Last Updated: May 17, 2023
At Creyo Co. DBA Messier (“Messier” “we”, “us”, or “our”), we care about your personal data, so we have prepared this Privacy Policy to explain how we collect, use and share it.
This Privacy Policy (“Privacy Policy”) explains how Messier collects, uses, and discloses information about you when you access or use our website, mobile application, and other online products and services, and when you contact our customer service team, engage with us on social media, or otherwise interact with us (collectively, the “Service”), regardless of your subscription or account type.
This policy does not apply to subscription eligibility information we receive from and process on behalf of our enterprise business customers and partners.
Additional information for individuals in the EEA, UK, and Switzerland, as well as for California residents, can be found at the end of this Privacy Policy.
We may change this Privacy Policy from time to time. If we make changes, we will revise the date at the top of the Policy and, in some cases, we may provide you with additional notice (such as adding a statement to our website homepage or sending you a notification). We encourage you to review the Privacy Policy whenever you access the Service to stay informed about our information practices and your rights and obligations in relation to your personal data.
We collect information when you register for an account, participate in interactive features, fill out a form or a survey, participate in a contest or promotion, make a purchase, communicate with us via social media sites, request customer support, or otherwise communicate with us. The information you provide may include your name, email address (or parent’s e-mail address), age, date of birth, street address, password, payment method information, information you provide when using interactive features, feedback and survey responses, and other information about you included within your messages to us or otherwise provided via the Service.
Other Information About Your Use of the Services
When you use the Service, we may collect the following information about you:
We may also obtain information about you from other sources, including transaction information from third-party app stores you use to install our app or purchase a subscription, and name and contact information from third-party calendar services. Additionally, if you create or log into your account through a social media service account, we will have access to certain information from that account, such as your name and other account information, in accordance with the authorization procedures set by that social media service. Finally, we may obtain information about you from publicly available sources, marketing and advertising partners, consumer research platforms, and/or business contact databases.
We may use the information we collect to:
We may share information about you as follows and as otherwise described in this Privacy Policy or at the time of collection:
We also share aggregated or other information not subject to obligations under the data protection laws of your jurisdiction with third parties. For example, we sometimes share aggregate information with research organizations to help facilitate their research.
We may allow others to provide analytics services or to deliver advertisements across the web and in mobile applications. These entities may use cookies, web beacons, device identifiers and other technologies to collect information about your use of the Services and other websites and online services, including your IP address, device identifiers, web browser, mobile network information, pages viewed, time spent on pages or in apps, links clicked, and conversion information. This information may be used by Messier and others to, among other things, analyze and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests on our Services and other websites and online services, and better understand your online activity. For more information about interest-based ads, including to use ad industry tools to opt out of having your web browsing information used for behavioral advertising purposes, please visit www.aboutads.info/choices (if you are in the EU, please visit www.youronlinechoices.eu/). Your mobile device should also include a feature that allows you to opt out of having certain information collected through apps used for behavioral advertising purposes.
Messier is based in the United States and processes information in the United States, which may not provide equivalent levels of data protection as your home jurisdiction.
You may update certain account information you provide to us (such as your password, name and email address) by logging into your account or contacting us through our Help Center at help@Messier.app. If you wish to disable your account, please contact us at help@Messier.app, but note that we may retain certain information when required or permitted by law. We also retain cached or archived copies of information about you for a certain period of time.
You may opt out of receiving promotional emails from Messier by following the instructions in those emails or by logging into your account. If you opt out, we may still send you non- promotional emails, such as those about your account or our ongoing business relations.
With your consent, we send promotional and other push notifications to your mobile device. You can deactivate these messages at any time by changing the notification settings on your mobile device.
The sections below apply to you if you use our Services while in Switzerland, the United Kingdom or the European Economic Area (collectively, “Europe”). Messier is the data controller for personal data governed by this Privacy Policy.
When we process your personal data we will only do so in the following situations:
We retain personal data for no longer than is necessary for the purposes for which it is processed, unless applicable law requires storage for a longer period of time.
Subject to certain limits and conditions provided under law, you have the following rights:
If you would like to exercise any of these rights and cannot do so directly via the Services or your device, you may contact us as indicated below.
This section provides additional disclosures required by the California Consumer Privacy Act (or “CCPA”).
