Privacy Policy
Last updated: 15 September 2025
Introduction
Lily Tech, Inc. d/b/a Lilypad Learning ("Lilypad Learning," "Lilypad," "we," "our," or "us") respects your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website www.lilypadlearning.com, interact with our services, or otherwise engage with us.
This Privacy Policy applies to information we collect through our website, during demos and sales inquiries, and in the course of providing our educational and special education services to schools. By using our website or services, you agree to our collection and use of information as described in this Privacy Policy.
Note: This Privacy Policy does not govern how we process student educational records or evaluation data when providing services to schools. We process such information as a "School Official" under the Family Educational Rights and Privacy Act (FERPA) and in accordance with our contracts with schools and applicable education privacy laws. For information about how we handle student data, please see the "Student Data" section at the end of this policy.
Information We Collect
Information You Provide Directly
We collect information you voluntarily provide when you request a demo or information about our services, create an account on our platform, subscribe to our newsletter or communications, contact us via email, phone, or contact forms, register for webinars or events, or respond to surveys.
This information may include your name, email address, phone number, school or district affiliation, job title, username and password for your account, account preferences, contents of your communications with us, support requests, professional credentials, and areas of interest relevant to our services.
Information Collected Automatically
When you visit our website, we automatically collect certain information through cookies and similar technologies. This includes device information such as your IP address, browser type, operating system, and device identifiers. We also collect usage information including the pages you visit, time spent on pages, clicks, referring sites, and search terms. From your IP address, we may be able to determine your general geographic location at the city or state level.
Information from Third Parties
We may receive information about you from schools and districts when they authorize you as a user, from business partners who provide referrals and introductions, from our service providers such as analytics and marketing platforms, and from public sources including professional directories and school websites.
How We Use Your Information
We use collected information to provide and improve our educational and special education services, communicate with you about services, updates, and support, and to process account registrations and manage user access. With your consent, we send newsletters and marketing communications. We also use your information to respond to inquiries, provide customer support, analyze usage patterns to improve our platform, ensure platform security and prevent fraud, comply with legal obligations, and conduct research and development to enhance our services.
We do not use student data for marketing, advertising, or creating student profiles for non-educational purposes.
How We Share Information
We may share your information with several categories of recipients as necessary to provide our services and operate our business.
Service Providers
We work with trusted third parties who assist us in operating our business, including cloud hosting and data storage providers, email and communication platforms, analytics and performance monitoring tools, and payment processors. We do not store payment card information directly.
Professional Obligations
We share information with schools and districts as required by our service agreements, and with certified psychologists and evaluators who are authorized by schools to provide services. We may also disclose information as required by law or legal process, or when necessary to protect rights, safety, and property.
Business Transfers
In the event of a merger, acquisition, or sale of assets, information may be transferred to the successor entity. Any such entity would be required to honor the terms of this Privacy Policy.
With Your Consent
We may share information for any other purpose when you provide us with explicit consent to do so.
Cookies and Tracking Technologies
We use cookies and similar technologies to:
Remember your preferences and settings
Analyze website traffic and usage patterns
Provide secure authentication
Improve site functionality
You can control cookies through your browser settings. Disabling cookies may limit some website features.
Your Privacy Rights and Choices
Communication Preferences
You can control how we communicate with you. To stop receiving promotional email communications, click the "unsubscribe" link provided in any of our marketing emails. If you prefer not to receive promotional phone communications, inform us directly when we call or reply STOP to any of our promotional text messages. For all marketing communications, you can opt out entirely by emailing privacy@lilypadlearning.com.
Access and Correction
You have the right to access and correct information we have about you. Contact us to request access to your information, correct any inaccuracies, or delete your account. Please note that account deletion may be subject to legal retention requirements.
Cookie Preferences
You can control cookies through your browser settings, including blocking or deleting cookies, receiving notifications when cookies are set, or browsing in private/incognito mode. Keep in mind that disabling cookies may limit some website features.
