This policy forms part of our terms of service and explains your rights and responsibilities when using our services. It is important that you read the policy to be fully informed. If you have any questions, please contact us at dataofficer@mia.school or +1 (909) 443-1317.
For California Consumers of Miaplaza Services
This California Consumer Privacy Act Notice ("California Notice") describes how we handle your personal information, the reasons we do so, and the rights you have as a California resident regarding your information. This California Notice uses certain terms that have the meaning given to them in the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) and its implementing regulations.
International Users
The Websites are hosted and operated in the United States and are subject to United States law. Any personal information that you provide is being provided to us in the United States and wee be hosted on United States based servers. You consent to the transfer of our personal information to the United States in order to receive the Services. If you are accessing a Website outside the United States, please be advised that United States law may not offer the same privacy protections as the law of your jurisdiction.
Your privacy at Miaplaza
We take privacy very seriously at Miaplaza and this policy is designed to tell you what information we collect and how we use and protect it. This policy applies to all Miaplaza services and programs, including, but not limited to, MiaAcademy, MiaPrep, MiaPrep Online High School (MOHS), MiaPrep Online Academy of Ohio, Always Icecream, and Clever Dragons, and their respective websites ("Service" or "Services"). Miaplaza collects information when you visit our website, the websites of our affiliated schools, and the websites through which you access our technology platform in order to access our Services, such as our education management platform. Miaplaza also collects information when you communicate with us by phone, text, email, mail or other means of communication.
Miaplaza Affiliated Schools
Our publicly funded affiliate schools' practices comply with the Family Educational Rights and Privacy Act (FERPA) and all applicable state and federal student privacy laws.
We recognize that schools entrust us with sensitive student information, and we are committed to protecting the confidentiality, integrity, and security of that data.
1. FERPA Role and Responsibilities
Under FERPA, publicly funded schools are the educational agencies or institutions that maintain authority over student education records. When schools share student information with us to perform contracted services or when families share their information with us, including their student's information, in our role as an agent for the school, we act as a "school official" with a "legitimate educational interest."
This means:
- We process student data only to fulfill the School's educational purposes.
- We follow the School's written instructions and policies.
- We do not disclose education records except as permitted by FERPA, unless otherwise authorized by the School.
We do not claim independent rights to student data.
2. Parent and Eligible Student Rights Under FERPA
FERPA grants parents—and students who reach age 18 ("eligible students")—specific rights regarding education records, including:
- The right to inspect and review education records
- The right to request correction of inaccurate or misleading information
- The right to consent to disclosures, except where FERPA permits disclosure without consent
- The right to file a complaint with the U.S. Department of Education
- Because we act as a school official, individuals must submit FERPA requests directly to their school, not to us. We support schools in fulfilling these requests.
Children's Privacy - COPPA
- We process information about children under 13 and minors under 18 only under the school's authority. Schools are responsible for obtaining any required parental consent under FERPA, COPPA, or other applicable laws. School's may delegate that role to Miaplaza as the school's agent.
- We apply heightened protections to children's data and do not use it for any commercial purpose.
Consent to Abide By Privacy Policy
By using our Websites or communicating with us, you agree to the terms of the Privacy Policy in effect at the time of use.
We may update this policy from time to time and we will post a notice at the top of the policy if we do. If we make material changes to this policy that affect the collection and use of your information, we will notify you if we have your email address. If you have any questions please contact us at dataofficer@mia.school.
Notice
Miaplaza's principal place of business is located at 1425 Stonegate Ct, Gardnerville, NV 89410. The Data Protection Officer for Miaplaza can be contacted at dataofficer@mia.school or by writing to the Data Officer at Miaplaza, Inc., 1259 El Camino Real Unit #1246, Menlo Park, CA 94025.
Information we collect
To become a member of a Service, a parent must register for both a parent and a student account. The parent is required to provide the following information:
- Parent's first and last name, email address, and a password for the parent account. These are required to fulfill legal requirements for students' sites and our contractual obligations to you.
- The first name and first initial of the last name of the parent's student, plus a password for the student's account. This becomes the student's login identifier and also how the student is known by other members on the Site. You may, if you prefer, choose an alternate name as long as the student can remember it.
