Kahoot

Kahoot! Privacy Notice — User Overview

Effective date: October 22, 2025

Important scope point: For school and organization accounts, Kahoot! may act as a data processor on behalf of the school, district, or business. In those situations, that organization—not Kahoot!—may control key decisions about the data and handle access or deletion requests.

1. Data Collection and Use

Information you provide

Depending on how you use Kahoot!, it may collect:

• Name, preferred name, email, address, phone number, job title, organization, location, age, interests, profile picture, and language preferences.
• Account credentials, encrypted passwords, login attempts, security settings, and support communications.
• Payment and billing information. Kahoot! states that payment processors handle payment-card data; Kahoot! may retain limited details such as the last four digits and expiration date.
• Comments, messages, uploaded content, survey responses, opinions, and information made public through social media or Kahoot! features.
• Employment application information, including qualifications, work history, interview video, recruitment records, and potentially publicly available professional or social-media information.

Automatically collected information

Kahoot! may collect IP address, device and browser details, operating system, MAC address, screen resolution, usage and log data, game participation, results, searches, viewed pages/files, and cookie-related information. City-level location may be derived from IP address.

Main purposes

Data may be used to:

• Provide, authenticate, personalize, support, and improve the Services.
• Track game results and student progress when directed by teachers or schools.
• Process payments and communicate account, legal, technical, and service information.
• Prevent fraud, abuse, misuse, and security incidents.
• Conduct analytics, research, business development, recruitment, legal compliance, and corporate transactions.
• Send Kahoot! marketing, where based on consent or permitted legitimate interests.

Kahoot! says it does not sell Personal Information, does not provide individual user data to advertising platforms for targeted advertising, and does not serve third-party ads on its platforms. However, it may use your email address for Kahoot!-related marketing and may use external platforms’ own data for general advertising.

2. Student and Children’s Data

For a child who merely joins a game, Kahoot! generally collects only a nickname. School features may collect names, email addresses for non-child users, attendance information, answers, scores, and performance data at a teacher or school’s direction.

Kahoot! states that it does not sell Student Data, use it for targeted advertising, or create student profiles except for authorized educational purposes. Parents and eligible students should generally contact the school or district to request access, correction, or deletion. Parents may contact Kahoot! directly for child accounts created outside school.

3. User Rights

Depending on location, users may request:

• Access or copies of their data.
• Correction of inaccurate information.
• Deletion or restriction of processing.
• Data portability.
• Withdrawal of consent, including marketing consent.
• Objection to legitimate-interest processing or direct marketing.
• A complaint to a data-protection regulator.

U.S. state rights may also include disclosure of data categories and recipients, deletion, portability, correction, appeals, and protection against discriminatory treatment for exercising rights. Kahoot! may verify identity and may deny requests where legal, security, intellectual-property, or retention exceptions apply.

Contact: privacy@kahoot.com or Kahoot!’s support form/account settings.

4. Third-Party Sharing

Kahoot! may share data with:

• Kahoot! affiliates.
• Hosting, analytics, payment, support, security, and other service providers acting under contractual instructions.
• An organization associated with an organizational email address for license management.
• Recruitment vendors and job platforms.
• Social-media providers and third-party plugins/content providers when you interact with them.
• Government authorities, courts, law enforcement, and professional advisers.
• A buyer or successor during a merger, acquisition, sale, or restructuring.

Third-party applications have their own privacy policies. International transfers may occur under adequacy decisions, the EU-U.S. Data Privacy Framework, or standard contractual clauses.

5. AI/ML Training

The notice does not expressly state whether Personal Information or user-generated content is used to train AI or machine-learning models. It does mention automated filtering for abuse prevention, personalization, analytics, and anonymized/aggregated data used to improve services. Users should not assume that AI training is prohibited or permitted based on this notice alone; seek clarification from Kahoot! if this is important.

6. Key User Obligations and Risks

• Avoid posting sensitive or identifying information in public comments or group areas; others may view, copy, or find it through search engines.
• Obtain a lawful basis and any required consent before submitting another person’s sensitive information.
• Review third-party privacy policies before connecting integrations or using embedded content.
• Secure credentials and transmit information carefully; internet transmission is not guaranteed secure.
• Use the Services lawfully and consistently with Kahoot!’s Terms and Conditions.
• Data may be transferred and stored internationally, potentially in countries with weaker privacy protections.

7. Liability and Disputes

This notice contains no detailed liability cap, indemnity, governing-law clause, arbitration requirement, or dispute procedure. Those provisions are likely in Kahoot!’s Terms and Conditions or customer agreements. Kahoot! disclaims any guarantee that online transmissions are secure and states that users transmit data at their own risk. Privacy complaints may be made to Kahoot! or the relevant data-protection authority; legal claims may also be handled under applicable law.

8. Changes

Kahoot! may change the notice at any time. For material changes, such as materially different uses of data, it says it will provide advance notice by email, pop-up, or website notice. Users who disagree may delete their account and stop using the Services.

