At a glance
- Uploaded documents may include sensitive records, including immunization or exemption records, for you or your child.
- We do not sell health-related information or use it for targeted advertising.
- Health-related uploads require your separate, explicit consent before you can upload them.
- You can withdraw that consent or delete those files at any time.
- Only parents and guardians hold Rigamaroo accounts; any consent for a child's health-related information is given by the responsible parent or guardian.
Health and vaccination record uploads
- Rigamaroo lets families store homeschool records. Some families choose to upload immunization records, vaccination records, exemption forms, or other documents that include health information about a child. These uploads are stored in the Immunization Records or Legal and Exemption Filings categories and are accessible only to you and the co-parents or caregivers you have invited to your family workspace.
- Separate, explicit consent required. Before you can upload a file into the Immunization Records or Legal and Exemption Filings category, you must affirmatively check a separate consent confirming that you understand the file may contain health-related information and that you consent to Rigamaroo storing it for homeschool recordkeeping purposes. This consent is presented at the point of upload, not bundled with our general Terms of Service, and is required every time this feature is used by a family that has not already provided it.
- Who may give this consent. Rigamaroo accounts are held only by parents and guardians (see Children and parent consent below). This consent is always given by an adult account holder — never a child — on behalf of the child whose records are being stored. By uploading a health-related document for a child, the uploading parent or guardian represents that they have the legal authority to consent to the storage of that child's information.
- Rigamaroo is not a health care provider, health plan, health care clearinghouse, school, or emergency medical record system. Do not use Rigamaroo for urgent medical needs, diagnosis, treatment, or as the only copy of a critical record.
- Only upload health-related documents you are comfortable storing in Rigamaroo. Consider removing Social Security numbers, full medical histories, or other information not needed for your homeschool recordkeeping purpose before uploading.
- We use uploaded files only to provide record storage, download, deletion, security, support, and related account features. We do not analyze the contents of uploaded health documents, use them for advertising, or sell them.
- Because Rigamaroo does not sell consumer health data, we do not ask you to sign an authorization for the sale of health data.
- Rigamaroo helps you organize records and can show you upcoming filing deadlines, but does not automatically submit documents to your state, province, school district, umbrella school, or any other authority. You remain responsible for timely filing with the appropriate parties.
- If a security incident involves health information and applicable law requires notice, we will notify affected users and regulators as required (see Quebec residents below for Quebec-specific notice obligations).
Children and parent consent
- Rigamaroo accounts are for parents and guardians only. Children do not create their own accounts. Health-related uploads relating to a child are created and managed entirely by the parent or guardian who controls the family workspace, and any consent required to store that information — including the separate health-related upload consent described above — is given by that parent or guardian, not by the child.
- We do not knowingly collect health information directly from a child. Parents and guardians can review, correct, download, or delete a child's health-related files at any time. We do not sell or share children's health-related information for behavioral advertising.
- To request review, correction, or deletion of your child's health-related information, or to withdraw consent, contact us at the address in the Contact us section below.
Security and retention
- We use administrative, technical, and organizational safeguards to protect health-related information, including encrypted file transfer and storage, per-family isolated storage prefixes, and access controls that limit employee access to this data.
- No online service can guarantee perfect security. Keep your password and sign-in credentials secure, and contact us promptly if you believe your account has been compromised.
California privacy rights (CCPA/CPRA)
- If you are a California resident, health-related documents you upload about yourself or your child may qualify as sensitive personal information under California law. We use sensitive personal information only to provide the Service you requested and not for inferential or secondary purposes. We do not sell or share this information.
- You have the right to know, correct, and delete health-related personal information we hold about you, subject to certain legal exceptions. To submit a California privacy request, email us at the address in the Contact us section with the subject line "California Privacy Request."
Canadian users (PIPEDA)
- If you are located in Canada, we collect, use, and disclose health-related information about you or your child only with meaningful consent and only for the purposes described in this policy.
- Immunization records and other health-related documents you upload are sensitive personal information. We obtain your express, separate consent before you upload these documents, as described above. Because you are a parent or guardian consenting on behalf of your child, this consent is treated as informed and voluntary consent given by the responsible adult, consistent with PIPEDA's requirements for consent involving minors.
- Your health-related information may be transferred to and stored in the United States. By using Rigamaroo, you acknowledge that this information will be subject to United States law while it is stored there, including potential access by U.S. authorities under lawful process.
- You have the right to access the health-related information we hold about you and your child, to challenge its accuracy, and to withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. To exercise these rights, contact us at the address in the Contact us section.
- If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada.
Quebec residents (Law 25)
- If you are located in Quebec, the following additional information applies to you under Quebec's Act respecting the protection of personal information in the private sector.
- Person responsible for the protection of personal information: Caroline McCool, reachable at caroline@rigamaroohq.com.
- Consent for health-related information: because immunization, exemption, and other health-related documents you upload are sensitive personal information, we obtain your express consent separately from our general Terms of Service before you upload these documents, as described above. This consent is specific to the purpose of homeschool recordkeeping and is not bundled with consent for other features. Where the uploaded information concerns your child, you provide this consent as the parent or guardian responsible for your child's information.
- Privacy impact assessment: we have assessed the privacy risks of collecting and storing health-related uploads and have implemented safeguards described in the Security and retention section, including encrypted storage and per-family access isolation.
- Confidentiality incidents: if a security incident creates a risk of serious injury to you or your child, we will notify you and Quebec's Commission d'accès à l'information as required by law, in addition to any other notification obligations described in this policy.
- Your rights: in addition to the rights described elsewhere in this policy, you have the right to data portability for health-related information we hold about you, and the right to request that we cease disseminating this information or de-index it in certain circumstances, where applicable under Quebec law.
- For Quebec-specific privacy requests, contact us at privacy@rigamaroohq.com with the subject line "Quebec Privacy Request."
Other U.S. states with consumer health data laws
- Nevada, Connecticut, and Colorado have enacted laws that provide additional protections for consumer health data. If you are a resident of one of these states:
- We do not collect health-related information from you except as necessary to provide the homeschool recordkeeping features you have requested, and we obtain your consent before you upload it, as described above.
- We do not sell your health-related information, and we do not share it except as described in the How health-related information is shared section above.
- You have the right to confirm what health-related information we hold about you, to request its deletion, and to withdraw your consent for its continued storage at any time, as described in the Your rights for health-related uploads section above.
- We do not use geofencing or similar location-based technology to identify or target you in connection with health-related information.
- To exercise these rights, contact us at the address in the Contact us section below.
International users outside the U.S. and Canada
- Rigamaroo does not currently offer its services to residents of the European Economic Area, United Kingdom, Switzerland, or other countries outside the United States and Canada. If we expand to serve users in these regions, we will update this policy to describe the additional rights and protections that apply, including under the GDPR or equivalent laws, before offering the Service there.
Changes to this policy
- We may update this policy as Rigamaroo changes. If changes are material, we will provide notice through the site, app, email, or another reasonable method before the changes take effect.
- The updated policy will be effective when posted unless it states otherwise.
Contact us
For questions, requests, or concerns about health-related data, email info@rigamaroohq.com, or write to us by mail:
RigamarooCaroline McCool
4419 Centennial Blvd
Unit #703
Colorado Springs, CO 80907