Transition Curriculum Inc. DBA NextUp Privacy Policy
Last updated: October 13, 2026
This Privacy Policy ("Policy") applies to all products that make up the NextUp Suite (Lessons Portal, Student Business Platform, Job Application Simulator, and all other sections under the https://nextup.work and https://transitioncurriculum.com domains) and to Transition Curriculum Inc. DBA NextUp ("Company"), and governs data collection and usage. For the purposes of this Privacy Policy, unless otherwise noted, all references to the Company include https://transitioncurriculum.com, https://nextup.work, and https://nextupportal.herokuapp.com/admins/sign_in. The Company's application is an education application. By using the Company application, you consent to the data practices described in this statement.
Privacy Compliance Certification
The Company holds the following iKeepSafe certifications:
- iKeepSafe FERPA Compliance certification, achieved November 21, 2024.
- iKeepSafe COPPA Safe Harbor certification, achieved October 13, 2026.
Collection of your Personal Information
In order to better provide you with the products and services offered, the Company may collect personally identifiable information, such as your:
- First and last name
- Mailing address
- Email address
- Phone number
- Employer
- Job title
We do not collect any personal information about you unless you voluntarily provide it to us. However, you may be required to provide certain personal information to us when you elect to use certain products or services. These may include: (a) registering for an account; (b) entering a sweepstakes or contest sponsored by us or one of our partners; (c) signing up for special offers from selected third parties; (d) sending us an email message; (e) submitting your credit card or other payment information when ordering and purchasing products and services. We will use your information for, but not limited to, communicating with you in relation to services and/or products you have requested from us. We also may gather additional personal or non-personal information in the future.
Audio, photographs, video, and location. NextUp does not collect audio recordings of a child's voice, photographs, video, or geolocation information from students.
Cookies and Persistent Identifiers
NextUp uses a small number of cookies and similar identifiers. We use them only to support the internal operations of the Service, as that term is defined by the Children's Online Privacy Protection Rule (16 C.F.R. § 312.2). That means keeping users signed in, protecting accounts and the Service against fraud and abuse, remembering settings, maintaining and analyzing how the Service works, and fixing errors.
| Identifier | Purpose | How long it lasts |
|---|---|---|
| Session cookie | Keeps you signed in as you move between pages | Until you sign out or your session times out |
| "Remember me" cookie | Keeps you signed in on a device, only if you choose "Remember me" | Until it expires or you sign out |
| Security (CSRF) token | Stops other websites from submitting forms on your behalf | Current session |
| Mobile app sign-in token | Authenticates the NextUp mobile app | Until sign-out or expiration |
| Job Application Simulator draft (browser storage) | Saves a student's in-progress practice application on their own device, so work isn't lost | Up to 7 days, or until the application is submitted |
| Portfolio view preference (browser storage) | Remembers list or grid view | Until browser data is cleared |
| Accessibility toolbar settings (accessiBe) | Remembers display adjustments a user chooses | Until browser data is cleared |
| Analytics identifiers (Amplitude, educator accounts only) | Understanding which features educators use, so we can improve the Service | Per the provider's retention settings |
Safeguards. We do not use these identifiers, and we do not allow any third party to use them, to contact a specific individual, to build a profile of a child, for behavioral or targeted advertising, or for any purpose other than supporting the internal operations of the Service. We do not allow third-party advertising networks or tracking pixels on NextUp. Our analytics tools are configured to exclude student accounts. Service providers that receive identifiers are bound by the contractual limits described under "Third-Party Service Providers."
You can block or delete cookies in your browser settings. Blocking the session cookie will prevent sign-in.
Use of your Personal Information
The Company collects and uses your personal information in the following ways:
- to operate and deliver the services you have requested
- to provide you with information, products, or services that you request from us
- to provide you with notices about your account
- to carry out the Company's obligations and enforce our rights arising from any contracts entered
- to notify you about changes to our policy and data collection practices or any products or services we offer
- in any other way we may describe when you provide the information
- for any other purpose with your consent
The Company may also use your personally identifiable information internally to inform you of other products or services available from the Company. This data will not be used by any third party or company for the purpose of advertising.
