Yes	no