GenAgent Trust Hub
Menu

Khan Academy

DTier DMedium risk · 38/100
  • The documents do not say whether your data trains AI.
  • Your data is used to target ads at you; you can opt out.
  • Data is shared only with the providers who run the service.
  • The documents do not say who can read your content.

Nonprofit learning site: no data sale or third-party ads, but a broad content license, and AI disclaimers.

Highest riskMedium riskLow risk

Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.

Privacy policy · January 30, 2026 ↗Terms · March 27, 2026 ↗18 min read · college level27 lines verified word for word

Collected

What is collected

Account info, birthdate, device details, general location, learning activity, and what you type or post.

Read the exact line

Privacy policy

“Examples of information we may collect include: • Account registration information (username, birthdate, and email) • Information about your browser or device, and general location”

Training

How it is used

They use it to run the site, personalize learning, email you, and improve and research their education tools.

Read the exact line

Privacy policy

“Khan Academy uses information collected for the purposes of: • providing the Service • personalizing your experience • communicating with you about your account and our Service”

Sharing

Who may see it

They say they do not sell your data; vendors, parents, teachers, schools, and apps you connect can see it.

Read the exact line

Privacy policy

“We do not sell your personal information to third parties. This section explains circumstances in which we may disclose personal information with third parties.”

Kept

How long it is kept

They keep it while they think they need it for your account, school, legal, or business reasons.

Read the exact line

Privacy policy

“Our practice is to retain your personal data only for as long as necessary to provide our services to you, including maintaining your account on Khan Academy.”

Controls

Your controls

You can limit optional info, emails, and coaches, and update or delete your account in settings.

Read the exact line

Privacy policy

“If you register and provide Khan Academy with information, you may update, correct, or delete your account and information at any time by reviewing your profile information and preferences on your account settings page.”

Fine print

The fine print

They can close you without notice, and you may have to pay their legal bills.

No exact line could be verified.

Expand “Read the exact line” to see the source alongside the explanation.

What you can turn off

The controls and opt-outs their own documents describe, and where they say to find them.

  1. Update or delete your account in settings

    Account settings page (profile information and preferences)

  2. Limit targeting cookies

    Cookie Preference Center / Cookies Settings on the site

  3. Do not put personal facts in Khanmigo

    AI-Enabled Features / Khanmigo inputs (Terms section 10.3.6)

  4. Contact privacy for rights requests

    email the Privacy team or mail Khan Academy, PO Box 1630, Mountain View, CA 94042

If a switch is not where they say, the deletion request above still applies.

Line by line

The lines that matter most, worst first.

1 · How it is used

They get a lasting right to use what you post and what the AI makes, even after you leave, unless privacy law says otherwise.

Read the exact line

Terms of service

“Such license is and , except to the extent required to comply with Applicable Privacy Law relating to ownership and control of your personal information, including education records.”

For example, a story you typed into Khanmigo could still be used to run or improve the service after you delete your account.

2 · The fine print

They can shut your account without warning if they think you broke the rules.

Read the exact line

Terms of service

“you agree that, to the full extent permitted by law, (i) any termination of your access to the Services or any account you may have (or portion thereof), may be affected without prior notice”

For example, you could lose access to your progress overnight and not get a heads-up email first.

3 · The fine print

If someone sues them because of how you used the site or what you posted, you may have to pay their legal costs.

Read the exact line

Terms of service

“you will , and defend, and Khan Academy, and its parent, successors, affiliated companies, contractors, officers, directors, employees, agents and its third party suppliers”

For example, if a homework answer you posted causes a copyright fight, they can make you cover their lawyers.

4 · How it is used

They tell you not to put real names or private facts into Khanmigo because the AI is not meant to handle that.

Read the exact line

Terms of service

“YOU ARE ADVISED NOT TO (AND YOU MUST INSTRUCT YOUR AUTHORIZED USERS NOT TO) INCLUDE ANY PROPRIETARY OR PERSONALLY IDENTIFIABLE INFORMATION IN INPUTS SUBMITTED TO ANY AI-ENABLED FEATURE.”

For example, typing your full name and school into the tutor chatbot is something they warn against.

5 · How it is used

For school AI tools, they say the outside AI companies are not allowed to train on what students type.

Read the exact line

Privacy policy

“To provide further privacy assurances, our service agreements with the providers of artificial intelligence models used to power our AI-Enabled Features do not permit the providers to use Input data to train their models.”

For example, a school Khanmigo chat should not be used by the model vendor to train its public chatbot.

6 · How it is used

They promise not to sell your personal information.

