Rhithm complies with all FERPA regulations. School districts select district/campus leaders who have a legitimate educational need-to-know and are granted access to your child’s data, as well as teachers that directly work with your child. 

Internally, we limit employee access to student data to only those employees with a need to such access to fulfill their job responsibilities. Addtionally, we conduct background checks on our employees that may have access to student data; we conduct regular employee privacy and data security training and education; and we protect personal information with technical, contractual, administrative, and physical security safeguards in order to protect against unauthorized access, release or use.

Rhithm does not sell, trade, lease or loan the personal information they collect or maintain, in the course of providing the service, to any third party for any reason, including direct marketers, advertisers, or data brokers.

We will not keep your information for longer than we need to for the purposes listed in our privacy policy. If your child uses an account through your school or school district and you wish to close their account with one of our Services, please contact your school or school district and at their direction we will remove your Personal Information and Profile, if applicable, from the active databases for the Service(s) you request through your school or school district. Please let your school or school district know which Service(s) you wish to close.

Additionally, we will delete or de-identify personal information 1) when it is no longer needed, 2) upon expiration or termination of our agreement with an educational institution with any deletion or de-identification to be completed according to the terms of our agreement with the educational institution, or 3) at the direction or request of the educational institution.

We have a comprehensive Security Program in place designed to protect the confidentiality, integrity and availability of systems, networks and data. The following is a general overview of data security protocols:

Data in Transit –

• HTTPS encrypted

Data at Rest –

• Rhithm’s data storage providers provide an Encryption methodology that is inherent in their data storage systems and is replicated in encrypted form for backup and disaster recovery.

Data Center Security (LiquidWeb) –

• 24/7/365 Manned Facilities
• CCTV Security Cameras Covering Inside, Outside and All Entrances of Data Centers
• Site Entrances Controlled By Electronic Perimeter Access Card System
• Sites Remotely Monitored By 3rd Party Security Company
• Entrances Secured by Mantraps with Interlocking Doors
• SSAE-16 & HIPAA Compliant, Safe Harbor Certified

1. Rhithm does not target advertising via the Rhithm service or on any other website using information about a K-12 student, their families/guardians or educators acquired from a use of the technology.
2. Rhithm does not use information, including persistent unique identifiers, created or gathered by the Rhithm service to amass a profile about a K–12 student, their families/guardians or educators except in furtherance of K–12 school purposes.
3. Rhithm does not and will not sell, rent, or otherwise provide personally identifiable information to any third party for monetary gain.
4. Rhithm does not disclose student information unless for legal, regulatory, judicial, safety or operational improvement reasons.
5. Rhithm is committed to maintaining the security and confidentiality of pupil records as noted above.
6. Rhithm will delete student information when requested by the school district.

Yes. Parents, legal guardians, or eligible students may review personally identifiable information in a student’s records by contacting their educational institution. Additionally, Rhithm users may access their personal information in their profile by signing into Rhithm.

To opt your child out of using Rhithm, contact your child’s school or district. With your request to the school or district, please include whether you would like your child’s access to Rhithm permanently removed and if you would like any data deleted and/or returned to you. The school or district will pass that request to Rhithm and we will work with the district to ensure it is completed in a timely manner.