Short version: we collect what we need to run your account and your learning progress, we do not sell your data, and there is no advertising or tracking in the Octopus Education apps.
Octopus Technology is the seller and the controller of the data described here. Contact: [[TODO OWNER: contact email]]. Postal address: [[TODO OWNER: business mailing address]]. This policy is a plain-language draft and is not legal advice.
Payment. Payments are processed by Stripe. Card numbers go to Stripe and never reach our servers. Stripe shares with us a customer ID, your email address, and the status of your subscription.
Account. Your username, email address and sign-in details, held by our own authentication service. Passwords are stored as one-way bcrypt hashes, not as readable text. Our servers' disks are not currently encrypted at rest, so we do not claim encryption at rest.
Learning data. Your progress, flashcard state, answers, saved structures and designs, and anything you upload (for example a sketch or photo of an answer, or a PDF you add), kept against your account.
Technical data. Server and network logs, including IP addresses and request details, kept for security and troubleshooting.
If you use our health or workout-logging app, it stores what you enter: for example workouts, exercises, sets, body weight, meals and notes. We use it only to show it back to you and to run features you ask for. We do not sell it, share it for advertising, or use it for marketing.
You choose whether to enter it, and you can stop at any time. To withdraw consent and have it deleted, use the deletion procedure below. Some assistant features may send your workout history or your question to an AI model provider (see below) so that it can answer; if you do not want that, do not use the assistant with health entries. Our service is a personal logging tool. It is not a medical product, is not a substitute for professional medical advice, and is not a HIPAA-covered service. [[TODO OWNER: owner/counsel: decide whether a separate consumer health data privacy policy is required in states with such laws, e.g. Washington]]
Account and learning data are stored on servers we rent from Hetzner, not with an advertising or analytics company. [[TODO OWNER: server location / data-centre country (Hetzner site not stated in repo)]]
Stripe processes payments under its own privacy policy.
Cloudflare provides DNS, content delivery and TLS for our sites, so your requests pass through its network and it may log IP addresses and request details.
Hetzner hosts the servers that hold your data.
AI model providers. Some tutor and assistant features send your question (and an image, if you attach one) to a model provider to produce a reply. Depending on the feature, that may be Anthropic, OpenRouter (which routes to other model makers), Google (Gemini), xAI, or a model running on our own hardware. Each handles the data under its own terms. Features that use stored lessons and exercise banks do not use these. [[TODO OWNER: owner: confirm the provider list matches what is enabled at launch, and the provider data-retention settings (HANDOFF 81)]]
PubChem. The Science app looks up compounds you search for on PubChem, a public database, so the search text is sent there.
Embedded widget (monero.how). Every page of this marketing site, in the Menu, embeds a widget from monero.how. Loading it lets that provider see your IP address and browser details. It is not used by the Octopus Education apps.
Others we use for operations may include Discord and Telegram (internal alerts and bots), Tailscale (private network for our administrators), GitHub (source code), and Let’s Encrypt (certificates). They are not intended to receive your account content. [[TODO OWNER: mail/SMTP provider not yet chosen; name it here]]
We do not sell your personal information and do not share it for cross-context behavioural advertising.
The Octopus Education apps contain no advertising and no analytics or tracking scripts. They use a sign-in cookie so you stay logged in, and your browser may store your settings and progress locally.
This marketing site (octopustechnology.net) loads no advertising scripts. Each page's head carries an ownership meta tag so an ad network can confirm this domain; that tag does not load an ad. The site also publishes an ads.txt file that authorises an ad seller for our separate blog. Our blog is a separate site that may show ads; if it does, it will carry its own cookie notice and consent choice. [[TODO OWNER: before AdSense goes live: cookie notice and consent (HANDOFF 39)]]
We keep account, learning and health-log data while your account exists. Server logs are kept for a limited period [[TODO OWNER: log retention — plan is 90 days; assistant conversations 12 months (HANDOFF 82, not yet enforced)]]. Payment records are kept as long as tax and accounting law requires. After you ask for deletion, copies in backups may persist for up to six months until they rotate out, and copies held by providers above follow their own retention.
Self-service export and deletion is not built yet. To request it, email [[TODO OWNER: contact email]] from the address on your account. We will confirm your identity, delete your account and its data from our systems, and tell you when it is done. [[TODO OWNER: response time promise, e.g. 30 days]] On request we will also send you a copy of your data in a common format.
Depending on where you live (for example under California and other US state privacy laws, or the GDPR), you may have the right to know what we hold about you, access and correct it, receive a portable copy, delete it, and opt out of sale or sharing of personal information. We do not sell or share personal information as those terms are defined, so there is nothing to opt out of. We will not treat you worse for exercising a right. Email [[TODO OWNER: contact email]] to make a request; if we refuse, you may ask us to reconsider and you may contact your state attorney general or data-protection regulator. Applicable law and regulator: [[TODO OWNER: applicable data-protection law / supervisory authority]]
We use access controls and keep software patched, but no system is perfectly secure. If a breach affects your personal information we will notify affected users and regulators where the law requires it, by email, without unreasonable delay.
Octopus Education and our other apps are for adults aged 18 and over. They are not directed to anyone under 18, and you must confirm you are at least 18 to create an account. We do not knowingly collect personal information from anyone under 18. If we learn that an account belongs to someone under 18, we will delete it and its data. If you believe we have information from a person under 18, email [[TODO OWNER: contact email]] and we will delete it.
We will update this page if our practices change; the date above shows the latest version.