We are a comprehensive transition curriculum consisting of weekly lesson videos, lesson plans, supplemental activities, assessments, and more. NextUp equips teachers with the tools and resources to enhance student post-secondary success in employment, education, and independent living. The account data necessary to operate the product for a student is a NextUp-assigned account identifier. Where a school enables an Individual Student Account for a specific student's personal career-readiness tools, it also includes that student's first and last name and an email address. NextUp's default classroom accounts do not identify any individual student (see "Children Under Thirteen" below).
Sharing Information with Third Parties
The Company does not sell, rent, or lease its customer lists to third parties.
The Company may share data with trusted partners to help perform statistical analysis, send you email or postal mail, provide customer support, or arrange for deliveries. All such third parties are prohibited from using your personal information except to provide these services to the Company, and they are required to maintain the confidentiality of your information.
The Company may disclose your personal information, without notice, if required to do so by law or in the good faith belief that such action is necessary to: (a) conform to the edicts of the law or comply with legal process served on the Company or the site; (b) protect and defend the rights or property of the Company; and/or (c) act under exigent circumstances to protect the personal safety of users of the Company, or the public.
Third-Party Service Providers
We work with the service providers listed below to operate, host, secure, and support NextUp. Each receives only the information needed for the service it performs for us. Each is contractually required to keep that information confidential and secure, and to use it only to provide its service to Transition Curriculum. None may use it for its own advertising or marketing, or sell it.
We do not sell personal information, share it for targeted advertising, or allow advertising networks on NextUp.
| Provider | What they do for us | Information they receive | Includes student data? |
|---|---|---|---|
| Heroku (Salesforce, Inc.) | Application hosting, database, and caching | All account data stored in NextUp | Yes. This is where the Service is hosted. |
| Amazon Web Services (Amazon S3) | Storage for files saved to the Service | Uploaded and saved files and documents | Yes, if a student saves a document |
| Twilio SendGrid | Delivery of account and service emails, such as password resets and notices | Recipient name and email address, email content | Only for accounts that have an email address |
| Google (Sign in with Google) | Optional sign-in with a Google account | Google account email and name, only if the user chooses Google sign-in | Only if a school's users sign in with Google |
| Google reCAPTCHA | Spam and abuse protection on contact forms | Device and browser signals from the form page | No |
| Amplitude | Product usage analytics for educator accounts | Educator email, school and license name, pages and features used | No. Student accounts are excluded. |
| accessiBe | Accessibility toolbar | Browser and display preferences set in the toolbar | No personal information |
| Vimeo, YouTube, Loom | Delivery of embedded lesson and training videos | Device and browser information needed to play the video | No personal information from NextUp |
| Honeybadger | Error monitoring, so we can find and fix problems | Technical error details, which may include the page and account involved in an error | Possibly, limited to error details |
| Salesforce | Customer account management for schools and districts | Educator and administrator name, email, school, and license | No. Student accounts are excluded. |
| DocuSign | Electronic signing of license agreements | District and school contact names and emails | No |
| Asana | Tracking technical support requests | The email address and message submitted in a support request | Only if a student submits a support request |
| Slack | Internal staff notifications, such as new school account requests | Educator email addresses | No |
| Mailchimp (Intuit) | Newsletters and announcements to educators who subscribe | Educator name and email address | No |
| OneRoster (district roster integration) | Optional import of teacher rosters from a district's student information system, at the district's request | Teacher names, emails, and roles | No. Only teacher records are imported. |
We review these providers at least once a year, and whenever their practices or ours change. When we add a provider that will receive student personal information, we update this list before that provider receives any.
Security of your Personal Information
The Company secures your personal information from unauthorized access, use, or disclosure. The Company uses the following methods for this purpose:
- Devise (account authentication)
- Encrypted HTTPS/TLS connections for all traffic to and from the Service
- Heroku mTLS (mutually authenticated, secure, and compliant) connection
- Access to student records and saved student documents is limited to the student, staff on the student's own school or district license, and authorized NextUp staff, and is checked on every request
We strive to take appropriate security measures to protect against unauthorized access to or alteration of your personal information. Unfortunately, no data transmission over the Internet or any wireless network can be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, you acknowledge that: (a) there are security and privacy limitations inherent to the Internet that are beyond our control; and (b) the security, integrity, and privacy of any and all information and data exchanged between you and us through this site cannot be guaranteed.
