Last Updated: April 28, 2026

1. Overview

Aventuras in Learning LLC (“Provider,” “Aventuras,” “we,” “our,” or “us”) is committed to protecting the privacy, confidentiality, and security of all data collected and processed through its educational platform. We take this responsibility seriously and have designed this Policy to be transparent, specific, and enforceable.

This Data Privacy and Security Policy (“Policy”) describes in detail how we collect, use, store, share, and protect personal data, including student data, in alignment with applicable federal and state laws, contractual obligations, and widely accepted educational data privacy standards.

This Policy applies to:

• All users of the Aventuras in Learning platform, including educators, school administrators, and students
• All systems, services, software, sub-processors, and personnel involved in delivering Aventuras in Learning’s services
• All third-party service providers engaged by Aventuras to support platform functionality
• All devices and methods through which the platform is accessed

Aventuras in Learning is designed with awareness of and compliance with applicable student data privacy laws, including:

• Family Educational Rights and Privacy Act (FERPA)
• Children’s Online Privacy Protection Act (COPPA)
• Illinois Personal Information Protection Act (PIPA) and other applicable state privacy laws

2. Educational Use and Legal Compliance

Aventuras in Learning is designed for use in educational settings and operates as a service provider to schools and educators.

We process student data:

• Only under the direction of schools and teachers
• Solely for legitimate educational purposes

All student data remains the property of the school or educational institution.

We comply with applicable federal laws, including:

• Family Educational Rights and Privacy Act (FERPA)
• Children’s Online Privacy Protection Act (COPPA)

When working with schools or districts, Aventuras in Learning will review contractual data privacy requirements and work in good faith to support compliance with agreed-upon obligations.

3. Data Collection and Minimization

The following enumerates all categories of personal data we collect, organized by user type. This list is exhaustive; Aventuras does not intentionally collect categories of data not listed below.

Student accounts are optional and are created only at the discretion of the teacher or school.

Educator and Administrator Data:

• Full name
• Email address
• Login credentials (username and securely hashed password)
• School or institution affiliation
• Payment-related information (processed exclusively by third-party payment processors; Aventuras does not store raw payment card data)
• Platform usage and activity logs (e.g., login timestamps, content accessed, features used)

Student Data:

• First name, nickname, or teacher-assigned identifier (no full legal name is required)
• Classroom association (the class or group the student is assigned to by the educator)
• Progress and activity data within the platform (e.g., lessons completed, scores, time on task)
• Session identifiers necessary to maintain platform functionality during an active session
• Class code (used for anonymous or pseudonymous student access; not linked to a personal account)

Data We Do Not Collect:

• Social Security numbers or government-issued identification numbers
• Health, medical, or mental health data
• Biometric data of any kind
• Precise geolocation data
• Photographs or images of students
• Financial account information of students or families
• Race, ethnicity, religion, or political affiliation
• Sensitive personal data beyond what is enumerated above as necessary for educational service delivery

4. Use of Data

All data is used strictly to support teaching and learning.

This includes:

• Providing access to the platform
• Delivering instructional content
• Supporting classroom activities
• Allowing educators to monitor student progress

Aventuras in Learning does NOT:

• Sell, rent, or trade personal data
• Use data for advertising or marketing
• Build user profiles for non-educational purposes
• Use student data to train artificial intelligence systems

5. Third-Party Service Providers

Aventuras in Learning uses carefully selected third-party service providers to support platform functionality (such as hosting, payments, authentication, and content delivery, including video delivery through Vimeo).

All third-party providers are required to:

• Process data only to provide services to Aventuras in Learning
• Maintain appropriate data security and confidentiality protections
• Comply with applicable data protection standards
• Not sell, rent, or share personal data
• Not use data for advertising, profiling, or marketing purposes

Aventuras in Learning does not engage in behavioral advertising and does not permit the use of personal data for cross-site tracking.

Aventuras in Learning remains responsible for ensuring that all third-party providers meet these data protection standards.

6. Data Security and Safeguards

Aventuras in Learning is responsible for implementing and maintaining appropriate safeguards to protect personal data.

We implement administrative, technical, and physical measures designed to protect data against unauthorized access, disclosure, alteration, or destruction.

These measures include secure data transmission, access controls, authentication protections, and restricted access to authorized personnel.

These safeguards include encryption of data in transit, secure hosting environments, and regular review of access permissions.

7. Access Controls and Internal Data Governance

Access to personal data is strictly limited based on role and necessity.

Only authorized personnel who require access to perform their responsibilities are permitted to access data.

8. Data Retention and Deletion

Data is retained solely for educational purposes and only for as long as necessary to provide services or meet contractual obligations.

Schools and Local Education Agencies (LEAs) may:

• Request access to their data
• Request correction of data
• Request deletion of data

Upon termination of services:

• Data will be securely deleted
• Aventuras in Learning will work in good faith to provide access to relevant data upon request, to the extent reasonably available

If no request is made, data will be securely deleted within 30 days of termination, unless otherwise required by applicable law or a school or district agreement.

9. Data Sharing and Disclosure

Aventuras in Learning does not sell or share personal data.

We do not share data for advertising or marketing purposes.

Data may only be disclosed when necessary to:

• Provide platform functionality
• Support technical operations
• Comply with legal obligations

All such disclosures are limited and subject to data protection requirements.

10. Incident Response and Breach Notification

Aventuras in Learning maintains procedures, including a data breach response process, to address suspected or confirmed data security incidents.

In the event of a security incident, Aventuras in Learning will:

• Promptly investigate the incident
• Take steps to secure systems and data
• Mitigate potential impact
• Notify affected schools or users as required by applicable laws or contractual obligations

11. Children’s Privacy (COPPA)

Aventuras in Learning is designed for use in educational settings under the direction of schools and teachers. The platform is intended for use with students, including children under the age of 13.

In accordance with COPPA and applicable FTC guidance:

• Schools and educators may provide consent on behalf of parents for educational use of the platform, as permitted under COPPA’s school official exception.
• Aventuras does not require students to create independent personal accounts or provide personal information directly.
• Student access is managed entirely by educators and school administrators.
• Students may access the platform using only a class code and a self-selected nickname, without requiring personally identifiable information (PII).
• We collect only the minimum student data necessary to deliver the educational service, as described in Section 3 (Data Collection and Minimization).
• Student data is never used for commercial purposes, advertising, or non-educational profiling.
• Parents and guardians may request access to, correction of, or deletion of their child’s data by contacting the school or by emailing info@aventurasinlearning.com.

The platform is not intended for independent use by students without school or teacher authorization.

12. Responsibility for Data Protection

Aventuras in Learning is responsible for protecting personal data within its systems through appropriate technical and organizational safeguards.

13. Policy Updates

This policy may be reviewed and updated periodically to reflect changes in technology, legal requirements, or operational practices.

Material updates will be communicated as required.

14. Contact Information

If you have any questions regarding this policy or our data practices, please contact us at: info@aventurasinlearning.com

We understand that some schools and districts require more detailed documentation. A comprehensive version of this Data Privacy and Security Policy is available here.