- Further, the parent / guardian is required to make a payment through a third-party payment service. The payment is used to obtain verifiable parental consent and to purchase the subscription for the use of the Service. We do not store your full credit card information.
- We also collect Service usage information to help us improve the Service's functionality and performance.
We do not share or disclose your personal information with third parties for those third parties' direct marketing purposes.
Registration Using Facebook
Our website offers you the option to register for an account using your Facebook profile. If you choose this method, Facebook will share certain personal information with us—specifically your name and email address—to facilitate the creation of your account on our site. We use this information solely to create and manage your account, provide you with access to our services, and communicate with you as needed. We do not receive your Facebook password. You can disconnect your Facebook account from our service at any time by adjusting your account settings within our site or in your Facebook account. We do not sell or share this registration information for cross-context behavioral advertising purposes without your consent, and you may exercise your rights, including the right to opt-out of such sharing, at any time through our Do Not Sell or Share My Personal Information link.
How We Use Your Personally Identifiable Information
General
Miaplaza uses your personally identifiable information to fulfill requests for information, deliver services to you or for your school or to carry out the transactions you or your school has requested, including delivering the Services. This could include supporting you, your child(ren), and/or academic instructors with matters such as academic progress, testing, attendance, customer service, or other academic related matters. In addition, we may use your data to communicate with you regarding new services, upcoming events, legislative or regulatory initiatives that could impact your ability to purchase Services, or in the event of an emergency.
Miaplaza may disclose your personal information to third-parties Miaplaza believes it has a legal obligation to disclose (including subpoenas or other court order), government agency request, such as law enforcement. Miaplaza may also disclose your personal information to enforce its terms of use, protect its property rights, to pursue its legal remedies, or to protect the rights, privacy, and safety of Miaplaza or others.
Academic Program Related Uses
We share your child(ren)'s personal information with third-party service providers providing services in support of your child(ren)'s academic program including speech, occupational, and other therapists, as well as information we are required to share with regulators in connection with your child(ren's) enrollment in an academic program.
Advertising service providers used in conjunction with parents / guardians
We work with third-party advertising networks, third party data controllers, and marketing analytics service providers such as
- Google,
- Meta / Facebook,
- Amplitude Analytics,
- Pinterest,
- Twitter / X,
- iHeart Media,
- Unbounce, and
- TikTok.
These third parties may collect and use information about parents' / guardians' visits to and use of our Service—as well as activity on other websites—in order to:
- Understand ad effectiveness
- Serve you with tailored advertisements and content based on your interests and browsing behavior across websites
These providers may use tracking technologies such as cookies, scripts, pixels, or device identifiers. You can opt out of targeted advertising or data "sharing" under applicable federal and state laws, such as the California CPRA, on our Privacy Preference Center.
Google Enhanced Conversion Tracking
We use Google's Enhanced Conversion Tracking feature to improve the accuracy of our ad campaign measurement and to better understand how our advertising leads to sales or other desired actions on our website. When you complete a conversion action on our website, such as making a purchase or filling out a form, we may collect and securely send your data (such as your email address or name) to Google. Google uses this data to match conversions to Google accounts that have interacted with our ads. For more information on how Google handles data, please see https://safety.google/intl/en_us/settings/
You can control your ad preferences and opt out of personalized ads by visiting https://myadcenter.google.com/home
Analytics service providers used in conjunction with parents / guardians and students
We use analytics service providers and data processors such as Google Analytics, Amplitude Analytics and OneTrust to help us:
- Understand how you interact with our Service
- Monitor usage patterns and site performance
- Improve our offerings
The providers may record your interactions with the Service, which can include data entered into forms and other personal information. These providers process your data only on our instructions and do not use personal information for their own purposes or disclose it to others.
We use cookies, scripts and similar technologies to collect analytics and web site performance data.
