Data Transparency

Overview

Mello is committed to being transparent with how we handle your information, in full compliance with local, national, and international laws like GDPR, COPPA, FERPA, and others.

This document outlines what information we collect, why and how we collect it, where it's stored, and how it differs across user types on our platform.

User Types

Our platform serves several types of users:

  • Teacher: Educators using Mello in their classroom
  • Student: Children enrolled in classes using Mello
  • Parent: Parents or guardians connected to students
  • School Leader: School administrators and leaders
  • Logged-out Users: Visitors to our website not logged into an account
  • Outside School User: Users using Mello outside a school context

Information We Collect

Personal Information

Information TypeUser TypesCollection MethodPurposeStorage Location
First and Last NameAll usersDirect input on website/app, teacher input for students, surveys, customer serviceEstablishing identity within school communityAWS (US), MongoDB Atlas (US), Zendesk (US), SurveyMonkey (US)
Email AddressTeachers, Parents, School LeadersDirect input on website/app, surveys, customer serviceAccount identification, communicationsAWS (US), MongoDB Atlas (US), Zendesk (US), SurveyMonkey (US)
Phone NumberTeachers, Non-logged-in usersDirect input for invitations, optional in support requestsSending SMS invitations, support contactAWS (US), MongoDB Atlas (US), Zendesk (US), SurveyMonkey (US)
UsernameStudentsDirect input during registrationAccount accessAWS (US), MongoDB Atlas (US), Zendesk (US)
PasswordAll usersDirect input during registrationAccount securityAWS (US), MongoDB Atlas (US)
AgeStudentsInput during account creationCOPPA complianceAWS (US), MongoDB Atlas (US)
Gender/TitleTeachers, Parents, School LeadersInput during account creationProper identification in communicationsAWS (US), MongoDB Atlas (US)

School Information

Information TypeUser TypesCollection MethodPurposeStorage Location
School NameTeachers, School LeadersDirect input during signupCreating connections within school communityAWS (US), MongoDB Atlas (US), SurveyMonkey (US)
School AddressTeachers, School LeadersDirect input during signupEnsuring users connect to correct schoolsAWS (US), MongoDB Atlas (US)
School District IDNot collected from usersThird-party service (MDR Education)Improving school database qualityAWS (US), MongoDB Atlas (US)

Automatically Collected Information

Information TypeUser TypesCollection MethodPurposeStorage Location
Mobile Device IDAll logged-in usersAutomatic collection from devicesProduct improvement, diagnosticsAWS (US), Crashlytics (US)
IP AddressAll usersServer requestsService delivery, securityAWS (US), MongoDB Atlas (US), DataDog (US)
Geolocation (Precise)Teachers, Parents, School LeadersDuring account creationSchool search functionalityAlgolia and AWS Elastic Search (US)
Browser DetailsAll usersWeb and mobile clientsBrowser-specific optimizationsAWS (US), MongoDB Atlas (US), DataDog (US), Google Analytics (US)
Usage Data (page views, clicks, etc.)All usersWebsite/app usageProduct improvementAWS (US), MongoDB Atlas (US), DataDog (US), Google Analytics (US)
Language InformationAll usersDevice settings, browser settings, user selectionProviding service in preferred languageAWS (US), MongoDB Atlas (US)

Content and Activity Data

Information TypeUser TypesCollection MethodPurposeStorage Location
Photos, Videos, Documents, AudioAll logged-in usersProduct features (messaging, portfolios, etc.)User communication, student work sharingAWS (US), MongoDB Atlas (US)
Feedback PointsTeachersProduct featureStudent feedbackAWS (US), MongoDB Atlas (US)
Student AttendanceTeachersProduct featureClass managementAWS (US), MongoDB Atlas (US)

Data Sharing and International Transfers

Third-Party Service Providers

We share certain information with these third-party providers:

  • Sendgrid (US): For email communications
  • Zendesk (US): For customer service
  • SurveyMonkey (US): For surveys
  • DataDog (US): For monitoring and analytics
  • Google Analytics (US): For website analytics
  • Crashlytics (US): For app crash reporting
  • Algolia (US): For search functionality

International Transfers

Most data is transferred to and stored in the United States. For European Economic Area (EEA) users, we ensure appropriate safeguards for your data in accordance with GDPR requirements.

The legal basis for processing your information under GDPR depends on the specific data and user type:

  • Legitimate interest and performance of contract: For most basic user data
  • Consent: Where specifically required by law
  • Processing as data processor: Where Mello acts as a processor and the school/organization is the controller

Your Rights

Depending on your location, you have rights regarding your personal data, including:

  • Access to your data
  • Correction of inaccurate data
  • Deletion of your data
  • Restriction of processing
  • Data portability

To exercise these rights, please contact us at privacy@mello.life.