Privacy policy

Who we are

Umilo is an independent product. Umilo decides what data is collected and why, which makes it the controller of the data described here. The account holder is always an adult parent or guardian.

How a homework check works

Every check follows the same four steps.

• A parent photographs the homework or types a topic.
• The photo or topic goes once to OpenAI, which reads it and drafts a short check of 5, 10 or 15 multiple-choice and true-or-false questions.
• The parent confirms the subject and the concepts, then sends a link. The child needs no account.
• The child taps answers. The parent sees a cautious per-concept readout and one coaching example.

Homework photos

A photo of a child's homework is the most sensitive thing Umilo touches, so it follows a single rule: Umilo never keeps it.

• The photo is resized in your browser before it leaves your device.
• It is sent to the server once, for one analysis, and held only in memory while that analysis runs.
• It is never written to the database, never written to file storage, and never written to logs.
• What survives the analysis is only the subject, the list of concepts, and a short scrubbed summary that you confirm before anything is sent to your child.

What Umilo stores

Umilo keeps only what it needs to show a parent how their child is doing.

• Parent account: the email address and name supplied by Clerk when the account is created.
• Child profile: the child's name, exact grade, an optional display name, an optional avatar image, the content language, and the timestamp of your consent.
• Check content: the confirmed subject, the concepts, the short scrubbed summary, and the generated questions.
• Child responses: which option was tapped, and when.
• Results: the readout and the coaching example shown to you.
• Optional feedback: a parent survey answer, and any question reports you file.

The page your child sees

The page a child opens is deliberately plain, and it stays that way.

• No advertising, and no links to any other website.
• No cookies used for tracking.
• No score, no timer, and no leaderboard.
• Product analytics run in memory-only mode and record the attempt identifier alone — no name, no IP address, no page address, and no referrer.

Why Umilo may hold this data

The child never signs up. The parent does, and the parent supplies the child's data.

• Under COPPA, the parent is the account holder, provides the child's information, and gives verifiable consent when the child profile is created.
• For families in the EU, the UK and Ukraine, that parental consent together with the contract to provide the service is the legal basis under the GDPR and its rules for children's data.
• The consent timestamp is stored on the child profile, so you can always see when it was given.

Who else processes the data

Umilo uses a small set of vendors. Each one sees only what its job requires.

• Clerk — parent sign-in and account management.
• Supabase — the PostgreSQL database and the file storage that holds avatar images, in the EU region eu-west-1.
• OpenAI — reads the homework photo or the topic and drafts the questions. Under the OpenAI API terms, data sent through the API is not used to train their models.
• Paddle — merchant of record for payments. Paddle handles the card details; Umilo never sees them.
• PostHog — product analytics.
• Resend — transactional email to the parent.
• Vercel — hosting.

How long Umilo keeps things

Different data has a different life.

• Homework photos: not kept at all.
• Attempt data — responses, readouts and coaching text: deleted 12 months after the check is completed. Automated deletion on that schedule is planned; until it ships, deletion is carried out on request.
• Share links: they stop working 30 days after the check is created, and you can stop one sooner from your dashboard.
• Account and child profiles: kept until you delete them.

Deleting data

You are in control of everything Umilo holds about your family.

• Deleting a child profile also removes that child's checks, responses and readouts.
• Deleting the account removes the Clerk record and cascades the deletion through the database.
• Deletion is permanent. Umilo cannot restore a deleted profile or a deleted account.

Your rights

Depending on where you live, you can ask Umilo to do the following. Umilo answers within 30 days.

• See the data held about you and your child.
• Correct anything that is inaccurate.
• Delete a child profile, or the whole account.
• Receive a copy of the data in a portable form.
• Withdraw consent for a child, which means deleting that child's profile.
• Complain to your national data protection authority.

Changes to this policy

If this policy changes in a way that affects what Umilo collects or who processes it, the account holder is told by email before the change takes effect. The date at the top of this page always shows the version you are reading.

Contact

Questions about this document? Write to PLACEHOLDER_SUPPORT_EMAIL.

PLACEHOLDER_SUPPORT_EMAIL is a placeholder. It must be replaced with a real support mailbox before launch.