Analytics service providers used in conjunction with parents / guardians
We use third party service providers such as Freshworks to enable interaction with you on our website and/or our product. As a data processor acting on our behalf, Freshworks automatically receives and records certain information of yours like device model, IP address, the type of browser being used and usage pattern through cookies and browser settings. Freshworks performs analytics on such data on our behalf which helps us improve our service to you. You can read about the cookies Freshworks' sets in their cookie policy here: https://www.freshworks.com/privacy/
We use third-party payment processors such as Stripe and Braintree to handle payment transactions. When you make a purchase, your payment information (such as your name, billing address, and payment method details) is collected and processed directly by these providers. We do not store full credit card numbers or security codes on our servers. These processors are service providers and are contractually obligated to use your information only to provide payment processing services to us. You can review their privacy policies here:
- Stripe Privacy Policy: https://stripe.com/privacy
- Braintree Privacy Policy: https://www.paypal.com/us/webapps/mpp/ua/privacy-full
Other third party service providers used in conjunction with parents / guardians and students
We use third party service providers such as Airtable to process and store certain personal information about parents / guardians and students.
We use third party service providers such as Klaviyo and Zapier to communicate with parents / guardians and students by email. You can find Klaviyo's privacy policy here: https://www.klaviyo.com/legal/privacy/privacy-notice
You can find Zapier's privacy policy here: https://zapier.com/legal/data-privacy
We use third party service providers such as Cloudflare to help secure and optimize delivery of our website. Cloudflare acts as a content delivery network (CDN) and security provider. In this role, Cloudflare processes data such as IP addresses and traffic information to protect our services against attacks and improve site performance. Cloudflare acts only as our service provider and does not use this data for its own purposes. You can learn more in Cloudflare's privacy policy here: https://www.cloudflare.com/privacypolicy/
We use third party service providers such as Vimeo and YouTube to host embedded videos for the Services. If your child views an embedded video on our Service, the service provider may receive certain information automatically, such as your child's device IP address, device type, and other technical information necessary to deliver the video. The service provider may also store certain information on the device used for viewing an embedded video.
We do not permit Vimeo or YouTube to use this information for personalized advertising on our site, but these service providers may still collect and use data in accordance with their own Privacy Policy. Please note that video service providers may be able to show ads and collect additional information about your child when your child watches our videos directly on the video service providers website.
You can find Vimeo's privacy policy here: https://vimeo.com/privacy
YouTube is a service operated by Google and you can find their privacy policy here: https://policies.google.com/privacy
We use third party service providers such as Churnbuster to send you reminders about your subscription and payment methods. You can find Churnbuster's privacy policy here: https://churnbuster.io/privacy-policy
We use Trustpilot, an independent third-party review platform, to collect feedback from our customers and display reviews about our products and services. If you make a purchase or otherwise engage with our services, we may share limited personal information with Trustpilot (such as your name, email address, and transaction details) for the sole purpose of sending you an invitation to provide a review. Trustpilot will process this information as our service provider and will contact you via email to invite you to submit a review. Any review you choose to provide is voluntary and will be published on Trustpilot's website under the name you select. Published reviews are visible to the public and may also be displayed on our website or other marketing channels. Trustpilot may also collect additional personal information directly from you if you submit a review, in accordance with their own privacy policy. We encourage you to review Trustpilot's Privacy Policy here: https://legal.trustpilot.com/for-reviewers/end-user-privacy-terms.
We use Google Fonts which collects an IP address. Google does not use any information collected by Google Fonts to create profiles of end users or for targeted advertising.
We provide access to the Desmos Graphing Calculator for students with parental consent. Use of the graphing calculator does not require active collection of personal information. However, Desmos will have access to any user generated content created in the graphing calculator.
If you have any questions about our use of third party service providers, contact us at dataofficer @ mia.school
Information we collect from students
The data collection practices as described herein for students also apply to users aged 12 or under.
On all Services except MOHS students have the option to provide their birthdate, which allows customization of their Service experience. The student birthdate is not shared or disclosed publicly. The option to provide a birthdate is not available to users in the EU.
We collect information about a student's usage of the Service to help us improve the Service's functionality and performance. Information collected from or about a student is not used to contact or build a profile of the student or used for behavioral advertising.
If the parent / guardian has enabled the Service's community features, the student may provide certain information about themselves in their Profile sections including:
- Nickname
- My Status
- About me
- My Hero
- Books I Enjoy
- Favorite Movies
- Most Memorable Vacations
The student can also upload student-generated content, join groups, send friend requests, send messages to friends, and comment on other people's profiles.
