Privacy Policy

1. Who we are

Owlivo is made by Aqsa LogicByte (aqsa-logicbyte.com). We are responsible for the personal information described in this policy.

Owlivo is an interactive learning app for children aged 4–10, available on Android through Google Play. Guided by Owlivo the owl, children explore reading, maths, brain games, general knowledge and creativity, earn stars, badges, coins and pets, and travel across a world map. A parent dashboard shows you how your child is getting on.

Questions about this policy or your child's information? Email us at aqsahamzadev@gmail.com.

2. Children's privacy

Owlivo is made for young children, so we've built it around their privacy, with children's privacy laws such as COPPA (in the United States) and the GDPR, including its rules for children (often called GDPR-K), in mind.

• Only parents and legal guardians aged 18 or over can create an account. A child never has their own account, email address or password.
• Your child uses Owlivo through a child profile that you create under your account.
• A child profile holds only your child's first name or nickname, their age or age range, and the avatar character you choose.
• We never collect your child's photo, email address, phone number, location, contacts or exact date of birth.
• AI and voice features stay off until you turn them on and give your consent, and you can turn them off at any time.
• There are no third-party ads, no chat between children and no public profiles.

When you sign up, you confirm that you are a parent or legal guardian aged 18 or over, and you accept our Terms of Use and this Privacy Policy. We keep a record of which version you accepted and when.

If you think a child has given us information without a parent's involvement, please email us at aqsahamzadev@gmail.com so we can look into it.

For a short summary written for parents of what we collect about your child, why, and what you can do about it, read our Children's Privacy Notice.

3. Information we collect

About you, the parent:

• Your name and email address.
• Your profile photo, if you choose to add one.
• Your password, stored only as a one-way (bcrypt) hash, so we can't see it.
• Email-verification and password-reset codes. These are stored hashed and expire after 10 minutes.
• Your consent record: which version of our Terms and Privacy Policy you accepted, and when.
• Your sign-in sessions. The session tokens are stored hashed, and a session ends when you sign out or after 30 days without use.
• The IP address you connect from and the email address you type in, used briefly to limit repeated sign-up, sign-in and code attempts. These are short-lived security counters, not a profile of you.
• A push notification token for each phone you use Owlivo on, and its time zone, so we can send the notifications you choose.
• The make and model of each phone or tablet you sign in on, its Android version and when it was last used, so you can see and manage your devices. We never collect a device's name or any hardware identifier.
• Your Google Play purchase records: the plan you bought, its purchase token, and its dates and renewal status, which Google Play tells us so we can unlock your plan. We never see or store your card details.
• Any emails you send us for support.

About your child:

• The first name or nickname, age or age range, and avatar character you enter when you create their profile.
• Learning activity and progress created as your child uses Owlivo: the lessons, games and stories they complete, their scores, stars and rewards, and the time they spend.
• If you turn on AI Buddy or the microphone for your child: the questions they ask Owlivo and the answers they get, kept for 7 days. A voice clip is used to turn it into text and is not kept. This is described in "AI and voice features" below.

We also use privacy-friendly, aggregated usage analytics to understand how Owlivo is used. These do not use advertising identifiers.

4. How we use information

• To create your account, verify your email address, sign you in and keep your account secure.
• To run Owlivo for your child: saving their progress and rewards, and adapting the difficulty of activities to them.
• To show you your child's progress in the parent dashboard and to prepare your weekly report.
• To check your subscription status and unlock your plan's features.
• To send you account emails, such as verification codes, and push notifications if you allow them.
• To answer your support emails.
• To protect Owlivo from misuse, for example by limiting repeated sign-in attempts.
• To improve Owlivo, using aggregated usage analytics without advertising identifiers.

We never use your or your child's information for advertising, and we never sell it.

5. AI and voice features

Owlivo offers optional AI and voice features on Premium and Family: the AI Learning Buddy (Ask Owlivo), voice quizzes and read-aloud practice. Wherever they appear, these rules apply:

• AI Buddy and the microphone are two separate switches for each child. Both are off until you turn them on and give your consent, and you can turn them off at any time.
• The AI Learning Buddy answers only child-safe, educational topics, and every answer passes a safety check before your child sees it.
• To answer, we send Groq your child's age and the question text. To check the answer, we send Groq the question and the answer. We never send your child's name, account or contact details, and Owlivo stops questions that look like personal details (such as a name, address or phone number) before they reach Groq. A child could still say something personal in a way Owlivo doesn't catch, so it would go to Groq inside the question.
• To hear your child's voice, we send the short voice clip to Groq to be turned into text. Owlivo never stores the recording: it is only held in memory while it is sent, then dropped.
• We keep your child's questions and the answers for 7 days so you can read them in the parent area. You can clear them at any time, and they are deleted automatically after 7 days.
• Your child's questions and recordings are never used for advertising and never sold.
• We use third-party AI service providers for this processing, under contracts that limit their use of the data to providing the service to us.

