Spread Goodness®

An entity of Expect Good Things, LLC

sgc.spreadgoodness.love

LEGAL POLICIES

Effective Date: April 27, 2026

Questions? Contact us at Lisa@spreadgoodness.love

TERMS OF SERVICE

These Terms of Service ("Terms") govern your access to and use of the Spread Goodness® platform, including the web application available at sgc.spreadgoodness.love, and all related services (collectively, the "Service"), operated by Spread Goodness®, an entity of Expect Good Things, LLC ("we," "us," or "our"). By accessing or using the Service, you agree to be bound by these Terms and our Privacy Policy. If you do not agree, please do not use the Service.

In the event of any conflict between these Terms and a fully executed Student Data Privacy Agreement ("DPA") between us and a Local Education Agency ("LEA"), the terms of the DPA shall control.

1. Acceptance of Terms

By accessing or using the Service, you represent that you have read, understood, and agree to be bound by these Terms. If you are accessing the Service on behalf of a school, district, or organization, you represent that you have the authority to bind that entity to these Terms.

2. Eligibility and User Types

The Service is designed for use in K–12 educational settings. The following user types may access the Service:

District Leaders and Administrators: Access is subject to a fully executed Service Agreement and Data Processing Agreement.
Principals and School Site Leaders: May access the Service under a district or school-level agreement.
Teachers and Counselors: May access the Service with school or district authorization.
Students: Students under the age of 13 may access the Service only within an educational setting where the school or LEA has provided verifiable consent on behalf of parents or guardians, consistent with the Children’s Online Privacy Protection Act (COPPA) and as described in our COPPA Policy. The school or LEA acts as the authorized representative under COPPA when the Service is used solely for educational purposes. Students 13 and older may access the Service with school authorization.

Adult users outside of an educational context must be at least 18 years of age.

3. User Accounts

To access certain features of the Service, you may be required to create an account. You agree to provide accurate, current, and complete information and to keep your account information up to date. You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account. Student accounts in K–12 settings are provisioned and managed through the LEA or school.

4. Acceptable Use

By using the Service, you agree to engage in positive, respectful, and lawful behavior consistent with the mission of Spread Goodness®. You agree not to:

Violate any applicable local, state, national, or international law or regulation.
Post, transmit, or distribute harmful, unlawful, threatening, abusive, harassing, defamatory, or offensive content.
Use the Service to bully, harass, or intimidate any person, including other students, teachers, or staff.
Attempt to gain unauthorized access to any portion of the Service or any related systems or networks.
Use the Service for commercial purposes without our prior written permission.
Impersonate any person or entity or misrepresent your affiliation with any person or entity.
Use the Service to collect or harvest personal information about other users without authorization.

5. User Content

The Service allows users to submit acts of kindness, nominations, stories, and other content ("User Content"). You retain ownership of any intellectual property rights you hold in your User Content. By submitting User Content, you grant Spread Goodness® a limited, non-exclusive license to use, display, and distribute your User Content solely for the purpose of operating and improving the Service. We do not use User Content for advertising or to develop user profiles for commercial purposes. Student-generated content is subject to additional protections described in our Privacy Policy, COPPA Policy, and any applicable DPA.

6. Student Data and Privacy

Our collection, use, and protection of student data is governed by our Privacy Policy, our COPPA Policy, and any fully executed DPA with your LEA. In all cases, student data belongs to the student and the LEA, not to Spread Goodness®. We do not sell student data. We do not use student data for targeted advertising. All student data is stored within the United States. For full details, please review our Privacy Policy and COPPA Policy below.

7. Intellectual Property

Spread Goodness® and its licensors retain all rights, title, and interest in the Service, including all content, software, trademarks (including the registered trademark Spread Goodness®), and other intellectual property. Nothing in these Terms grants you a right to use our trademarks, logos, domain names, or other distinctive brand features without our prior written consent.

8. Third-Party Services and Subprocessors

The Service is built on and integrates with third-party infrastructure providers, including Google (Firebase and Google Cloud Platform) and Amazon Web Services (AWS). These providers act as subprocessors and are contractually required to protect data in a manner consistent with our DPA obligations. A current list of subprocessors is available upon request at Lisa@spreadgoodness.love.

9. Disclaimers

The Service is provided on an "as is" and "as available" basis. We make no warranties, express or implied, regarding the Service, including but not limited to warranties of merchantability, fitness for a particular purpose, or non-infringement. We do not warrant that the Service will be uninterrupted, error-free, or free of viruses or other harmful components.

