Privacy Policy

1. Introduction

At Owlit, we take privacy seriously—especially when it comes to children. This Privacy Policy explains how we collect, use, and protect information when you use our products and services. We designed Owlit with privacy-first principles: we collect only what's necessary to provide our service, we never sell data, and we give parents full control.

2. Information We Collect

From Parents/Account Holders

• Account information (name, email, password)
• Billing information (processed securely by our payment provider)
• Child profiles (name, age, reading level)
• Device registration information

From Reading Sessions

• Camera data: Images of book pages are processed in real-time to identify text. These images are not stored—they are analyzed instantly and discarded.
• Voice data: Audio of reading is processed to provide coaching. Voice data is deleted immediately after processing and is not used for any other purpose.
• Reading metrics: We store aggregated reading statistics (words read, accuracy rates, session duration) to track progress and provide parent reports.

3. How We Use Information

We use collected information to:

• Provide real-time reading coaching and feedback
• Track reading progress and generate parent reports
• Personalize the coaching experience to your child's level
• Improve our AI models (using anonymized, aggregated data only)
• Send important account and product updates
• Provide customer support

4. Children's Privacy (COPPA)

We comply fully with the Children's Online Privacy Protection Act (COPPA). We require verifiable parental consent before collecting any personal information from children under 13. Parents have the right to:

• Review their child's personal information
• Request deletion of their child's data
• Refuse further collection of their child's information
• Revoke consent at any time

Children interact with Owlit through their reading sessions only. They cannot create accounts, access the internet, or communicate with others through our devices.

5. Data Security

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Device-to-cloud communication uses certificate pinning
• We conduct regular third-party security audits
• Access to personal data is strictly limited and logged
• We maintain SOC 2 Type II compliance

6. Data Sharing

We never sell your data. We may share information only:

• With service providers who help us operate (under strict contracts)
• To comply with legal obligations
• To protect the safety of our users
• With your explicit consent

7. Data Retention

We retain your data only as long as necessary:

• Camera/voice data: Deleted immediately after processing
• Reading statistics: Retained while your account is active
• Account data: Retained until account deletion
• Billing records: Retained as required by law (typically 7 years)

8. Your Rights

You have the right to:

• Access your data and your child's data
• Correct inaccurate information
• Delete your account and all associated data
• Export your data in a portable format
• Opt out of marketing communications

To exercise these rights, contact us at privacy@owlit.com or use the settings in your parent dashboard.

9. International Users

Owlit is operated from the United States. If you are accessing our services from outside the U.S., please be aware that your information may be transferred to and processed in the U.S. We comply with GDPR for European users and provide equivalent protections regardless of location.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via email and by posting the new policy on our website. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this Privacy Policy or our data practices: