Privacy policy
Owlimind is a learning app for children aged 3–8 (the “app”). Developer and data controller: Owlimind, Ukraine (“we”). Privacy contact: hello@owlimind.com.
1. What the app does not have
- ads, advertising SDKs or an advertising ID;
- third-party analytics, third-party crash reporting or trackers;
- location, or access to the camera, microphone, contacts or photos;
- chats or contact with other users;
- sign-in with Google, Facebook or other social networks.
2. Data on the device
To work, the app stores on the device: the child's name or nickname (as entered by the parent), birth year, avatar, age track, settings, answers, stars, coins, rewards, progress and play time, plus the parent's settings (limits, daily goal, reminders). This data is used to adapt difficulty and to show the parent report. Until a parent signs in, it never leaves the device. We recommend entering a first name or nickname, not a child's full name.
Voice-overs are built into the app. If a phrase has no recording, the device's built-in text-to-speech engine reads it; we do not send that text anywhere.
3. Reminders
Reminders are off by default. Only a parent can turn them on, in the settings behind the parental gate. They are local notifications: the device schedules them itself, without our server or push services. Notification permission is requested only when reminders are switched on.
4. Parent account and sync (optional)
An account is optional. It is used to move children's progress to another family device. A parent signs in with a one-time code sent to their e-mail; there is no password.
If a parent signs in, the following is sent to our server over an encrypted connection (TLS):
- the parent's e-mail — for sign-in;
- the data in section 2: child profiles (name or nickname, avatar, birth year, track, settings), answers, progress, rewards and coins;
- a random installation ID created by the app itself (not a hardware or advertising ID);
- purchase information (see section 5).
Sync runs from the parent area and quietly when the app starts. The children's part of the app never contacts the server.
5. Purchases
Purchases are handled by Google Play (later also the App Store). We never receive payment details. If a parent is signed in, our server receives the product ID and purchase token and verifies them with the Google Play Developer API, so the full version works on all devices of the account.
If purchases are not yet available in the parent's country, the parent can mark the plan they would like to buy. The app then anonymously sends the chosen plan, the country from the device settings and the date to our server — no e-mail and no child data. These marks show us demand by country.
6. Who processes data on our behalf
| Service | Purpose | Location |
|---|---|---|
| Supabase (database, sign-in, server functions) | account storage and sync | EU, Frankfurt (Germany) |
| Brevo (e-mail delivery) | the sign-in code e-mail to the parent | EU |
| Google Play | payments and purchase verification | under Google's terms |
These services process data only for the purposes listed. We do not sell data, share it for advertising or use it for profiling.
7. Children
The app is made for children and for parents to use together with them. A child cannot create an account, make a purchase, open an outside link or change settings — all of these are behind a parental gate. We do not collect a child's data without the parent and never ask a child for contact details. The app is built to Google Play's rules for apps in the Families programme.
8. Retention
- Data on the device — while the app is installed or until a parent deletes the profile.
- Server data — while the parent account exists. When the account is deleted, we delete it immediately.
- Anonymous demand marks are not linked to a person and are kept while useful for statistics.
9. Deletion
Uninstalling the app deletes all data on the device. The account and all server data can be deleted in the parent area: “Parent account” → “Delete account and data” (immediately and permanently), or by e-mailing hello@owlimind.com (within 30 days). See delete account and data.
10. Your rights
You can request access to your data, a copy, correction or deletion, restrict processing or object to it — write to hello@owlimind.com. Account data is processed at your request (sync is a service you turn on yourself). You can also complain to the data protection authority in your country.
11. Security
Data is transferred only over TLS. On the server each account can see only its own rows (row-level security), and service keys are kept only on the server.
12. Changes
If this policy changes, we will publish the new version on this page with a new date and tell you about significant changes in the app.
13. Contact
Owlimind, Ukraine. E-mail: hello@owlimind.com