InPlay's Privacy Policy

Last Changes to Privacy Policy: February 9, 2022

UnaMesa Association, non-profit sponsor of InPlay, is strongly committed to letting you know how we (collectively, “InPlay” or “we”, “us”, or “our”) will collect and use your personal information and the personal information you provide about your child. The policies below are applicable to the information collected when you use any of InPlay online services that link to this policy, such as our website (www.inplay.org), however accessed or used, websites that are operated by us, made available by us, or produced and maintained by InPlay, create an account on our website, create a profile with us, subscribe to receiving communications from us, contact us by email or phone (including text), make a donation to us, make an inquiry about a featured program, when you engage with us on the website, social media or interact with our marketing communications. (collectively, our “Services”). We have established this privacy policy (“Privacy Policy”) to let you know the kinds of information we may gather from you online and through offline methods, why we gather this information, what we use this information for, when we might disclose your personal information, and how you can manage your personal information.

Because our work involves school-age minors, we take the collection, protection, and privacy associated with any personal information we obtain very seriously. Please note that InPlay is directed and intended for use by parents and legal guardians. We do not knowingly collect any personal information from children under 13 years but do have information about children based on information provided by you, their parent or guardian, including their name, age, school, and address. By providing this information, you represent that you are the parent and/or legal guardian for the child(ren) and are authorized to provide this information. If you become aware that a child has provided us with personal information without your consent, please contact us and we will delete that information.

By using our Services, you are accepting the practices described in our Privacy Policy and agree to our Terms of Service. If you do not agree to the terms of this Privacy Policy, please do not use the Services. We reserve the right to modify or amend the terms of our Privacy Policy from time to time without notice. Your continued use of our Services following the posting of changes to these terms will mean you accept those changes.

If you have any questions about this Privacy Policy or don’t see your concerns addressed here, you should contact us by email at legal@inplay.org, telephone 650-246-9976, or by mail at InPlay, 55 E. Third Avenue, San Mateo, CA 94401.

What Personal Information Is Collected and Stored?

We collect your personal information in the following ways: 1) from you when you choose to voluntarily provide it; 2) using automated technology; and 3) from third party sources, including but not limited to school districts, entities that provide analytics and advertising services, and service providers.

Personal information is any information that can directly or indirectly be used to individually identify you and includes, among other things, your name, e-mail address, age, gender, telephone number, postal address, zip code, or other contact information, tracking and usage information about your location, device, demographics, or use of the Services.

Automated technology collects information from your computer or mobile device and includes cookies, web beacons, local shared objects, or other similar technology. When you interact with the Services, we may collect certain personal information using automated technology. Generally, we collect and store the following categories of personal information using automated technology:

  • Device information about your computer, browser, mobile device, or other device that you use to access the Services. This information may include IP address, geolocation information, unique device identifiers, browser type, browser language, and other transactional information.
  • Analytics and usage information about your use of the Services.
  • Additional “traffic data” and log files such as time of access, date of access, software crash reports, session identification numbers, access times, and referring addresses.
  • Other information regarding your use of the Services.

We make full use of information that is de-identified, anonymous, aggregated or otherwise not in personally identifiable form.

Rights to Share Personal Information

When you share personal information about yourself or your child, you certify that you are the parent or legal guardian and possess the necessary rights to approve of sharing that information. If InPlay becomes aware that you did not possess these necessary rights, InPlay will delete the personal information and prohibit you from using our Services, in addition to any other remedies.

Personal Information

There are a number of circumstances in which you may supply us with personal information. The following lists the most common ways in which we may collect personal information from you.

  • Creating an account to use InPlay’s Services.
  • Using our Services to sign up for out-of-school programs.
  • Providing information for your user profile or the user profile of any of your users.
  • Entering information about your general location.
  • Signing up to receive alerts or other information via email, text or instant message from InPlay.
  • Requesting customer service or other assistance.
  • Services related communications, for example, account verification and technical notification.
  • Communicating within the Services.
  • Submitting content or information on any part of the Services that permits it.