On Premium and Family, if you turn on AI-written reports, the weekly report is written with the help of an AI service (Groq). It receives only your child's age and that week's learning numbers, never their name or any contact details, and doesn't keep or learn from them.

6. No ads, no tracking

• No third-party advertising.
• No behavioural advertising, and no profiling of you or your child for ads.
• No advertising ID.
• We never sell or rent personal information.
• No chat between children and no public profiles.

Our analytics are privacy-friendly and aggregated, used only to improve the app, and use no advertising identifiers. While your child is using Owlivo, no data is shared for advertising.

7. Who we share information with

We share personal information only with service providers that help us run Owlivo, and only what each one needs to do its job:

• Cloud hosting and database providers, which run our service and store its data.
• Email delivery providers, which send our emails, such as verification codes and, on Premium and Family, your child's weekly report.
• Push-notification services (Expo and Google Firebase Cloud Messaging), which deliver notifications to your phone.
• Google Play, which sells and bills subscriptions and tells us your subscription status.
• AI and speech-processing providers, only when you have turned on AI or voice features.
• Content delivery providers, which deliver the app's art and audio.

If you link another parent to your family, they can see and manage your children's profiles, and you can see theirs. Either of you can end the link at any time. When you invite another parent, we email them on your behalf.

We never sell or rent personal information to anyone.

8. International processing

Our service providers may process information in countries other than the one you live in. When that happens, we use appropriate safeguards to protect it.

9. How we keep information secure

• Information is encrypted in transit using HTTPS.
• Passwords, verification codes and session tokens are stored only as hashes.
• Sign-in attempts and code checks are rate-limited to stop guessing.
• Access to personal information is limited to staff who need it.

No system is perfectly secure. If a data breach affects your information, we will notify you as the law requires.

10. How long we keep information

• Your account, child profiles and progress: for as long as your account exists.
• Your profile photo: until you remove it or delete your account.
• Your Google Play purchase records: until you delete your account. Deleting your account does not cancel a Google Play subscription, so cancel it in Google Play to stop billing.
• Verification and password-reset codes: 10 minutes.
• Sign-in sessions: until you sign out, or after 30 days without use.
• Push notification tokens: until you sign out on that phone, reset your password, or after 60 days without use.
• Security counters (keyed on your IP address and, for some, the email address entered): deleted automatically when their short window ends (at most an hour, plus a short delay before the database clears them).
• Questions and answers from the AI Learning Buddy: 7 days, or until you clear them. Voice recordings: not kept.

When you ask us to delete your account, all of your account data is permanently deleted once we have reviewed your request, normally within 30 days. We keep a minimal record that the deletion happened (your name, email address, and the dates of your request and our decision) as proof of the request. Child profiles you added are deleted, even if you share them with another parent. Profiles the other parent added stay with them.

11. Your rights and choices

Children's privacy and data-protection laws, such as COPPA, the GDPR and GDPR-K, and similar laws, give you rights over your child's information. As a parent, you can:

• Review the information we hold about your child.
• Ask us to correct it.
• Ask us to delete it.
• Refuse or withdraw consent to further collection, for example by turning off AI and voice features. This may limit some features.
• Ask for a copy of it.
• Complain to your local data-protection authority.

To use any of these rights, email us at aqsahamzadev@gmail.com. We will respond within 30 days. We may need to verify your identity first, to protect your account.

12. Deleting your account

You can ask us to delete your account at any time: from the app, from this website, or by emailing aqsahamzadev@gmail.com. Child profiles you added are deleted, even if you share them with another parent. Profiles the other parent added stay with them.

In the app, go to the Parents area, then Account, then Delete account. On the web, use Delete your account.

Our team reviews every request before anything is deleted, and we will email you when it is done. What we delete, and the minimal record we keep, are described in "How long we keep information" above.

Deleting your account does not cancel a Google Play subscription. To stop it renewing, cancel it in Google Play.

13. Changes to this policy

If we update this policy, we will change the effective date at the top of this page. For material changes, we will let you know by email or in the app before they take effect, and where the law requires it, we will ask for your consent again.

14. Contact us

For any question about this policy, your child's information or your rights, email Aqsa LogicByte at aqsahamzadev@gmail.com.