These information postings are pre-moderated by Miaplaza staff for appropriateness and to prevent the disclosure of personal information.
If community features are not enabled by the parent / guardian, the student can only customize their MiniMe avatar and add a Nickname. The student cannot visit other students' profiles but may be able to see the first names and nicknames of other students on certain webpages of the Service.
We do not condition a student's participation in an activity on the disclosure of more information than is reasonably necessary to participate.
Making friends
Students want to make and connect with friends. This is important for building social skills, but we want it to be in a safer setting than is typical for the Internet.
Students can become friends with other students on the Service by inviting each other to start a friendship using the Become Friends button on the student's profile page. Students can search for friends using a name, nickname, interest, or a user's unique friendship code.
All user generated content and communication between members, also between friends, is reviewed by a site moderator (i.e., pre-moderated) before it can be read by the intended recipients to prevent inappropriate commentary and divulging of personal information.
Miaplaza Affiliated Schools
To comply with legal requirements and to provide the education program offered by a specific affiliated school in which a the parent / guardian is enrolling their child, the parent/guardian will be asked is asked to provide their
- First and last name,
- Email address,
- Phone number,
- Household address,
- Government issued ID verification document, and
- Payment method for the enrollment fee and tuition (when permitted)
Miaplaza requires identity verification documents during enrollment to verify the identity of parents / guardians (driver's license, government-issued ID, or passport) and students (certified birth certificate, government-issued ID, or passport). These documents are used solely for enrollment verification, regulatory compliance, and preventing fraudulent applications.
Also during enrollment, the parent / guardian is asked to provide the student's
- First and last name and preferred name,
- Date of birth,
- Gender,
- Incoming grade level and current schooling arrangements,
- Government issued ID verification document, and
- Academic record.
- IEP, 504 plan, or other record demonstrating accommodation needs
The parent / guardian further has the option to provide the student's
- Phone number and email address to permit direct communication between the student and the affiliated school to the extent permitted by law, and
- Photo.
Only if the parent / guardian intends to apply for tuition assistance or to qualify for free and reduced lunch or other government assistance, as the case may be, the following information has to be provided
- Income information,
- Tax information,
- Government assistance documentation.
- Such other documentation required to qualify for the as
These documents are used to verify the applicant's eligibility for tuition assistance.
Miaplaza uses Google Classroom* for classroom and learning management. Google Classroom includes several Google services such as Google Meet, Docs, Sheets, Slides, YouTube, and Drive. Enrollment in a Miaplaza affiliated school includes registration for a Google Classroom account which requires sharing the following personal information with Google Classroom:
- the student's first and last name. This becomes the student's Google Classroom email address which is used to log into Google Classroom and to communicate with other enrolled students and school staff;
- the student's course work, classroom activities, and communication;
- the student's voice as part of voice texting with school staff, if that feature has been enabled by the parent / guardian.
See the respective affiliated school Student Handbook for more information.
*Miaplaza reserves the right to adopt one or more replacement technology platforms from time to time. In that event, this privacy policy will be equally applicable without need for notice to users.
Data retention
All user data is retained the earlier of as long as reasonable to provide the Service to you or as permitted by law.
An account is deemed inactive after 1000 days have passed without a payment or a login from the user. All data is deleted after this date, unless there is a legitimate business or regulatory compliance purpose to retain information for a longer period of time.
If a user requests account deletion, then their profile and associated data is deleted from our records within 20 business days, unless c.
How to update or delete / remove your or your child's information
You can review the personal information you or your child provided us and update it, or update the settings for your Service account, at any time by logging in to your account on the Service's website and editing the account and profile information. To request data deletion of your account and information, please send your request to dataofficer@mia.school and we endeavor to honor your request as soon as possible, taking into consideration Miaplaza's legitimate business or regulatory compliance purpose.
If you are a parent / guardian and you wish to request access to review or delete your child's information, please contact Miaplaza at dataofficer@mia.school. Please send your request using the parental email account that you have used during registration. You will receive a response to requests sent to us within five business days of our receiving it.
Miaplaza will endeavor to complete any deletion requests within 20 business days, except in circumstances that there is a legitimate business or regulatory compliance purpose to retain information for a longer period of time. Miaplaza will provide you with notice of any reason justifying a denial or delay of complying with your deletion request.