Please see the chart below for a list of the personal information we have collected about California consumers in the last twelve (12) months, along with our business and commercial purposes and categories of third parties with whom this information may be shared. For more details about the personal information we collect, including the categories of sources, please see the “Collection of Information” section below.
Subject to certain limitations and exceptions, the CCPA provides California consumers the right to request to know more details about the categories and specific pieces of personal information, to delete their personal information, to opt out of any “sales” that may be occurring, and to not be discriminated against for exercising these rights.
We do not “sell” the personal information we collect (and will not sell it in the future without providing a right to opt out). We may allow our advertising partners to collect certain device identifiers and electronic network activity via our Services to show ads that are targeted to your interests on other platforms. To opt out, you can adjust your mobile device settings to limit ad tracking via the mobile app.
California consumers may make a rights request by emailing us at [email]. Consumers can also designate an authorized agent to exercise these rights on their behalf. Authorized agents should submit requests through the same channels, but we will require proof that the person is authorized to act on your behalf and may also still ask you to verify your identity with us directly.
In the future, we may offer financial incentives. For example, we may provide incentives to customers who participate in a survey or provide testimonials. When you participate in a financial incentive, we collect personal information from you, such as identifiers (like your name and email address) and information about your experiences using our Services. You can opt into a financial incentive by following the sign-up or participation instructions provided. In some cases, we may provide additional terms and conditions for a financial incentive, which we will provide to you when you sign up. The value of your personal information is reasonably related to the value of the offer or discount presented to you.
Messier is committed to children’s privacy, and our Service is developed in compliance with the Children’s Online Privacy Protection Act (“COPPA”). This section provides additional information about how we collect, use, and share personal data from children under the age of 13 (a “Child” or “Children”).
Messier requires parent permission from a Child User to create an account and access the Service. When Messier is used by a school in an educational setting, we rely on the school to provide the requisite consent, on behalf of the parent, for Messier to collect information from a student under the age of 13 (see School & Student Use section for more information).
Child Users must have parent or school consent to sign up for a Messier account.
Messier does not knowingly permit Children to create an account without the consent of a Parent or School. If Messier learns that personal information of a Child user has been collected without requisite consent, Messier will take appropriate steps to delete this information. If you are a Parent and discover that your Child under the age of 13 has created an account on our Service without consent, please contact us.
When a Child User account is created by a School in an educational setting, we permit the School to provide requisite consent, on behalf of the Child User’s parent, for Messier to collect personal information of a Child User. Schools may create a Child User account by adding students to the Service through Single Sign On service such as Google Classroom, Clever, GG4L, or ClassLink; providing a link or class code to join a class, or creating user accounts and passwords for each individual student.
A Child User registering for a Messier account will be prompted during registration to request parental consent by entering an adult’s email. Parents must provide consent for the Child User to use the Service through a Restricted Account by responding affirmatively to an email sent by Messier. If Messier does not receive consent from the Parent (or confirmation that the account is a School Account) within 7 days, the Child’s User Account will be closed and the Child’s personal information will be deleted from our systems. Restricted Accounts may access and use certain features of the Service in a limited manner.
To enable functionality for the Child User account, the Parent must create a “Parent Acount” and connect it to the Child User’s account. Parent Accounts control the settings and functionality of the Child User’s account. The Parent can maintain the Child’s Restricted Account, and can enable additional account functionality and features, if desired. Parents can revoke a Child User’s permissions to use the Service at any time by deleting the account. In some cases, administrative controls including the ability to modify or delete the account, are held by the School.
As a Parent, you have the ability to access and control information about your Child User in the “Your Children” section of your Parent Account. To refuse future collection or use of your child’s personal information, you can delete your Child User’s Account in your Settings menu. Please note, you must delete your Child User’s account before you delete the Parent Account.
If you do not have a Parent Account associated with your Child User’s Restricted Account, you may contact us to access or delete the Child User’s account. Please note you will need the Child User’s username, and we may take steps to authenticate your identity before we can provide access to the Restricted Account.
In some cases, administrative controls (including the ability to modify or delete the account), are held by the School and you will need to direct your request to the School (see Schools and Student Use).
Messier attempts to restrict a Child User’s access to certain features that could result in disclosure of the Child’s personal information. A Restricted Account limits sharing and displaying private information about the Child User in various ways.
