ANU Discovery - Privacy Policy

ANU Discovery ("ANU", "we", "our" or "us") is an educational platform that enables children to explore and create cultural connections with their heritage. The platform is operated by Beit Hatfutzot – The Museum of the Jewish People. We operate the website www.anudiscovery.com  its subdomains and its related features (“Website”, collectively referred to as the “Services”). This privacy policy is integrated into and forms part of our Terms of Use [link] ("Terms").

At ANU and Beit Hatfutzot, we understand the importance of protecting the privacy of our users, particularly children under the age of 13 ("Children"). We are committed to protecting Children's privacy in compliance with the Children’s Online Privacy Protection Act ("COPPA") and other applicable laws.

This Privacy Policy (“Policy”) explains what information we collect, how we use it, and the measures we take to keep it secure. It also describes the rights of parents or legal guardian (collectively “Parent(s)”) regarding their Children’s Data and the processes we use to obtain verifiable parental consent. We will only collect and process Children's data, as explained below, in accordance with a verifiable parental consent ("VPC").

We strongly urge you to read this Policy and make sure that you fully understand and agree to it. If you do not agree to this Policy, please discontinue and avoid using our Services.

Specifically, this Policy describes ––

1. Types of data we collect

2. Purposes of processing Personal Data

3. How we disclose Personal Data

4. Retention of Personal Data

5. How we protect Personal Data

6. Rights of data subjects

7. Updates to this Policy

8. Contact us

We collect certain types of information which could lead to the identification of a specific individual (collectively "Personal Data" or "Data"). Specifically, we collect Personal Data from two main categories of individuals:

​

Children

Account Information 

First name, last name, username, and class ID provided during account setup by the school or teacher.

Activity and Use Data

Engagement metrics such as completed quizzes, milestones, time spent using features and earned rewards; IP address and general location Data.

Preferences and Interests

Data shared during onboarding to personalize the learning experience.

Family Details

Names of family members, regions of origin, and cultural traditions, collected through features like family tree creation.

If we discover that we have mistakenly collected Personal Data from a Child without a VPC, we will delete the Data immediately, or disable the Child’s account to prevent further Data collection.

​

Parents

As part of obtaining a VPC, we collect the following: Parent's full name, email address, phone number (optional), and the parent's child name.

Non-Personal Data

We may also collect certain non-Personal Data, such as device type, operating system, browser details, and other technical information, which, when combined with other Data, could be considered Personal Data under applicable laws. We will treat the combined data as Personal Data.

We process the Personal Data for the following purposes:

Provision of our Services

We collect and process Personal Data to create accounts, provide the learning experience including without limitation, enable educational features such as family tree creation, generate progress reports, and personalize the platform's content.

Compliance with COPPA and assistance to law enforcement agencies

We process Personal Data to comply with legal obligations, including obtaining and maintaining VPC as required under COPPA. We may also process Personal Data as required by other applicable laws, such as complying with a lawful request by public authorities, including meeting law enforcement requirements.

Security of our Services

Certain Personal Data may be processed to maintain the safety of our platform, including preventing unauthorized access and fraud and ensuring a secure and safe environment for users.

Improvement of our Services

We collect and analyze Personal Data to enhance quality, functionality and effectiveness of our Services, to conduct debugging and perform usability research.

Performance and Enforcement of our Policy

We process Personal Data, such as user account activity and interactions with our Services, for assuring the ongoing performance of the Service and enforcement of our Privacy Policy and Terms of Service.

De-Identified and Aggregated Insights

Personal Data may be de-identified or aggregated for analytics, service improvement, and research purposes. No identifiable Personal Data is used for these purposes without parental consent.

We share Personal Data only when necessary, ensuring compliance with legal requirements and platform integrity.

Recipient

​

Schools or Teachers

Type of Personal Data shared - Identifiers, such as usernames, progress Data, and class IDs.

Purpose of disclosure - Monitoring student activity and facilitating educational oversight.

​

Service Providers

Type of Personal Data shared - Internet or other electronic network activity on user's interaction with our Services.

We may also share different aggregated Data that is anonymized.

Purpose of disclosure - The purpose of disclosure is supporting the platform's operations, ensuring secure Data storage, and providing customer service. Aggregated Data is shared for research or improvement of the platform’s functionality.

Legal and Governmental Entities

Type of Personal Data shared - Data necessary to comply with valid legal processes such as subpoenas, court orders, or regulatory inquiries.

Purpose of disclosure - The purpose of disclosure is meeting legal obligations, protecting user safety and our rights, and assisting in investigations or prosecutions of unlawful activities.

We do not share user's Data with advertisers or use it for marketing purposes.

​

All third-party entities we engage with are contractually obligated to maintain confidentiality and security standards and implement appropriate security measures to protect Personal Data.

Data Shared by the User

Users of the Service may have the option (subject to the extent of the VPC) to share "albums" from the Service with an external recipient, via email. Please note that we do not monitor or restrict the email addresses being entered in the Service. The shared content includes data from the album, which includes:

1. Family Tree

2. Birth date

3. Family’s countries of origin

We retain Personal Data for as long as needed to provide our Services, and after that, as necessary to comply with our legal obligations, resolve disputes, and enforce our rights and agreements.

We have implemented administrative, technical, and physical safeguards to help prevent unauthorized access, use, or disclosure of Personal Data. However, we note that there is always some risk involved in transmitting information over the internet and that there is also some risk that others could find a way to thwart our security systems. If you have reasons to believe that Personal Data has been access or used in an unauthorized manner or not in accordance with this Policy, please contact us directly via our contact details available below

Parents have specific rights regarding their Children’s Data:
Right to Access: a right to access and review Personal Data collected about the Parent's Children.
Right to Request Corrections: a right to update inaccurate or incomplete information regarding Children.
Right to Deletion of Data: a right to request the deletion of a Child’s account and associated Data.
Right to Withdraw Consent: a right to revoke consent at any time, preventing further collection or use of Child's Data.
 
To exercise these rights, please contact us at discovery@anumuseum.org.il. We aim to process all parental requests in a reasonable timeframe as required by law.

We may update this Privacy Policy to reflect changes in our practices or legal requirements. The latest version will always be available on our website. Continued use of the platform indicates agreement to the updated policy.

If you have questions about this policy or wish to exercise your rights under COPPA, you can contact us at: discovery@anumuseum.org.il or Klausner St 15, Tel Aviv-Yafo, 6139202, Israel.