Khan Academy is a free online education platform operated by Khan Academy Inc., a US 501(c)(3) nonprofit organization headquartered in Mountain View, CA (EIN 26-1544963, IRS exemption ruling 2008), whose public IRS Form 990 filings (via ProPublica Nonprofit Explorer) report roughly $98M in FY2023 revenue funded primarily by contributions and grants. The flagship khanacademy.org website is a fully client-rendered single-page app that serves no policy text to a non-browser fetch, so the primary-source spine here is Khan Academy Kids' privacy policy (last updated December 28, 2023), published by the same nonprofit entity, which states the organization does not sell personal information, was structured as a nonprofit specifically so its education mission would not conflict with a for-profit/ad motive, minimizes PII collection at registration, and does not display advertising inside the app. The policy discloses routine sharing with vendors/service providers and with other companies "in the Khan Academy family," names a third-party integration (Clever) for school account creation, and states Khan Academy does not track users across other sites/apps from within the app but does use third-party ad companies (including Facebook) to advertise the app itself elsewhere on the web; the same page also loads a first-party Google Tag Manager container and a OneTrust consent-management script. The Apple App Store privacy label for the Khan Academy app shows only Usage Data linked to identity (for Analytics/Product Interaction/Personalization/App Functionality), with Contact Info, Search History, Identifiers, and Diagnostics collected but not linked to identity, and lists no "Data Used to Track You" category. No FTC, state-AG, or breach action naming Khan Academy was found in a limited search.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
17 ON FILE
COLLECTION
The Apple App Store privacy label for the Khan Academy app discloses that data linked to the user's identity is limited to Usage Data, used for Analytics, Product Interaction, Product Personalization, and App Functionality purposes — with no advertising-linked purpose listed for identity-linked data.
As assessed by PrivacySpy on 2021-08-24 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the service collect personal data from third parties? — Yes.
Khan Academy Kids' privacy policy states the app's registration process was specifically designed to minimize collection and use of personally identifiable information, and that for school-created student accounts it recommends using a nickname or the child's first name only rather than their real name.
The service's policy indicates your personal data may be sold or otherwise transferred as part of a bankruptcy proceeding or other type of financial transaction.
ProPublica Nonprofit Explorer's registry record for "Khan Academy Inc" (sourced from IRS data) lists EIN 26-1544963, an IRS tax-exemption ruling date of 2008-05-01, and 501(c)(3) subsection code 3, headquartered in Mountain View, CA; filed Form 990 data for the FY2023 period reports total revenue of roughly $98.3 million and total assets of roughly $136.3 million.
As assessed by PrivacySpy on 2021-08-24 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the policy outline the service's general security practices? — Yes.
As assessed by PrivacySpy on 2021-08-24 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the policy allow personally-targeted or behavioral marketing? — No.
Khan Academy Kids' privacy policy states it does not rent or sell personal information to third parties for their own purposes without consent, and limits sharing to enumerated circumstances including contractually-bound vendors/service providers and other entities within the "Khan Academy family of companies."
As assessed by PrivacySpy on 2021-08-24 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the policy require users to be notified in case of a data breach? — Yes, eventually.
Khan Academy Kids' privacy policy commits that, in the event personal information under its control is compromised by a security breach, it will investigate and notify affected users in accordance with applicable laws and regulations — a standard policy commitment rather than a published incident, audit, or bounty record.
Khan Academy Kids' privacy policy states the company does not track users across other websites or mobile apps from within the app, but discloses it uses third-party advertising companies, including Facebook, to serve targeted ads promoting the app on other sites and services; the same fetched page also loads a first-party Google Tag Manager container.