Privacy Policy for OwlMaster

This Privacy Policy describes how Space Endurance ("We", "Us" or "Our") collects, uses and discloses information when You use the OwlMaster application (the "Application" or the "Service"), and the choices You have.

Summary

• Your questions, photos, answers, notes and practice history are stored on Your device. They leave Your device only if You are 13 or older, sign in with Apple or Google, and turn on Cloud Backup.
• The first time the Application opens, it asks for the age range or the birth month and year of the person using the device. The birth month and year are not saved or sent anywhere. The Application keeps only whether the person is 13 or older, and, for younger users, the month they turn 13.
• For users under 13, the Application does not offer sign-in, Cloud Backup or support email, keeps the profile on the device, and sends only the limited technical data described in "Children's Privacy".
• We do not sell personal information, show ads, or use third-party analytics or advertising tools. For users 13 or older, the Application sends weekly anonymous counts of how the scan clean-up tools were used, described below.

Definitions

• Account means the account the Application creates for You. It is anonymous unless You sign in with Apple or Google.
• Application refers to OwlMaster, the software program provided by the Company.
• Company refers to Space Endurance, New York, United States.
• Device means the phone or tablet on which You use the Application.
• Question Content means the photos of homework, worksheets, textbook pages and practice problems that You capture or import, and the answers, notes, subjects, text recognized on the Device and practice history associated with them.
• Service Provider means a company that processes data on Our behalf.

Age Screen

On first launch, before any account is created, the Application determines whether the person using the Device is under 13:

• On iOS 26 or later, the Application first asks the system to share the person's age range. You can decline.
• Otherwise, the Application asks for the birth month and year. This screen cannot be skipped, and the answer cannot be changed later.
• The birth month and year are used only to work out the age range on the Device. They are not stored, sent to Us or to any Service Provider, or written to logs. The Device keeps only whether the person is 13 or older, and, for younger users, the month they turn 13 so that the limits described below can lift automatically.

Information We Collect

Stored only on Your Device

• Question Content. Text in the photos is recognized on the Device; photos are not sent to any server for analysis.
• Your display name and avatar, for users under 13.
• The age screen result described above.

Information that stays on Your Device is not collected by Us. If You delete the Application, it is deleted with it.

Sent from every Device

• Account identifier. When You tap Get Started, Firebase Authentication creates an anonymous account with a random identifier. It lets the Service tell Your requests apart and match Your purchases to You.
• Purchase verification. When You subscribe or restore a purchase, the Application sends Apple's transaction information to Our servers, which confirm the purchase with Apple and record which account it belongs to.
• Crash reports. If the Application crashes or hits an error, a report is sent to Firebase Crashlytics. It includes the device model, operating system version, Crashlytics installation identifiers, the IP address the report comes from, and the places in Our code where the problem happened. Reports do not include Question Content or anything You type. For users 13 or older, reports also include the account identifier.
• App Check. Requests to Our servers carry an attestation from Apple's App Attest service so that We can reject requests that do not come from the genuine Application.
• Server logs. When the Application calls Our servers, for example to verify a purchase or delete an account, the request is logged with the IP address it comes from and the account identifier. To limit abuse, Our servers also keep a count of recent requests for each account identifier or for a one-way hash of the IP address.

Sent only for users 13 or older

• Sign-in. If You sign in with Apple or Google, We receive Your name and email address from that provider. With Sign in with Apple You can choose to share a private relay address instead of Your email.
• Profile. Your display name and avatar are stored with Your account so they come back when You sign in on another device.
• Cloud Backup (optional). If You are signed in with Apple or Google and turn on Back Up Questions in Settings, Your Question Content, including the photos, is copied to a private area of Our servers that only Your account can read, so that it can be restored on another device.
• Support requests. If You contact support from the Application, We receive the email You send, and any device and account details You choose to include.
• Scan clean-up statistics. Once a week, the Application sends counts, added up on the Device, of how often the tools that remove pen, highlighter and pencil marks from scans were used and how well they worked. They do not include the account identifier, any device identifier, photos, text or other Question Content.

