VOLO

Privacy policy

Last updated:

1. Controller

Evgeni Hasin, Germany
Email: contact@idearig.com

2. Data, purposes and legal bases

  • Account (email address, name, password and PIN as hashes, optional photo, settings) and kid profiles (first name, avatar or optional photo, language, school type, grade, notes, topics, goals, levels, rewards): provision of the service, Art. 6(1)(b) GDPR.
  • Worksheets and photos of written work, with the results, feedback, reports, summaries and rewards derived from them: provision of the service, Art. 6(1)(b) GDPR.
  • Abuse prevention (IP address for rate limits, daily usage counters per kid, notes on photos addressed to the checker): Art. 6(1)(f) GDPR; legitimate interest in secure and fair operation.
  • Visit statistics without cookies: landing, sign-in and sign-up pages, Art. 6(1)(f) GDPR (legitimate interest in measuring use); the parent console with the consent given when accepting the Terms, Art. 6(1)(a) GDPR.
  • Consent records: Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR.
  • Server logs (IP address, browser, time, page): Art. 6(1)(f) GDPR; legitimate interest in secure operation.

Providing the account data is required to use the service. Kids have no accounts; their data is provided by the parent or legal guardian.

3. Recipients

Processors: Vercel Inc. (hosting, file storage, visit statistics), Neon Inc. (database), Anthropic PBC (AI processing of worksheets, photos of written work and the related profile data; no names or email addresses), Resend Inc. (email delivery).

4. Transfers to third countries

Data may be transferred to the USA. Transfers are based on Art. 44 ff. GDPR (adequacy decision or standard contractual clauses).

5. Storage period

Account and kid data: until the account or the kid profile is deleted. Photos of written work: the last 10 worksheets per kid. Rate-limit data: 24 hours. Consent records: as long as the account exists.

6. Your rights

Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), objection (Art. 21) and withdrawal of consent with effect for the future (Art. 7(3) GDPR), by email to contact@idearig.com. Right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

7. Automated decision-making

There is no automated decision-making within the meaning of Art. 22 GDPR.