Khan Academy uses security measures to protect your data, but like all online services, it cannot guarantee your data will never be breached.
Khan Academy takes security precautions for your personal data, but explicitly does not guarantee it against breaches — meaning your or your child's learning data, contact information, and AI conversation logs could potentially be exposed in a security incident.
Cross-platform context
See how other platforms handle Data Security Practices and similar clauses.
Compare across platforms →On a platform used by millions of students and minors, any data breach could expose sensitive educational and personal data; the disclaimer that security cannot be guaranteed is a standard but significant liability limitation.
(1) REGULATORY FRAMEWORK: FTC Act Section 5 requires reasonable data security as an unfair practices baseline; COPPA requires reasonable security for children's data (16 C.F.R. §312.8); GDPR Article 32 requires appropriate technical and organizational security measures; CCPA/CPRA §1798.150 creates a private right of action for data breaches resulting from failure to implement reasonable security. State breach notification laws (e.g., Cal. Civ. Code §1798.82, NY SHIELD Act) impose notification obligations following a breach. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.