Kahoot! Terms and Conditions — Key User Implications

*Effective March 12, 2025. This summary is based only on the Terms provided. Kahoot!’s separate Privacy Notice, Cookie Notice, and any Enterprise Agreement may contain important additional details.*

1. Data Collection & Usage

The Terms indicate that Kahoot! may process:

• Account information, including identity and registration details, age if provided, country, language, account type, and primary reason for using Kahoot!.
• User Content, including quizzes, images, videos, text, messages, feedback, and other uploaded data.
• Communications and files, which may be accessible to an Organization’s administrator in workplace or school-managed accounts.
• Account, authentication, payment, and usage information, as necessary to operate and secure the service.
• Data used by recommender systems, including age, country, language, and usage category, to recommend content and deliver targeted promotional content within the platform.

Kahoot! says it will process User Content primarily to provide, maintain, update, and develop its services; address technical, security, and support issues; comply with law; or act as otherwise authorized by you.

The Terms do not provide a complete privacy disclosure. For details such as retention periods, legal bases, cookies, analytics, international transfers, and specific data categories, users must consult the Privacy Notice and Cookie Notice.

2. User Rights

The Terms themselves provide or refer to these rights:

• Data subject requests: Contact Kahoot! at privacy@kahoot.com, unless your employer, school, or other Organization administers the account. In that case, requests should generally go to the Organization’s administrator.
• Control over recommendations: Users can change their selected language and, for certain account types, their primary usage category.
• Content control: Users may choose whether to make content public. Private User Content is described as having limited visibility.
• Deletion after termination: Kahoot! says it will delete User Content from the account after termination, subject to exceptions for Public User Content and its Privacy Policy.
• Withdrawal rights: Eligible consumers may cancel Services within 14 days of payment. However, consumers generally lose withdrawal and refund rights for Content Subscriptions when digital content is made available immediately.
• UK users: Users in the UK may bring a contractual claim if Kahoot! improperly removes their content or suspends/bans their account.
• Other privacy rights—such as access, correction, restriction, objection, portability, or deletion—are governed mainly by the separate Privacy Notice and applicable law.

3. Third-Party Sharing and Access

Data may be accessible or disclosed to:

• An affiliated Organization: If you use an employer or school email domain, its administrator may take control of the account, modify or terminate access, and access/process communications, files, and other data. Kahoot! is not required to notify you of this takeover.
• Third-party applications: Optional integrations, such as YouTube or GIPHY, are governed by those providers’ own terms and privacy policies. Kahoot! disclaims responsibility for them.
• Service providers or processors: A Data Processing Agreement applies where Kahoot! acts as a processor.
• Authorities or other parties where legally required, or where necessary for security, fraud prevention, or support.

The Terms do not give a detailed list of recipients or sharing practices; consult the Privacy Notice.

4. AI/ML Training

The Terms do not expressly state that User Content is used to train AI or machine-learning models. They do grant Kahoot! a license to use and process User Content to maintain, update, and develop the Services, including new functionality and related services. This language could encompass technological development, but it is not a clear AI-training authorization.

Kahoot! expressly uses automated recommender systems based on account attributes and usage categories. The Privacy Notice should be reviewed for any specific AI-training, profiling, or automated-decision practices.

5. Key User Obligations and Restrictions

Users must:

• Use the Services lawfully and according to the Terms, Acceptable Use Policy, and other guidelines.
• Keep account credentials and payment details confidential and promptly report misuse or security incidents.
• Provide accurate registration and identity information.
• Avoid sharing accounts or allowing others to use them.
• Ensure they own or have permission to upload User Content and that it does not infringe others’ rights.
• Use Free Plans only for non-commercial purposes. Commercial, professional, advertising, marketing, or sales use generally requires an appropriate Paid Plan or express authorization.
• Not resell, charge for, share, modify, or redistribute subscription content unless expressly permitted.

Publicly posted content is subject to a very broad, worldwide, perpetual, transferable, sublicensable, royalty-free, irrevocable license allowing Kahoot! to commercialize, modify, publish, distribute, and create derivative works from it.

6. Liability, Suspension, and Disputes

Kahoot! may suspend or terminate accounts for actual or suspected breaches, unauthorized use, fraud, or legal violations. Paid fees are generally non-refundable after termination, subject to applicable law.

Kahoot! broadly excludes liability for indirect, consequential, punitive, business, data, profit, and loss-of-use damages. Its total contractual liability is generally capped at the amount paid by the user during the preceding 12 months. Mandatory legal protections, including liability for fraud and death or personal injury caused by negligence, are preserved.

Users must indemnify Kahoot! for claims arising from their breach, User Content, account activity, or legal/third-party-rights violations.

Norwegian law governs, and disputes must generally be brought in the courts of Oslo, Norway, subject to mandatory consumer protections.

7. Changes to the Terms

Kahoot! may change the Terms. Material changes may be communicated by email, in-app or in-service notification, or on its official websites. Continued use means acceptance. Users who disagree may stop using the Services, cancel a subscription, or terminate the Agreement.

Kahoot! may change its Acceptable Use Policy without notice, which creates an ongoing compliance obligation.