For example, a Child User with a Restricted Account cannot:
We collect a username, birthdate, and Parent’s email address when a Child User registers for the Service, as well as any other personal information a Parent adds to a Child User’s account, as described above. We collect information about the Child User’s use of the Service (lessons completed, content viewed). We also collect usage and device information, as described in our “Information We Collect” section above. We use this information to provide the Service and for the purposes described above in the “Use of Information” section. We use the Parent’s email address to communicate messages about the account.
As described above, Restricted Accounts have limited information-sharing capabilities. A username and lesson progress information, along with any personal information the Parent has added to the Child’s profile, is associated with the account.
Parents may also enable additional information-sharing features through a Parent Account, for example, by adding profile information and permitting the profile to be shared with instructors and other users, or enabling the Child User to post content to the Service. Parents that enable content-posting features should be aware that a Child User could post personally identifiable information in free-form content on the Service, and should monitor the Child User’s posts and delete personal information if needed. We may also disclose personal information of Child Users for business purpose, as described in Sharing and disclosure of information.
Messier does not display any targeted advertising on the Service. We do not disclose personal information of Child Users for direct marketing purposes or for targeted advertising purposes.
This Section supplements our Privacy Policy in connection with school use. Messier has implemented additional procedures and controls for schools, school districts, and teachers (collectively, “Schools”) when they use the Service for educational purposes. When the Service is used as part of the School’s educational program, the personal information related to the School’s student users (“School Users”) may include information defined as “educational records” by the Family Educational Rights and Privacy Act (“FERPA) or other information protected by similar student data privacy laws. We refer to this information as “Student Personal Data”). This Student Personal Data may also include data regulated as Children Users’ Data under COPPA (see Children’s Privacy section above).
Our collection and use of Student Personal Data is governed by our contracts with Schools, by our Privacy Policy, and by applicable privacy laws. For example, we work with Schools to protect Student Personal Data consistent with FERPA and, for School Users under 13, the Children’s Online Privacy Protection Act (“COPPA”). If you have any questions about reviewing, modifying, or deleting the personal information of a School User, please contact your School directly.
In order for School User Accounts to be associated with a School, the accounts must be created by or at the direction of a School, using a school email address, and associated with a School’s class on the Service. For example, a School Account is created when:
In cases where we do not have a separate contract with a School district or educational agency, we may require notification that the accounts are used for school purposes in order to recognize them as School Accounts. If you are a School, please contact us to learn more about how to ensure that student accounts are set up and managed as School Accounts.
We disclose Student Personal Data in the manner described above under Sharing of Information.
We may also share information with other users on the service, including instructors or School administrators.
Depending on the manner in which Messier is used by a School and the terms of agreement between the School and Messier, Messier may provide the school with access to certain Student Personal Data, School Account usage information, and teacher user account usage information for educational purposes, such as monitoring student activity and evaluating the effectiveness of the School’s use of the Service. Messier may also provide Schools with access to Student Personal Data, Student usage information, and teacher usage information in response to a School’s request.
Messier does not use, disclose, or compile Student Personal Data of School Users on the Service for the purpose of marketing or advertising commercial products or services, including targeted advertising.
We will not knowingly retain Student Personal Data beyond the time period required to support an educational purpose, unless authorized to do so by a School, student or Parent. Many of our users continue to use their accounts for a personal, non-School purpose and choose to associate their accounts with a personal account or the account of their Parent. In such cases, the user (or the user’s Parent) is responsible for account deletion requests.
Users with personal accounts (or their Parents) can delete their accounts and personal information associated with the account at any time through account Settings. Please contacts us at info@messier.co for more help.
In some cases, depending on the terms of agreement between the School and Messier, School Users (or their Parents) may not be able to delete accounts through account Settings, and deletion requests may need to be referred to the School.
The School is responsible for managing Student Personal Data in accounts that the School no longer needs for an educational purpose by submitting a deletion request. We may request further information from you to verify the authenticity of a deletion request. If a School User has associated their School Account with a personal account, the School User’s learning activity may be retained in a personal account.
If you have questions about specific practices relating to Student Personal Data provided to Messier by a School, please direct your questions to your School.
If a student provides information to Messier independent of the student’s use of the Service at the direction of the School, that information is not considered Student Personal Data. For example, if a user links their existing personal account to their School Account, or elects to retain their Messier activity in a personal account, the information associated with the personal account is not considered Student Personal Data, and this section does not apply.
If you have any questions about this Privacy Policy, please contact us at info@messier.co.