Security as to Personally Identifiable Information
The security of your data, including personally identifiable information, is important to us. User accounts are protected by a password. Users are required to protect the confidentiality of their passwords.
We will endeavor as best as we can, in accordance with applicable rules, regulations and laws, to maintain appropriate electronic and managerial policies and procedures to ensure that your data, including personally identifiable information, is kept secure in accordance with commercially reasonable information technology standards.
If NextUp becomes aware of a systems security breach by an unauthorized party, or that any user data was used for an unauthorized purpose, we will comply with relevant state and other data breach laws. We will notify users of any breach resulting in unauthorized release of data electronically, at minimum, and without unreasonable delay so that you can take appropriate steps. The notification will include: the date of the breach, the types of information that were subject to the breach, a general description of what occurred, and the steps NextUp is taking to address the breach.
Choices and Product Support
If the parent or legal guardian of a Student wants to review the information that NextUp has collected about the Student, or learn more about the Service(s) the Student is participating in, they should contact the Student's School directly.
If Schools wish to access, modify, or delete other personal information that they have provided to NextUp, please contact us at NextUp@TransitionCurriculum.com for assistance.
We will retain your information for as long as your account is active or as needed to provide you services. Please contact us if you wish to cancel your account or request that we no longer use your information to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
If you decline to provide information. Schools and parents may decline to provide, or may withdraw, a student's personal information at any time. NextUp's default shared classroom accounts don't identify individual students, so a student can keep using NextUp's lessons and activities through a classroom account without providing any personal information. If a school or parent declines to provide, or asks us to delete, the information needed for an optional Individual Student Account, that student's individual account will be deleted. The personal career-readiness work saved in it, such as a portfolio or saved practice applications, will be deleted too and can't be restored. We will never require a student to provide more personal information than is reasonably necessary to take part in an activity.
Right to Deletion
Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:
- Delete your personal information from our records; and
- Direct any service providers to delete your personal information from their records.
Please note that we may not be able to comply with requests to delete your personal information if it is necessary to:
- Complete the transaction for which the personal information was collected, or fulfill the terms of an agreement;
- Detect security incidents, or protect against malicious, deceptive, fraudulent, or illegal activity;
- Debug to identify and repair errors that impair existing intended functionality;
- Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest. All student personal information used for these purposes will be aggregated or de-identified;
- Comply with an existing legal obligation; or
- Otherwise use your personal information, internally, in a lawful manner that is compatible with this policy and our terms of service.
Children Under Thirteen
NextUp is offered directly to schools, teachers, and school districts. It is not marketed, sold, or made available directly to parents, guardians, or students apart from a school's engagement with Transition Curriculum. As permitted under the Children's Online Privacy Protection Act of 1998 ("COPPA") and Federal Trade Commission guidance, when a school or district uses NextUp with students under the age of 13, Transition Curriculum relies on that school's consent, given on the parent's behalf, rather than obtaining separate consent directly from each parent. Student information is collected only for the use and benefit of the school and is not used for any other commercial purpose. Schools that use NextUp with students under 13 receive a Direct Notice to Educational Institutions describing what student data NextUp collects and how it is used. We recommend schools share that notice with parents.
Most students access NextUp through a shared classroom account created by school staff. That account is not associated with any individual child's real name or personal email address. Its stored name fields identify the school rather than the student, and its email address is generated by NextUp rather than provided by the child. A school may separately enable NextUp's optional Individual Student Account feature for a specific student's personal career-readiness tools. That account, including the student's name and an email address, is created and managed by school staff, not by the student.
Public sharing. NextUp does not allow or encourage students to make personal information publicly available. NextUp has no public profiles, public posting, public chat, or messaging between users, and no shareable public links to student work. A student's Job Portfolio and the work saved in it, such as practice applications, cover letters, and job search logs, can be viewed only by the following people:
- the student, when signed in to their own account
- signed-in teachers and administrators on the student's own school or district license
- authorized NextUp staff, when providing support
Every request to view a portfolio document is checked against these rules. Students are never asked to share personal information with the public or with other students through the Service.
Parents who want to review, correct, or request deletion of their child's information should contact their child's school directly. Schools may in turn contact NextUp at NextUp@TransitionCurriculum.com for assistance, as described under "Choices and Product Support."