We also collect personal information from third party sources, such as:

  • Service providers, about the number of users who contact, sign up, receive financial aid, and participate with the activity provider.

School districts, to help suggest relevant out-of-school programs and help you register your child we may obtain the parent/guardian’s email and phone, residential address, student age/grade, school of attendance, medical conditions, emergency contacts, and eligibility for specialized academic supports or programs.

How Do We Use Your Information?

We use the information we learn to help us personalize and improve your experience with our Services. We may use your personal information in the following ways:

  • To upload your content to our Services as you request.
  • To complete and submit program enrollment applications to programs in which you want to enroll your child.
  • To find and suggest relevant activity programs and offers that may interest you.
  • To permit you to update, edit, and manage your content on our Services.
  • To authenticate the accounts of you and your users.
  • To communicate with you about your account or transactions with us (including service-related announcements) and send you information about features and enhancements on our Services.
  • To communicate with you about changes to our policies and other notifications.
  • To personalize content and experiences on our Services, including providing you reports, recommendations and feedback based on your preferences.
  • To optimize or improve our Services and operations.
  • To detect, investigate, and prevent activities that may violate our policies or be illegal.
  • To perform statistical, demographic, and other analyses of users of the Services.
  • For legal, research, educational and other business purposes.

Use of Cookies and Other Tracking Technologies

Like many websites, we use “cookies”, which are small text files that are stored on your computer or equipment when you visit certain online pages that record your preferences and actions. We may use cookies, web beacons, or other similar technologies to record your preferences and track the use of our Services and your exposure to our promotions, if any. We may also use these technologies to monitor traffic, improve the Services, and make it easier and relevant for your use. If you delete your cookies or if you set your browser or device to decline these technologies, some features of the Servicesmay not work as designed.

We may use both “session” cookies and “persistent” cookies. We do not use flash cookies, web storage, web beacons, or other technology that tracks your browsing history across multiple Services.

We use cookies for the other purposes set out below:

  • We use cookies to remind us who you are and to find your account information in our database when you access a service so you do not need to log in at every visit; this helps us to provide you with service tailored to your specific needs and interests.
  • We use cookies to determine your browser so the site can be designed to work properly with the most common versions of different browsers.
  • We use cookies in conjunction with sending you e-mail newsletters.
  • We use cookies in conjunction with analysis of your use of our Services and to generate analytics regarding our Services.
  • We use cookies to estimate our audience size; your browser or device is given a unique identifier that helps us determine whether yours is a repeat visit or a first visit.

To find more information about cookies and for instructions on how to disable them please visit https://www.allaboutcookies.org/ or visit the help section of your browser. Most browsers are initially set to allow cookies, but also offer the option to restrict cookies or warn you of their use.

Analytics Disclaimer

We and/or third parties including advertising companies, business partners and service providers on our behalf, may use cookies, web beacons, pixels and other similar technology, to collect personal information for the purposes described in this Privacy Policy including analytics, monitoring performance and improvement of our website and Services (traffic, errors, page load time, popular pages, etc.).

Google Analytics: We also use several different analytics services, including Keen and Google Analytics on our Services. To learn more about how Google processes your data, please visit: https://www.google.com/policies/privacy/. To opt out of Google Analytics, please install the Google Analytics Opt-out Browser Add-on by visiting: https://tools.google.com/dlpage/gaoptout.

Your browser or device may include “Do Not Track” functionality. Because a “Do Not Track” compliance protocol has not yet been finalized, InPlay’s information collection and disclosure practices, and the choices that we provide to customers, will continue to operate as described in this Privacy Policy, whether or not a Do Not Track signal is received.

Who Do We Provide Your Information To?

We disclose your personal information as provided below.

Activity Providers and School Districts/Local Government or Funding Agencies

We will provide registration information, which includes personal information of your child(ren) to the activity providers that you give us approval to submit through our service. In addition, you may use our Services to contact an activity provider, in which case we will disclose the information you provide to the requested providers. If you give us permission, we may also share information with your child(ren)’s school district.

