Privacy Policy

OllieTrail is an educational service operated by AvantiPoint, LLC (“we,” “us,” or “our”). This policy explains how we handle information when parents, guardians, and children use OllieTrail. It covers our website, learning activities, and AI tutor, Ollie.

An adult parent or legal guardian manages each household account and creates the child profiles. Children use the profiles their parent provides; they do not need their own email address or Google or Microsoft account. Please provide only information needed for tutoring. Do not include financial account details, government identification numbers, precise location, or other unnecessary sensitive information in conversations. Parents may stop their child’s use, ask to review or correct information, request deletion, or withdraw permission for further collection by contacting us.

• Parent account information: your sign-in provider’s account identifier, name and email address, household membership, and details you choose to share, such as your preferred name or relationship to a child. We do not receive your Google or Microsoft password.
• Child profiles: name or nickname, birthday or age, grade, selected learning subjects, language background, interests, and learning goals or support needs shared by the parent.
• Learning and conversation information: messages, available transcripts, tutor replies, answers, drawings and scratchpad work, assessment observations, practice history, progress, and summaries used to personalize future sessions.
• Audio: microphone audio when you start a voice session or submit a speaking exercise. Saved exercise recordings are subject to the parent’s recording-retention setting. The app does not save raw Live conversation recordings; conversation text and relevant tutor memory can still be saved.
• Billing: subscription status, Stripe customer and subscription identifiers, payment amounts, refunds, and transaction dates. Stripe collects and processes your payment details in its hosted checkout and billing portal; OllieTrail does not store card numbers or security codes. We send opaque household and subscription identifiers to Stripe, not children’s names, birthdays, conversations, or learning records. Financial records may be retained for accounting, dispute handling, and legal obligations after a child profile is deleted. See Stripe’s Privacy Policy.
• Service information: authentication cookies, technical errors, request times, device and browser information, and AI usage measurements such as model, duration, tokens and estimated cost. Hosting providers process connection information, including IP addresses, to deliver and protect the service.

We use information to provide and secure accounts, link authorized co-parents, deliver tutoring, assess answers, remember relevant learning context, explain progress to parents, manage recordings, troubleshoot problems, and monitor service usage and cost. AI-generated observations are learning aids and can be inaccurate; a parent can correct information through Ollie or the parent controls. We do not sell personal information or use children’s conversations, recordings, or learning profiles for targeted advertising.

OpenAI provides the AI models used for tutoring, voice conversations, recorded speech assessment, generated speech, and review of submitted images or scratchpad work. Relevant messages, audio, images, and learning context are sent to OpenAI to provide those features. The app requests that supported model responses not be stored as hosted conversation history. This setting does not eliminate all provider processing or retention: OpenAI may retain data for abuse monitoring or other purposes under the applicable API terms and project settings. See OpenAI’s Privacy Policy. We do not use your family’s content to train our own general-purpose AI models.

Cloudflare hosts the application, database, and private recording storage and provides security and performance services. We use Cloudflare Web Analytics to understand visits and page performance; Cloudflare may inject its analytics script automatically into hosted pages. Web Analytics does not use analytics cookies or browser fingerprinting to track individual visitors. We do not use Google Analytics. Authentication cookies and browser storage are still used for sign-in, the selected child, and preferences. We do not intentionally send conversation text, recordings, or child profile fields as analytics events. See Cloudflare’s Privacy Policy and Web Analytics documentation.

With an adult’s permission, we use Meta’s Conversions API to measure parent registrations, checkout starts and initial paid subscription purchases from our Facebook and Instagram ads. We share an ad-click identifier when present, a hashed random consent identifier, browser and connection details, the event time, and the purchase amount and currency. We do not share names, email addresses, children’s profiles, conversations, recordings or learning activity through this integration, and we do not install Meta tracking scripts in lessons.

Advertising measurement is off until an adult opts in. Choose Advertising preferences in the website footer to refuse or withdraw permission; tutoring works either way. We honor Global Privacy Control and Do Not Track signals. Permission, attribution details and delivery records expire within 30 days. Withdrawal deletes attribution details and cancels unsent events; it cannot recall events Meta has already received. Meta processes information under its own privacy policy.

Meta’s Privacy Policy

Parents linked to the same household can manage its children and view shared learning information. Link only a trusted co-parent whom you authorize to have that access. Authorized personnel and service providers may access information as needed to operate, support, and protect OllieTrail. Google or Microsoft processes your sign-in under its own privacy terms. We may disclose information when required by law, to protect people or the service, or as part of a business transfer subject to applicable privacy protections. Child profiles and conversations are not public directories or social feeds.

Ollie sends weekly learning reports when there is new activity to share. A report covers the children in your household and is sent separately to each linked parent in their preferred report language. Postmark processes the recipient address, report content and delivery information to send these emails. We do not enable email open or click tracking. You can pause reports or change the language in parent mode, or use the unsubscribe link in an email. We verify an address before emailing child learning details. We retain report snapshots and delivery records for up to 90 days; resetting or deleting a child's learning records removes their saved report content. Emails already delivered remain under the recipient's control. Our AI service may help write summaries using the family's saved learning evidence.

Learning profiles, conversation history, and relevant tutor memory remain available while needed to provide the household’s service, unless deleted or reset. Parents can delete individual saved exercise recordings and choose a recording-retention period from zero to 90 days; the default is seven days. A zero-day setting avoids retaining new exercise recordings. Expired hosted recordings become inaccessible and are removed by scheduled cleanup. Deleting audio does not automatically delete the associated answer or feedback; resetting or deleting the child’s records removes the relevant learning history. Operational records and limited backups may persist where needed for security, recovery, legal obligations, or service accounting. Removing a child profile does not by itself close the adult’s household account. Contact us to request household/account deletion or copies of your information. We retain personal information only for as long as reasonably necessary for these purposes.

Use parent controls to manage child profiles, recordings, and co-parent access. You can use text for conversations, decline microphone permission, end a voice session, or stop submitting recordings; tasks that assess speaking need audio to provide that assessment. Depending on your location, you may have rights to access, correct, delete, obtain a copy of, restrict, or object to processing of your personal information, and to complain to your local privacy authority. Contact us to exercise those rights. We may ask for proportionate information to confirm your identity and authority over a child’s records. We will respond within the period required by applicable law.

We use HTTPS, authenticated access, household-based access controls, and private storage to protect information. No system can guarantee absolute security. Keep your account and parent PIN private and sign out on shared devices. AvantiPoint is based in the United States, and our providers may process information in the United States and other locations. Where applicable, we rely on appropriate contractual and other safeguards for international transfers. For users whose law requires a legal basis, we process information to provide the service you request, with consent where required, to meet legal obligations, and for legitimate security and operational interests subject to your rights.

We may update this policy as the service changes. The effective date identifies the current version. We will provide additional notice or request permission where required for material changes, particularly changes affecting children’s information. AvantiPoint, LLC, 30 N Gould Ste 22434, Sheridan, WY 82801, United States. Send questions or requests through AvantiPoint’s contact page. Please identify your request as an OllieTrail request.