We do not request location, contacts, microphone access or advertising identifiers. The Application does not register for push notifications; study reminders are notifications scheduled on Your Device.

How We Use Information

• To provide the Service, including creating and maintaining Your account, verifying purchases and managing Your subscription.
• To back up and restore Question Content when You turn on Cloud Backup.
• To find and fix crashes and defects.
• To improve the scan clean-up tools, using the anonymous counts described above.
• To protect the Service against fraud and abuse, including preventing one subscription from being shared across many accounts.
• To respond to Your support requests.
• To comply with legal obligations.

We do not sell or share personal information for advertising, do not show ads, and do not build profiles of users. We do not use Question Content to train artificial intelligence models, and it is never shown to other users or the public.

We do not track users across other companies' apps or websites, so the Service does not change how it works in response to "Do Not Track" signals.

Children's Privacy

OwlMaster is used by students, including children under 13. The Application uses the age screen above to apply the following limits on Devices used by children under 13:

• No sign-in with Apple or Google, and no linking of the anonymous account to one.
• No Cloud Backup. Question Content stays on the Device.
• The display name and avatar stay on the Device.
• No support email from within the Application.
• Crash reports do not include the account identifier.
• Scan clean-up statistics are not recorded or sent.
• This Privacy Policy is shown in full inside the Application, without opening Our website.
• The Application includes no analytics, advertising or marketing tools.

What is collected from children under 13

Only persistent identifiers and related technical data, used solely to support the internal operations of the Service:

We do not use these identifiers to contact a specific person, for behavioral advertising, to build a profile about a user, or for any purpose other than the internal operations listed above. To keep it that way, We do not collect names, email addresses or other contact information from children under 13, We do not link crash reports to the account identifier for children under 13, and only the Service Providers listed below receive this data, under their terms for processing data on Our behalf.

Parents' choices

A parent or guardian can delete the child's account and all data associated with it at any time with Delete Account in Settings, or ask Us to do so, and can ask Us what information We hold, by emailing the address at the end of this policy. Deleting the Application removes everything stored on the Device.

Service Providers

Our database and file storage, including Cloud Backup, are located in the United States.

Google's privacy information for Firebase is at https://firebase.google.com/support/privacy and Apple's privacy policy is at https://www.apple.com/legal/privacy/.

Data Retention

Your account is deleted when You delete it, or automatically when it has not been used for 12 months and has no active subscription. This applies to all users, including children under 13. When an account is deleted, We delete its profile, Cloud Backup copy and sign-in credentials. Firebase removes deleted accounts from its backup systems within 180 days.

If We delete an inactive account, the questions stored on Your Device are not deleted. The next time You open the Application, it keeps them and continues with a new account.

Deleting Your Information

• Delete individual questions and their photos at any time in the Application.
• Turn off Cloud Backup and choose to delete the cloud copy.
• Use Delete Account in Settings to delete Your account and all data associated with it.
• Email Us to ask what information We hold about You, or to correct or delete it.

We respond to requests as required by applicable law. Before acting on a request, We may ask for information that confirms it comes from You or, for a child under 13, from the child's parent or guardian. We will not treat You differently for making a request.

Records of subscription purchases are also held by Apple and are governed by Apple's policies.

Disclosure of Your Information

We disclose personal information only to the Service Providers listed above, or when required by law or in response to valid requests by public authorities, to protect the rights, property or safety of the Company, Our users or the public, or as part of a merger, acquisition or sale of assets. In the last case, We will give notice before Your information becomes subject to a different privacy policy.

Security

Requests from the Application are verified before Our servers accept them, data is encrypted in transit, and Cloud Backup data can be read only by the account it belongs to. No method of transmission or storage is completely secure, and We cannot guarantee absolute security.

Changes to This Privacy Policy

We will post any changes here and update the "Last Updated" date. If a change affects how We handle information from children under 13, We will update the Application before the change takes effect. Where the law requires it, a significant update will not be available to a user under 18 until their parent or guardian approves it through the App Store.

Contact Us

If You have questions about this Privacy Policy, or are a parent or guardian with a request about a child's information, email [email protected]. For help using the Application, email [email protected].