Data Security
We implement administrative, technical, and physical safeguards to protect your information. This includes encryption of data in transit and at rest, access controls and authentication measures, regular security assessments and updates, employee training on data protection, incident response procedures, and data minimization practices where we collect only what's necessary for our services. While we strive to protect your information, no method of transmission or storage is completely secure.
Data Retention
We retain personal information in accordance with applicable legal requirements. Student data is retained per school district contracts and state education laws. Business records are retained in accordance with federal and state requirements. Data subject to legal holds or investigations is preserved as required by law. Upon termination of services, student data is returned to schools or deleted according to our contractual obligations. Individuals may request deletion of their personal marketing information at any time by contacting us.
HIPAA Compliance
When our services involve the handling of medical or health information that constitutes protected health information (PHI) under HIPAA, we maintain appropriate safeguards to ensure compliance. This includes implementing administrative, physical, and technical safeguards for PHI, executing Business Associate Agreements (BAAs) where required, following minimum necessary access principles, ensuring secure transmission and storage of health information, and maintaining breach notification procedures. It's important to note that most educational records, including psychoeducational evaluations, are governed by FERPA rather than HIPAA when maintained by schools. We work with schools to determine which regulations apply to specific data types.
Data Breach Notification
In the event of a data breach involving personal information, we will notify affected individuals and schools without unreasonable delay, in compliance with all applicable breach notification laws. Schools with designated security contacts will be notified according to our incident response protocol. We maintain cyber liability insurance to help protect affected parties in the unlikely event of a breach.
Children's Privacy
Our website and marketing services are not directed to children under 13. We do not knowingly collect personal information directly from children. If we learn we have collected information from a child under 13 without parental consent, we will delete it.
Third-Party Links
Our website may contain links to third-party sites. We are not responsible for the privacy practices of these sites. Please review their privacy policies before providing information.
Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy and changing the "Last Updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.
Student Data
When we provide services to schools, we may receive student data that includes:
Educational records protected by FERPA
Student evaluation results and reports
Information protected by state student privacy laws
Our Commitments Regarding Student Data
Student data is owned and controlled by schools, not by Lilypad Learning. We use student data solely to provide the educational and special education services contracted by schools. This includes conducting assessments and evaluations, generating reports and documentation, providing results to authorized school personnel, and supporting special education eligibility decisions and services.
We never sell student data or use it for advertising purposes. We don't create profiles of students for non-educational purposes. We maintain comprehensive security measures for student data and comply with FERPA, COPPA, HIPAA (where applicable), and all relevant state laws. Schools may request information about our data practices at any time. We delete student data as directed by schools or in accordance with applicable retention requirements.
Service Provider Role
We process student data as a service provider and "School Official" under FERPA. This means we operate under the direct control of the school, use data only as directed by the school, have a legitimate educational interest in the data we access, and are subject to FERPA's use and redisclosure requirements. We return or delete student data at the end of our service agreement as directed by the school. For New York schools, we maintain data inventories and comply with Education Law 2-d requirements for third-party contractors.
Parent and Student Rights
Parents and eligible students have rights under FERPA to access education records, request corrections to records, and control certain disclosures. To exercise these rights, please contact your school directly. Schools are responsible for managing requests related to student data in our system.
State-Specific Provisions
New York
We comply with New York Education Law 2-d and associated regulations regarding student data privacy and security. New York parents have specific rights regarding student data under state law.
Massachusetts
We comply with Massachusetts student privacy regulations and data breach notification requirements.
Other States
As we expand our services to additional states, we will comply with applicable state student privacy laws. California residents may have additional rights under state law, and we comply with SOPIPA for any California student data we process.
Contact Us
For questions about this Privacy Policy or our privacy practices:
Email: privacy@lilypadlearning.com
Mail: Lily Tech, Inc. d/b/a Lilypad Learning
169 Madison Ave, STE 11255
New York, NY 10016
For student data inquiries, please contact your school or district directly, as they control student records.