10. Limitation of Liability

To the maximum extent permitted by applicable law, Spread Goodness®, Expect Good Things, LLC, and their respective officers, employees, and agents shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from or related to your use of the Service. Our total aggregate liability for any claims arising out of or relating to these Terms or the Service shall not exceed the greater of (a) the fees paid by you or your LEA in the twelve months preceding the claim, or (b) one hundred dollars ($100).

11. Indemnification

You agree to indemnify, defend, and hold harmless Spread Goodness®, Expect Good Things, LLC, and their respective officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable attorneys’ fees) arising out of or in any way connected with your access to or use of the Service or your violation of these Terms.

12. Changes to Terms

We reserve the right to modify these Terms at any time. We will provide reasonable notice of material changes by posting the updated Terms on our website and updating the effective date. If you are an LEA with a signed DPA, we will notify your designated representative directly. Your continued use of the Service after changes become effective constitutes your acceptance of the revised Terms. If changes are material and you do not agree, you may terminate your account.

13. Termination

We reserve the right to suspend or terminate your access to the Service at our sole discretion, with or without notice, for conduct that we believe violates these Terms or is harmful to other users, us, third parties, or the integrity of the Service. Upon termination, all provisions of these Terms that by their nature should survive termination shall survive, including intellectual property provisions, disclaimers, and limitations of liability. Student data retention and deletion upon termination is governed by the applicable DPA.

14. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the State of California, without regard to its conflict of law provisions. For disputes arising under a DPA with an LEA, governing law shall be as specified in that DPA. Any dispute not covered by a DPA shall be resolved in the state or federal courts located in Santa Barbara County, California.

15. Contact

If you have questions about these Terms, please contact us at: Lisa@spreadgoodness.love | Spread Goodness®, an entity of Expect Good Things, LLC | 1482 E Valley Rd 101, Santa Barbara, CA 93108

PRIVACY POLICY

Spread Goodness®, an entity of Expect Good Things, LLC ("we," "us," or "our") is committed to protecting the privacy of all users of our platform at sgc.spreadgoodness.love (the "Service"). This Privacy Policy describes what information we collect, how we use and protect it, and the rights you have regarding your information. By using the Service, you agree to the practices described in this Privacy Policy.

In the event of any conflict between this Privacy Policy and a fully executed Student Data Privacy Agreement ("DPA") between us and a Local Education Agency ("LEA"), the terms of the DPA shall control.

1. Scope and Users Covered

This Privacy Policy applies to all users of the Service, including district leaders, principals, teachers, counselors, and students. Student data is subject to additional protections described in this Policy, our COPPA Policy, and any applicable DPA. The Service is intended for use in K–12 educational settings in the United States.

2. Information We Collect

Information provided by users or LEAs:

Account information: name, email address, role (teacher, student, administrator, etc.), school or district affiliation, and grade level.
Student identifiers: first name and last initial for students. We do not collect full student last names, dates of birth, addresses, or Social Security numbers unless required by a specific LEA agreement.
User-generated content: acts of kindness submissions, nominations, stories, and journal responses submitted through the Service.
Usage analytics: interaction metadata such as pages visited, features used, time spent, and device/browser type. This data is collected in aggregate and is not used to build individual profiles for advertising purposes.

Information collected automatically:

IP addresses, browser type, device information, and cookies or similar tracking technologies used to maintain session state and improve Service performance. You may adjust your browser settings to refuse cookies, though this may affect certain features.

3. How We Use Your Information

We use the information we collect for the following purposes:

To provide, operate, and improve the Service.
To enable students, teachers, and administrators to participate in the kindness recognition features of the platform.
To send transactional communications, including nomination notifications and account-related emails, via Amazon Web Services Simple Email Service (SES).
To ensure platform security and prevent fraud or abuse.
To generate de-identified, aggregated analytics to understand platform usage and demonstrate the effectiveness of the Service, consistent with FERPA and our DPA obligations.
To communicate with LEA representatives about Service updates, policy changes, and support needs.

We do not use student data for targeted advertising. We do not sell student data to any third party. We do not use student data to develop commercial products unrelated to the Service.

4. Student Data Ownership

All student data transmitted to or generated through the Service remains the property of the LEA and/or the student. Spread Goodness® acts as a School Official under FERPA, under the direct control and direction of the LEA with respect to student data. We do not assert ownership over student data.

5. Third-Party Service Providers (Subprocessors)

We use the following categories of third-party service providers who may have access to user data solely to provide services on our behalf:

Google (Firebase and Google Cloud Platform): Authentication, database storage, and hosting infrastructure. Data is stored within the United States.
Amazon Web Services (AWS / Amazon Simple Email Service): Transactional email delivery for account and nomination notifications.

