How we look after your family's data

Draft, last changed 3 November 2026. It hasn't yet had a review by a data protection adviser.

What we keep

• Your email and login, which are shared across our family of apps. Each app keeps its own data separately.
• Your child's nickname, year group, owl name and a scrambled 6-digit PIN. We never ask for a child's email or full name.
• Chats, deleted after 30 days unless part of a safety flag.
• Session summaries and safety check records, kept for 12 months. Safety flags are kept for up to 24 months.

Who else sees it

• Anthropic (Claude) writes the owl's replies and reads homework photos. Photos are never stored by us.
• OpenAI runs the safety checks. It sees what your child types and what the owl says.
• Supabase stores the data in Ireland, on a server in the EU.

We use a nickname, never a full name, with these services. Messages that share personal details aren't passed to the owl's writing model, but do go through the safety checks. Screens used by children have no analytics or advertising.

What parents can see

A weekly summary and alerts by default. You can see the exchange around an alert, and your child is told when you've looked. If you turn on full transcripts, your child sees a badge whenever it's on.

If a message suggests a child may be being harmed at home, it goes to our reviewer rather than to parents, and that session won't appear in your summaries. A child in danger is always pointed to Childline.

Your choices

You can delete a child's profile, or leave Know-It Owl altogether, from your dashboard. Safeguarding records of held concerns aren't deleted this way. For anything else, contact us through the portfolio site.