If you are the parent / guardian of a child who is using a Miaplaza Service at the direction of their teacher under a Joint Service school partnering agreement, please contact the appropriate official at your child's school to access, review, correct, or delete any of your child's personal information in the Miaplaza Service.
If Miaplaza is made aware that a student's personal information has been collected without prior consent or under a school agreement, we will take steps to the extent legally permissible to immediately delete the collected information, or to seek consent.
Information transfer and storage
We transfer Information and Personally Identifiable Information between Europe and the United States. In addition, such data may be stored on servers located outside your resident jurisdiction, which may have less stringent privacy practices than your own jurisdiction.
Information collected from and through partner schools / educators
Miaplaza may enter into partnering agreements with schools or similar educational services providers to offer a Joint Service. In a Joint Service, either Miaplaza obtains parental consent for the student to participate in the Joint Service or the partner school obtains signed parent / guardian consent forms prior to the student's participation in the Joint Service. The partner school is responsible for ensuring that parents / guardians have been notified in writing of the use of a Miaplaza Service in the classroom and have been provided access to this privacy policy. The partner school will also inform parents / guardians that they have the right to opt-out their child from participation. Parent / guardian requests for review, access, or deletion of your child's personal information should be directed to the school.
Any content uploaded that is shared as part of a class at a partner school is retained at the direction of the school (e.g., for legal compliance reasons such as maintenance of "education records" under FERPA); to correct or delete this content, please contact the appropriate official at your child's school.
Miaplaza deletes personal data in our databases after the expiration of a partner school's license agreement. This time period may, however, vary as needed to fulfill the purposes for which the information was collected. Additionally, an account is deemed inactive after 1000 days have passed without a payment or a login from the user. All data is deleted after this date unless a legal requirement or legitimate business purpose requires retention of the data for a longer period of time.
Partnership with Arizona State University (ASU)
Families enrolling in the ASU Universal Learner Courses (ULC) program through MiaPrep Online High School (MOHS) should be aware that MOHS will need to provide specific information to ASU in order to complete enrollment and participate in this program. This information is limited to:
- The student's first and last name
- Their MOHS-assigned email address
- The parent / guardian's phone number
- The student's date of birth
- The student's address
Parents / guardians must agree to sharing this personal info, including your name, phone number, and home address with ASU.
Miaplaza will not provide any other information to ASU without the parent or guardian's explicit permission.
Communications with parents / guardians
We will communicate with parents / guardians through email and notices posted on a Service's website. These include occasional emails about various features of the Service. Further, communications may be by text when consented to by parents/guardians.
Customized content
Information you provide at registration or in your Account Management section is also used to customize your experience on the Service. For example, the learning games and teaching videos that are offered to users depend on the grade range settings chosen by the parent / guardian.
Miaplaza Research
Miaplaza occasionally conducts research with users for internal use only and does not engage a third party for such activity unless the data has been de-identified prior to giving access to the data or consent has been obtained. We invite parents / guardians to participate via social media. The parent / guardian will receive an email request and must provide consent for their child's participation. Research sessions may collect the following:
- Interaction data (e.g., buttons clicked, time spent on tasks).
- Your child's first name.
- Your child's academic progress (e.g., lesson completion, quiz scores).
- Feedback provided via on-screen input options during the session
- Feedback provided verbally (via microphone).
- Video recording of your child and their surroundings (if required).
For questions about your child's participation in this research or to opt-out of participation, please contact dataofficer@mia.school
Complying with law and preventing harmful activities
Miaplaza may process and share personal information if necessary to comply with legal requests, such as subpoenas or court orders. Miaplaza may share personal information when we believe it is necessary to comply with the law, to exercise our rights, to protect our interests or property, to prevent fraud or other illegal activity, to assist law enforcement, or to prevent imminent harm. This may include sharing information with other companies, lawyers, agents, or government agencies.
Links out
We may include links to third parties from a Service's website. We are not responsible for these companies and because we have a link does not mean we endorse them. Your use of our Services may be subject to the terms and conditions, terms of service and privacy policies of other services that we do not control such as mobile app stores, mobile software platforms or payment processors. Please be sure to check their privacy policies if you decide to visit them.
