Built to meet student privacy laws
How Money Matters supports the federal and state laws districts check most often.
COPPA (federal)
Children under 13 never sign themselves up and never need an email; a school or parent creates their account. We collect only what the program needs, protect it with encryption and hashed sign-in codes, and delete data on request.
FERPA (federal)
Schools stay in control of education records. We act as a "school official" under the school's direction, use records only to provide the program and never re-disclose them.
PPRA (federal)
Students are not asked about protected topics (politics, religion, income, health and similar). Reflections are about the lesson only.
California SOPIPA and AB 1584
No targeted advertising, no profiles for non-school purposes, no selling of student data; reasonable security; deletion at the school's request; students own their work.
Illinois SOPPA
Data privacy agreements on the IL-NDPA (Exhibit G); a public list of subprocessors (on the security overview); breach notice to the school; deletion within the time the agreement sets; data used only for the school's purposes.
New York Education Law 2-d
We can complete the district's Parents' Bill of Rights supplemental information and data security and privacy plan. Student data is encrypted in transit and at rest and used only to provide the program.
Other states
Data privacy agreements based on the SDPC National Data Privacy Agreement with your state's exhibit.
Data privacy agreement
We work from the Student Data Privacy Consortium's National Data Privacy Agreement (NDPA) with your state's exhibit. Ask for our data privacy agreement pack.
This page is a plain-language summary, not legal advice. The signed agreement governs.