School Districts/Local Government or Funding Agencies may engage our Services to refer relevant programs and offers to you and help you submit registrations. Personal information shared by the District will only be shared with activity providers if you give us permission. In these cases, the providers have agreed to adhere to the District/Local Government or Funding Agency’s data privacy and security policies and promise not use the data to market, sell, or use your information in other ways other than for the sole purpose of performing legitimate educational purposes. They understand that student data must be kept confidential or privileged.

Partners and Third Parties

Change of Control: Over time, InPlay/OSCAR may grow and reorganize. We may share your information, including personal information with affiliates in which case we will require those organizations to agree to use your personal information in a way that is consistent with this Privacy Policy.

In the event of a change to our organization such that all or a portion of InPlay/OSCAR or its assets are acquired by or merged with a third-party, or in any other situation where personal information that we have collected from users would be one of the assets transferred to or acquired by that third-party, this Privacy Policy will continue to apply to your information, and any acquirer would only be able to handle your personal information as per this policy (unless you give consent to a new policy). We will provide you with notice of an acquisition within thirty (30) days following the completion of such a transaction, by posting on our homepage and by email to your email address that you provided to us. If you do not consent to the use of your personal information by such a successor company, subject to applicable law, you may request its deletion from the company.

In the unlikely event that InPlay/OSCAR goes out of business, or files for bankruptcy, we will protect your personal information, and will not sell it to any third-party.

Service Providers

We may use third-party service providers that perform functions on our behalf, such as website hosting, accounting, push notifications, managing donations,, storage, content management tools, analytics, customer service, fraud protection, etc. These entities have access to the personal information needed to perform their functions.

  • Alphabet, Inc. - processes Technical Data for the purpose of ease of use of Service;
  • Amazon Web Services, Inc. - hosts all Personal Information that we collect;
  • DonorBox, Inc. – processes charitable donations;
  • Heroku, Inc. – hosts all Personal Information that we collect;
  • Keen.io – processes Technical Data to improve use of Service;
  • Mr Cowboy LLC – facilitates secure transfer of Personal Data;
  • Twilio, Inc. – processes Personal Information to facilitate text communications;
  • Zendesk, Inc. - processes Contact Data on our behalf for the purpose of providing user support.

Emergency Situations

We may also use or disclose personal information if required to do so by law or in the good-faith belief that such action is necessary to (a) conform to applicable law or comply with legal process served on us; (b) protect and defend our rights or property, the Services or other individuals, and (c) act under emergency circumstances to protect the personal safety of us, our affiliates, agents, users of the Services, or the public. This includes exchanging information with other companies and organizations for fraud protection.

What Steps Are Taken To Keep Personal information We Collect From You Secure?

We use a combination of physical, technical, and administrative safeguards to protect the personal information we collect through our Services. While we use these precautions to safeguard your personal information, we cannot guarantee the security of the networks, systems, servers, or devices we operate or that are operated on our behalf and we will not be liable for disclosure of personal information obtained due to errors in transmission or security breaches.

If InPlay becomes aware of a systems security breach by an unauthorized party or that any user data was used for an unauthorized purpose, we will comply with relevant state and other data breach laws. We will notify users of any breach resulting in unauthorized release of data electronically, at minimum, and without unreasonable delay so that you can take appropriate steps. The notification will include: date of the breach, the types of information that were subject to the breach, general description of what occurred, and steps Inplay is taking to address the breach.

What Are Your Choices and How Do You Opt-Out?

We believe you should have choices about the collection, use, and sharing of your information.

*Collection of Personal information. *All personal information is provided on a voluntary basis. If you do not want InPlayto collect such information, you should not submit it to the Services or use our website. If InPlay obtained your personal information and you want InPlay to delete it, please submit your request to legal@inplay.org and we will assist you in the process. However, withholding information or opting out of sharing will restrict your ability to access some content and use some of the functionality of the Services.