Read the exact line

Privacy policy

“We do not sell your personal information to third parties. We established Khan Academy as a nonprofit organization so that our mission of education and your trust will not be in conflict with a for-profit motive.”

For example, they say they will not sell your email list to a tutoring company.

7 · How it is used

You should not see ads from other companies on the main site.

Read the exact line

Privacy policy

“Khan Academy does not display third party advertisements on our Service.”

For example, a math video should not be followed by a sneaker ad from an outside advertiser.

8 · How long it is kept

They say they encrypt your data on their servers and when it travels over the internet.

Read the exact line

Privacy policy

“We encrypt your personal information when it is stored at rest • We protect your personal information with encryption during transmission over the public Internet”

For example, your password and progress should be stored and sent in encrypted form.

9 · The fine print

If they mess up, they usually will not pay more than $100 or what you paid in the last year.

Read the exact line

Terms of service

“IN NO EVENT WILL THE KHAN ACADEMY PARTIES' TOTAL TO YOU, FOR ALL DAMAGES, LOSSES, AND CAUSES OF ACTION ARISING OUT OF OR RELATING TO THE TERMS, YOUR USE OF ANY KHAN ACADEMY OFFERING, OR YOUR INTERACTION WITH OTHER USERS (WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), , OR OTHERWISE), EXCEED THE GREATER OF ACTUAL AMOUNT PAID BY YOU TO KHAN ACADEMY, IF ANY, DURING THE TWELVE MONTHS IMMEDIATELY PRECEDING THE DATE OF THE CLAIM OR ONE HUNDRED DOLLARS ($100).”

For example, if a free account lost years of progress, their written cap is one hundred dollars.

Words to know

Legal words from the lines above, in plain English.

sell or share
Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
personal data
Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
third parties
Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
retention
How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
perpetual
Lasting forever, with no end date. For example, a perpetual licence means the company can keep using your video years after you leave.
irrevocable
Cannot be taken back or cancelled once given, even if you change your mind or delete your account. For example, an irrevocable licence to your photos means you cannot withdraw it later.
indemnify
You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
affiliates
Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
service providers
Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
inputs and outputs
Inputs are what you type, say or upload to an AI; outputs are what it gives back to you. For example, the question you ask a chatbot is an input and its answer is an output, and both may be stored.
limitation of liability
A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
warranty
A promise that a product will work as described; most apps say they make no such promise at all. For example, if a paid feature never works on your phone, a no-warranty clause says that is your problem.
How we got here · grade D · score 38/100 · 15 of 15 policy answers backed by a verified quote · 6 not stated
  • What does the app collect beyond what it needs to work?

    They collect account details, what you post, device and browser info, general location, cookies, and learning activity—not only the minimum to log in.

  • Does it record your voice, face or body, and what happens to that?

    Not stated in the documents.

  • Are your chats and uploads used to train AI models, and is that off by default?

    Not stated in the documents.

  • Can employees or contractors read your conversations, and when?

    Not stated in the documents.

  • Are you profiled or tracked for advertising?

    They do not show third-party ads, but use targeting cookies on adult pages for their own marketing, which you can limit in cookie settings.

  • Do they sell or share your data, and can you opt out?

    They say they do not sell personal information and share it with vendors, schools, parents, and services you choose.

  • What rights do they take over what you type and what the AI makes?

    You keep ownership, but you grant a worldwide, perpetual, irrevocable, sublicensable license to use posts and AI input and output.

  • How long do they keep your data after you delete it, and can you delete it in the app?

    Not stated in the documents.

  • Does it build a lasting memory or profile of you, and can you see, edit or turn it off?

    Not stated in the documents.

  • Do they commit to basic security, and have they leaked data?

    They describe encryption at rest and in transit and general organizational safeguards, not an independent audit.

  • Is there a real age gate, and are teens protected?

    Under-13 users need parent or school consent; age is based on what you (or a parent/school) declare, not a described ID check.

  • Will they tell you when the rules change, and is the policy specific?

    Policies are dated. They post updates and try to notice material changes, but retention times stay general.

  • Can they close your account without warning, and can you get your data out first?

    They may restrict or terminate accounts and remove content without prior notice if they think you broke the rules.

  • If something goes wrong, who pays?

    The service is as-is, liability is capped around $100, and you must indemnify them for claims tied to your use or content.

  • Do subscriptions renew on their own, and can you get a refund?

    Not stated in the documents.

The privacy policy is 4,084 words at a college level (Flesch reading ease 41.6); the terms are 14,310 words at a college graduate level.

Your privacy
has an agent now

Be in control of your online privacy in the AI Era with confidence.

Gen

From Gen, the Company BehindNorton