Privacy Policy

Owlio ("we", "our", "us") is committed to protecting the privacy of our users — especially our youngest learners. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Owlio platform.

Information We Collect

Account Information: When a school or teacher creates accounts, we collect student names, usernames, and class assignments. Teacher accounts include name, email address, and school affiliation.

Usage Data: We collect data about how the platform is used, including reading progress, vocabulary scores, quiz results, streaks, and activity timestamps. This data is essential for the learning experience and teacher dashboards.

Device Information: We collect basic device and browser information (device type, OS version, browser type) to ensure compatibility and troubleshoot issues.

How We Use Your Information

• Provide and personalize the learning experience
• Generate progress reports for teachers and school administrators
• Calculate spaced repetition schedules for vocabulary review
• Maintain streaks, leaderboards, and achievement systems
• Improve platform performance and fix bugs
• Communicate with teachers about their accounts

Children's Privacy

Owlio is designed for use in schools with students of all ages, including children under 13. We comply with applicable children's privacy laws, including COPPA (Children's Online Privacy Protection Act) and relevant provisions of KVKK (Turkish Personal Data Protection Law).

Student accounts are created and managed by teachers or school administrators, who act as authorized agents providing consent on behalf of parents/guardians in the educational context.

We do not collect more information from children than is necessary for the educational service. We do not serve advertising to students. We do not sell or share student data with third parties for commercial purposes.

Data Retention

We retain student data for as long as the school maintains an active account. When a school or teacher requests account deletion, we remove all associated student data within 30 days. Anonymized, aggregated usage statistics may be retained for platform improvement.

Data Sharing

We do not sell personal data to third parties. We may share data with the following categories of service providers who process data on our behalf:

• Hosting: Supabase (database and authentication), Vercel (web hosting)
• Analytics: Vercel Analytics (anonymized usage metrics)

All service providers are contractually required to protect data and use it only for the purposes we specify.

Data Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted database storage, role-based access controls, and row-level security policies. Access to personal data is restricted to authorized personnel only.

Your Rights

Schools, teachers, and parents/guardians have the right to request access to, correction of, or deletion of student personal data. To exercise these rights, contact us at privacy@owlio.co. We will respond to all requests within 30 days.

Cookies

Owlio uses essential cookies required for authentication and session management. We use Vercel Analytics for anonymized usage metrics, which does not use cookies for tracking. We do not use advertising cookies or third-party tracking cookies.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify schools and teachers via email or an in-app notification. Continued use of the platform after changes constitutes acceptance of the updated policy.

Contact

For privacy-related inquiries, contact us at privacy@owlio.co.