Emails and Other Communications. If you would like to alter the type of communications you receive from us, including opting out of promotional communications from us, you may do so at any time by updating the communication preferences specified in your account profile through the Services. Please note that this may affect your ability to access certain products and Services, and we may continue to send non-promotional communications such as program confirmations, and other information about your use of the Services. If you refer others to us using our email functionality, please note that they may choose not to receive any promotional emails from us in the future by following the opt-out instructions in the email invitation.

Tracking. You also have choices to limit some tracking mechanisms that collect information when you use the Services. Many web browsers automatically accept cookies, but you can usually modify your browser's setting to decline cookies if you prefer. If you choose to decline cookies, certain features of our Services may not function properly or remain accessible to you. In addition, you may also render some web beacons unusable by rejecting or removing their associated cookies. Note that if you choose to remove cookies, you may remove opt-out cookies that affect your advertising preferences that you have set for other websites. For more detail on your ability to opt out, see Use of Cookies and Other Tracking Technologies above.

Accessing Your Information to Correct or Delete. If you have an account with InPlay, you may review and change the information contained within your profile by logging into your account and editing your profile. Be advised that we may not be able to delete your personal information without also deleting your user account. You will not be permitted to examine the personal information of any other person or entity and may be required to provide us with personal information to verify your identity prior to accessing any records containing information about you. We may not accommodate a request to change or delete personal information if we believe doing so would violate any law or legal requirement, or cause the information to be incorrect. If you you have any questions about this Privacy Policy or would like to request that InPlay delete your personal information, you may email such request to InPlay at legal@inplay.org and we will assist you with the process.

To make any changes, updates or deletions of your personal information stored by the School District or Agency, please contact the District/Agency directly.

How Can We Transfer Your Personal information?

Your information collected through the Services may be stored and processed in the United States or any other jurisdiction where InPlay or its service providers maintain facilities. InPlay and its service providers may transfer information that we collect about you, including personal information, across borders and from your country or jurisdiction to other countries or jurisdictions around the world. If you are located outside the United States or in other regions with laws governing data collection and use that may differ from U.S. law, please note that we may transfer information, including personal information, to a country and jurisdiction that does not have the same data protection laws as your jurisdiction. By using the Services you consent to the transfer of information to the United States and the use and disclosure of information about you as described in this Privacy Policy.

How Long Do We Keep Your Information?

Following termination or deactivation of your account, InPlay or its service providers may retain information (including your profile and personal information) for a reasonable time for backup, archival, recordkeeping, audit, and any other lawful purposes. If you have any questions about termination or deactivation of your account, please contact us directly at legal@inplay.org.

We will not retain student personal information for any longer than is necessary to provide you with the Service or for legal obligations. If a school district or government agency contracts with InPlay and shares student data to help facilitate easier program registration, we will delete your personal information at the end of the service contract.

We do not use information (including persistent unique identifiers) created or collected by the Service, website, online service, or mobile application for the purpose of creating a profile about your student, except in furtherance of K-12 school purposes.

What Happens When I Link To or From Another Site?

The Services may contain links to other websites and applications operated by third parties. Please be advised that the practices described in this Privacy Policy for InPlay do not apply to information gathered through these other websites and applications. We are not responsible for the actions and privacy policies of third parties and other websites and applications.

Governing Law

The Services are published in the United States. Our Services are located and targeted to individuals located in the United States and our policies are directed at compliance with those laws. If you are uncertain whether this Privacy Policyconflicts with the applicable local privacy laws where you are located, you should not submit your personal information to InPlay.

Changes to This Privacy Policy

As our Services continue to develop, we may add new services and features. In the event that these additions affect ourPrivacy Policy, this document will be updated appropriately. We will post those changes to this location and indicate the date of the latest revision. We will also email a notification to participating School Districts or Agencies 30 days in advance of the changes.

If you have any questions about this Privacy Policy or don’t see your concerns addressed here, you should contact us by email at legal@inplay.org, telephone 650-246-9976, or by mail at InPlay, 55 E. Third Avenue, San Mateo, CA 94401.

All rights reserved.