All subprocessors are contractually required to protect data in a manner no less stringent than the protections in our DPA. A current list of subprocessors is available upon request at Lisa@spreadgoodness.love. We do not share student data with any third parties for commercial, marketing, or advertising purposes.

6. Data Storage and Security

All student data is stored within the United States. We implement administrative, physical, and technical safeguards designed to protect user data from unauthorized access, disclosure, acquisition, destruction, use, or modification. Our security practices are aligned with recognized cybersecurity frameworks including the NIST Cybersecurity Framework. While no method of data transmission or storage is completely secure, we are committed to maintaining industry-standard protections.

In the event of a data breach involving student data, we will notify the affected LEA(s) within seventy-two (72) hours of confirming the incident, consistent with our DPA obligations and applicable law.

7. Data Retention and Deletion

We retain user data for as long as necessary to provide the Service and fulfill the purposes described in this Policy, or as required by law. For student data, our retention and deletion practices are as follows:

Upon written request from an LEA, we will dispose of or return all student data within sixty (60) days.
Upon termination of a Service Agreement with an LEA, we will dispose of all student data for that LEA after providing reasonable prior notice.
De-identified, aggregated data may be retained after deletion of personally identifiable data, consistent with our DPA.

To request deletion of your data or your child’s data, contact us at Lisa@spreadgoodness.love.

8. FERPA Compliance

The Family Educational Rights and Privacy Act (FERPA) governs the privacy of student education records. Consistent with FERPA, Spread Goodness® operates as a School Official with a legitimate educational interest when providing services to an LEA. We access and process student education records only as directed by and under the control of the LEA. We do not disclose student education records to third parties except as permitted by FERPA, required by law, or authorized by the LEA.

Parents and eligible students have rights under FERPA to review and request correction of education records. Requests should be directed to the LEA, which will coordinate with us as required. We will respond to LEA requests for student data within forty-five (45) days.

9. Your Rights and Choices

Depending on your location, you may have rights regarding your personal information, including:

Access: Request access to the personal information we hold about you.
Correction: Request correction of inaccurate or incomplete information.
Deletion: Request deletion of your personal information, subject to legal obligations and DPA terms.
Data portability: Request transfer of student-generated content to a separate account, consistent with our DPA.
Opt-out of marketing communications: Unsubscribe from promotional emails at any time using the link in the email.

To exercise any of these rights, contact us at Lisa@spreadgoodness.love. For student data requests, we will coordinate with the LEA.

10. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). We do not sell personal information. California residents may request disclosure of the categories and specific pieces of personal information we have collected, request deletion, and opt out of any future sale (though we do not sell data). To exercise California privacy rights, contact Lisa@spreadgoodness.love.

Our practices for student data collected in California educational settings are additionally governed by the California Student Privacy Alliance (CSPA) CA-NDPA and relevant California Education Code provisions, including Education Code §§ 49073–49079.

11. Artificial Intelligence

The Service does not currently use artificial intelligence features that process student data. If we introduce AI-powered features in the future, we will provide advance notice to LEAs and update this Policy, our DPA, and the CA-NDPA AI Addendum accordingly. Student data will never be used to train AI models without explicit prior written consent from the LEA.

12. Children’s Privacy

The Service is used with students under the age of 13 in K–12 educational settings. Our practices for children’s data are governed by COPPA and described in detail in our COPPA Policy below. We do not knowingly collect personal information from children under 13 outside of an authorized educational context.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify LEAs and users of material changes by posting the updated Policy on our website, updating the effective date, and where required, notifying LEA designated representatives directly. Continued use of the Service following notice of changes constitutes acceptance of the revised Policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy, please contact: Lisa@spreadgoodness.love | Spread Goodness®, an entity of Expect Good Things, LLC | 1482 E Valley Rd 101, Montecito, AZ 93108

COPPA POLICY

This COPPA Policy describes how Spread Goodness®, an entity of Expect Good Things, LLC ("we," "us," or "our"), complies with the Children’s Online Privacy Protection Act (COPPA), 15 U.S.C. §§ 6501–6506, and implementing regulations at 16 C.F.R. Part 312. COPPA protects the online privacy of children under the age of 13 by requiring verifiable parental consent before collecting personal information from children under 13.

In the event of any conflict between this COPPA Policy and a fully executed Student Data Privacy Agreement ("DPA") between us and a Local Education Agency ("LEA"), the terms of the DPA shall control.

