The policy discloses that all personal information from users outside the United States is transferred to and processed on U.S.-based servers. Users accessing the service from outside the U.S. are stated to acknowledge this transfer by using the service.
This analysis describes what Khan Academy's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that Khan Academy processes all user data in the United States and characterizes service use from outside the U.S. as user acknowledgment of this transfer. The provision does not disclose specific legal transfer mechanisms such as Standard Contractual Clauses or adequacy decisions, which creates a compliance gap for EU, EEA, and UK users under GDPR and equivalent frameworks.
Interpretive note: The policy does not disclose the specific legal transfer mechanism relied upon for cross-border data transfers, and the adequacy of characterizing service use as acknowledgment of transfer depends on applicable jurisdictional requirements.
Under this provision, personal information of users outside the United States, including personal information and user-generated content, is collected, transferred, stored, and processed in the United States. The agreement states that users accessing the service from outside the U.S. acknowledge this data transfer arrangement.
Cross-platform context
See how other platforms handle International Data Transfer to U.S. Servers and similar clauses.
Compare across platforms →"Our Service is operated and managed on servers located within the United States. If you access our Service from outside the United States, you acknowledge that Khan Academy will collect, transfer, store, and process your information, including personal information and user-generated content, in the United States, where data protection laws may differ from those in your jurisdiction.Excerpt from Khan Academy's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that Khan Academy processes all user data in the United States and characterizes service use from outside the U.S. as user acknowledgment of this transfer. The provision does not disclose specific legal transfer mechanisms such as Standard Contractual Clauses or adequacy decisions, which creates a compliance gap for EU, EEA, and UK users under GDPR and equivalent …
Under this provision, personal information of users outside the United States, including personal information and user-generated content, is collected, transferred, stored, and processed in the United States. The agreement states that users accessing the service from outside the U.S. acknowledge this data transfer arrangement.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Khan Academy.