Email Communications
From time to time, the Company may contact you via email for the purpose of providing announcements, promotional offers, alerts, confirmations, surveys, and/or other general communication. In order to improve our services, we may receive a notification when you open an email from the Company or click on a link therein.
If you would like to stop receiving marketing or promotional communications via email from the Company, you may opt out of such communications by clicking the unsubscribe button.
External Data Storage Sites
We may store your data on servers provided by third-party hosting vendors with whom we have contracted. These vendors are listed under "Third-Party Service Providers."
Changes to This Statement
We may revise our Privacy Policy from time to time. You can see when the last update was by looking at the "Last Updated" date at the top of this page. We won't reduce your rights under this Privacy Policy without your explicit consent. If we make any significant changes, we'll provide prominent notice by posting a notice on the NextUp Service and notifying you by email (using the email address you provided) within 30 days before the change takes effect, so you can review and make sure you know about them.
We encourage you to review this Privacy Policy from time to time, to stay informed about our collection, use, and disclosure of personal information through the Service and NextUp. If you don't agree with any changes to the Privacy Policy, you may terminate your account. By continuing to use the Service or NextUp after the revised Privacy Policy has become effective, you acknowledge that you accept and agree to the current version of the Privacy Policy.
Change of Control
Over time, NextUp may grow and reorganize. We may share your information, including personal information, with affiliates such as a parent company, subsidiaries, joint venture partners, or other companies that we control or that are under common control with us, in which case we will require those companies to agree to use your personal information in a way that is consistent with this Privacy Policy.
In the event of a change to our organization such that all or a portion of NextUp or its assets are acquired by or merged with a third party, or in any other situation where personal information that we have collected from users would be one of the assets transferred to or acquired by that third party, this Privacy Policy will continue to apply to your information, and any acquirer would only be able to handle your personal information as per this policy (unless you give consent to a new policy). We will provide you with notice of an acquisition within thirty (30) days following the completion of such a transaction, by posting on our homepage and by email to the email address you provided to us. If you do not consent to the use of your personal information by such a successor company, subject to applicable law, you may request its deletion from the company.
In the unlikely event that NextUp goes out of business, or files for bankruptcy, we will protect your personal information, and will not sell it to any third party.
Contact Information
The Company welcomes your questions or comments regarding this Policy. If you believe that the Company has not adhered to this Policy, please contact us.
NextUp is operated by Transition Curriculum Inc. DBA NextUp. Transition Curriculum is the operator that collects and maintains personal information through the NextUp Service. Companies that provide services to us are listed under "Third-Party Service Providers."
Designated privacy contact. The following person answers all questions from parents, guardians, schools, and users about this Privacy Policy and about how NextUp handles children's and students' information, including questions about any third-party service provider listed above:
Chad Logsdon
Transition Curriculum Inc. DBA NextUp
311 E. Main St. #512
Galesburg, IL 61401
Phone: (309) 228-2826
Email: chad.logsdon@transitioncurriculum.com
Authorized personnel. Access to personal information collected through NextUp is limited to the following Transition Curriculum personnel. They access it only as needed to operate, support, and secure the Service.
| Name | Organization | Contact |
|---|---|---|
| Chad Logsdon | Transition Curriculum Inc. DBA NextUp | chad.logsdon@transitioncurriculum.com, (309) 228-2826 |
| Kaley Staats | Transition Curriculum Inc. DBA NextUp | Through the designated privacy contact above |
| Corey Fineran | Transition Curriculum Inc. DBA NextUp | Through the designated privacy contact above |
| Lindsay Zerull | Transition Curriculum Inc. DBA NextUp | Through the designated privacy contact above |
All personnel can be reached at the company address above: 311 E. Main St. #512, Galesburg, IL 61401, (309) 228-2826.
General support: NextUp@TransitionCurriculum.com
iKeepSafe COPPA Safe Harbor. NextUp participates in the iKeepSafe Safe Harbor program. If you have any questions or need to file a complaint related to our privacy policy and practices, please do not hesitate to contact the iKeepSafe Safe Harbor program at COPPAprivacy@ikeepsafe.org.
Copyright © 2026 Transition Curriculum Inc.