1. School-Based Consent Model

The Spread Goodness® platform is used exclusively in K–12 educational settings. Under COPPA’s school-based consent exception (16 C.F.R. § 312.5(b)(1)), a school or LEA may provide consent on behalf of parents when an operator collects personal information from students solely for an educational purpose and the collection is for the use and benefit of the school, and no other commercial purpose. Spread Goodness® relies on this school-based consent model.

When an LEA enters into a Service Agreement and DPA with Spread Goodness®, the LEA represents that it has the authority to consent on behalf of parents and students for the educational use of the Service. The LEA is responsible for providing any required direct parental notice consistent with its own policies and applicable law.

2. Information We Collect from Students Under 13

Consistent with COPPA and our school-based consent model, we collect only the information necessary to provide the educational Service. For students under 13, we collect:

First name and last initial (not full name).
School and grade level (provided by the LEA).
Teacher name and classroom association (provided by the LEA).
Student-generated content: kindness submissions, nominations, and stories created by the student within the platform.
Usage metadata: non-identifiable data such as interaction logs and session information, used solely to operate and improve the Service.

We do not collect from students under 13: full last names, home addresses, phone numbers, dates of birth, photographs, Social Security numbers, geolocation data, or any other personal information not described above.

3. How We Use Student Information

Information collected from students under 13 is used solely for the following educational purposes:

To enable students to participate in the kindness recognition and community culture features of the Service.
To provide teachers and administrators with visibility into student participation and community impact.
To send platform-related notifications (e.g., nomination alerts) to teachers and administrators, not directly to students.
To improve and maintain the Service using de-identified, aggregated data.

We do not use information collected from students under 13 for: targeted advertising, commercial profiling, sale to third parties, AI model training, or any purpose unrelated to the educational Service.

4. Disclosure of Student Information

We do not disclose personal information collected from students under 13 to third parties except:

To subprocessors (Google Firebase, Google Cloud Platform, Amazon Web Services) who are contractually bound to protect student data and provide services solely on our behalf.
To the LEA, upon request, in accordance with the DPA.
As required by law, including lawful subpoenas or government requests, in which case we will notify the LEA in advance unless legally prohibited from doing so.

We will never sell personal information from students under 13.

5. Parental and School Rights

Parents, legal guardians, and authorized school representatives have the following rights regarding children’s information:

Right to Review: Request access to the personal information we have collected from a child through the LEA.
Right to Correct: Request correction of inaccurate information through the LEA.
Right to Delete: Request deletion of a child’s personal information. We will comply within sixty (60) days of a written request from the LEA, except where retention is required by law.
Right to Refuse Further Collection: Withdraw consent for further data collection at any time through the LEA.
Right to Transfer Content: Request transfer of student-generated content to a separate account, consistent with the functionality of the Service and our DPA.

To exercise any of these rights, please contact your school or district administrator, who will coordinate with us. You may also contact us directly at Lisa@spreadgoodness.love. We will respond to requests within forty-five (45) days.

6. Data Security for Children’s Information

We implement industry-standard administrative, physical, and technical security measures to protect children’s personal information, including encrypted data storage, restricted access controls, and secure data transmission (HTTPS). All student data is stored within the United States. In the event of a data breach involving student data, we will notify the affected LEA within seventy-two (72) hours of confirming the incident.

7. Data Retention for Students Under 13

We retain student personal information only for as long as necessary to provide the Service or as required by law. Upon termination of a Service Agreement with an LEA, or upon written request from the LEA, we will delete all student personal information for that LEA within sixty (60) days. De-identified, aggregated data may be retained after deletion of personally identifiable information.

8. No AI Use with Student Data

The Service does not currently use artificial intelligence features that process personal information from students under 13. If we introduce such features in the future, we will provide advance notice to LEAs, obtain any required updated consent, and update this Policy and our DPA accordingly. Personal information from students under 13 will never be used to train AI models.

9. Changes to This COPPA Policy

We may update this COPPA Policy to reflect changes in our practices or applicable law. We will notify LEAs of material changes and update the effective date. Continued use of the Service by the LEA following notice of changes constitutes acceptance of the revised Policy.

10. Contact Us

If you have questions, concerns, or wish to exercise rights under this COPPA Policy, please contact: Lisa@spreadgoodness.love | Spread Goodness®, an entity of Expect Good Things, LLC | 1482 E Valley Rd 101, Santa Barbara, CA 93108

Spread Goodness®

Want to hear what’s new?

Spread Goodness®