Security
We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
If you have any questions about security on our Site, please contact us at dataofficer@mia.school.
Information for Users in the European Union (GDPR Notice)
Personal Data We Collect
We collect and process the following categories of personal data:
- Account information: Name, email address, password, and other registration details
- Student information: First name, first initial of last name or alias, and password
- Profile information: (if community features are enabled) User-generated content, nicknames, profile text, etc.
- Payment information: Processed by a third-party provider; we do not store full payment details
- Usage data: IP address, device information, browser type, pages visited, entry/exit URLs, and cookies
- Optional data: Date of birth (if provided), communication preferences
We collect this information either directly from you (e.g., when you fill out a registration form), automatically (e.g., via cookies or log files), or from third-party service providers as described in this policy.
How We Use Your Personal Data
We process your personal data for the following purposes:
- To provide and operate our Services
- To manage user accounts and authenticate logins
- To enable parental controls and consent management
- To process payments and provide customer support
- To analyze, improve, and secure our Services (using analytics and security tools)
- To communicate with you (service updates, support, etc.)
- For marketing and advertising purposes (with your consent, where required)
- To comply with legal obligations
Legal Bases for Processing
We rely on one or more of the following legal bases under the GDPR:
- Performance of a contract: Processing necessary to provide the Services you request
- Consent: For optional processing activities, such as certain cookies or marketing
- Legal obligation: To comply with applicable law
- Legitimate interests: For activities such as analytics, security, or service improvement, provided these interests are not overridden by your rights
You can withdraw your consent at any time where we rely on your consent.
Data Sharing and Transfers
We may share your data with trusted third-party service providers who help us operate the Service (e.g., payment processors, analytics providers, cloud hosting).
If we transfer your data outside the European Economic Area (EEA), we use safeguards such as Standard Contractual Clauses to protect your information.
How Long We Keep Your Data
We retain your personal data only as long as necessary to fulfill the purposes described above or as required by law.
You may request deletion of your data at any time (see "Your Rights" below).
Your Rights under the GDPR
If you are located in the European Union, you have the following rights regarding your personal data:
- Right of access: You can request a copy of your personal data we hold
- Right to rectification: You can ask us to correct inaccurate or incomplete data
- Right to erasure: You can ask us to delete your personal data, subject to certain exceptions
- Right to restrict processing: You can request we limit how we use your data
- Right to data portability: You can request your data in a portable format
- Right to object: You can object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time
- Right to lodge a complaint: You may lodge a complaint with your local data protection authority
To exercise any of these rights, please contact us at dataofficer@mia.school. We will respond to your request as required by law.
How to contact us if you are in the European Union
If you have questions about how we use your information or to exercise your rights, you can contact us at dataofficer@mia.school or at Miaplaza Germany GmbH, Kollwitzstraße 76, 10435 Berlin, Germany.
Information for Users Resident in California, USA (CCPA Notice)
Your Rights Under the CCPA
California residents have the following rights:
Right to Know
You may request information about:
- Categories of personal information collected
- Sources of that information
- Purposes for collecting or sharing it
- Categories of third parties with whom we share it
- Specific pieces of personal information we hold about you
Right to Delete
You may request deletion of personal information, subject to educational, contractual, or legal exceptions. For example, schools may be required to retain certain student records under state or federal law.
Right to Correct
You may request correction of inaccurate personal information.
Right to Opt-Out of Sale or Sharing
If we ever sell or share personal information for cross-context behavioral advertising, you may opt out at any time. (Currently, we do not sell or share personal information for these purposes.)
Right to Non-Discrimination
We will not deny services, charge different prices, or provide a different level of service because you exercised your CCPA rights.
Submitting a Request
You may exercise your CCPA rights by contacting us:
Email: [insert email]
Phone: [insert phone number]
Web form: [insert URL]
We will verify your identity before processing your request and respond within legally required timeframes.
For student-related data, we may be required to coordinate with the student's school or district, as they are typically the official custodians of student education records.
Authorized Agents
You may designate an authorized agent to submit requests on your behalf. We may require proof of authorization and identity verification.
Data Retention
We retain personal information only as long as necessary to support educational services, comply with school or district requirements, or meet legal obligations.