Privacy policy
Last updated: August 2025
OLAR AI (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you interact with our website and services. By using the Service, you agree to our collection, use, and sharing of your personal information in accordance with this Privacy Policy.
Please note that Olar AI is constantly testing and improving our product features, including AI-powered tutoring capabilities. Any features discussed in this Privacy Policy may not be available to all users or in all jurisdictions. Certain services may be subject to additional privacy terms.
Account Registration
To register for an OLAR AI account, you provide your email address, name, and user type (student, teacher, or parent). Teachers may also provide school affiliation details
You may register using social logins like Google. When you do, we may receive information from your social login provider, including your email address and basic profile information.
Profile and User-Generated Content
After registration, we create a profile for you that includes information you submit, such as your display name, profile picture, and learning preferences. Your profile will show your learning progress, completed assignments, and achievements.
By default, student profiles in classroom settings are visible to their teachers and classmates. You can adjust privacy settings in your account preferences. Any assignments or other content you submit are considered user-generated content and may be reviewed for educational appropriateness.
AI-Powered Tutoring Features
Our platform offers AI-powered tutoring features where you can interact with intelligent tutoring systems for personalized learning experiences. When you use these features:
Text and voice interactions may be processed by AI services including OpenAI and other third-party AI providers
We may generate, record, and store transcripts of your interactions for improvement purposes
Audio recordings help us enhance speech recognition and personalized learning
AI-generated content may contain errors and should be verified by users or educators
We do not use student data to train third-party AI models (training is disabled for educational users)
Please avoid sharing personal, sensitive, or confidential information during AI interactions
AI responses are clearly marked as AI-generated and not human-authored content
AI Transparency Notice:
AI-generated responses may contain errors and should not be considered as professional, medical, or certified educational advice. Users should verify information and use AI assistance to supplement, not replace, human instruction and critical thinking.
Learning Analytics and Activity Data
We collect detailed information about your educational activities, including:
Time spent on lessons and assignments
Quiz and assessment responses and performance
Learning path progression and completion rates
Device and browser information, IP addresses (retained for 30 days maximum)
Usage patterns to improve our educational methodology
Cookies and Tracking Technologies
We use cookies and similar technologies to:
Maintain your login session and remember preferences
Analyze platform usage for educational improvement
Ensure security and prevent unauthorized access
Provide personalized learning recommendations
We do not use cookies for advertising or cross-site tracking. You can manage cookie preferences through your browser settings, though some features may not function properly if cookies are disabled.
Analytics and Performance Monitoring
We use analytics services to understand platform usage and improve educational outcomes. These services may collect usage patterns, technical specifications, and learning activity data. Analytics data is used solely for educational improvement and platform optimization purposes.
FERPA Compliance for Educational Records
OLAR AI is committed to protecting student educational records in accordance with the Family Educational Rights and Privacy Act (FERPA). When used by educational institutions:
We act as a school official with legitimate educational interest when providing services under contract with educational institutions
Student educational records are used solely for authorized educational purposes
We do not disclose student educational records to third parties without proper authorization
Educational institutions maintain control over student data and can request deletion at any time
Parents and eligible students have the right to inspect and review educational records
Directory information is only disclosed as permitted by the educational institution's policy
Minor Users (Ages 13-17)
Users must be at least 13 years old to create an account. Users aged 13-17 receive enhanced privacy protections:
Privacy Protections for Minors:
Enhanced privacy settings by default
Contact sync features are disabled
Limited profile information sharing
Voice/audio data is not used for product improvement
Additional Protections in Certain Jurisdictions
Minor users in the US, EU, UK, and other specified jurisdictions receive additional protections:
Enhanced content moderation and safety features
Restricted third-party data sharing
Users Under 16
All users under 16 receive additional protections including disabled third-party behavioral tracking and non-personalized content delivery.
Data Storage and Security
We use Supabase to securely store your data with industry-standard security measures:
All data is encrypted in transit and at rest
Row-level security policies ensure users only access appropriate data
Regular security audits and monitoring
Secure authentication and authorization systems
Data centers located in the United States with SOC 2 Type II compliance
Data Retention Policy
We retain your data according to the following schedule:
Student Educational Records: Retained as long as the educational relationship exists, then deleted within 12 months unless legally required to retain longer
Account Information: Retained until account deletion is requested
Audit Logs: Retained for 3 years for security purposes
Payment Records: Retained for 7 years for tax and legal compliance
Support Communications: Retained for 2 years for service improvement
Your Data Subject Rights
You have the following rights regarding your personal information, in addition to any other rights required by applicable law:
Know: What personal information we have collected about you
Access: Request a copy of your personal data
Sharing Transparency: Know what personal information we have shared with third parties
Opt-Out: Opt out of sharing your personal information with third parties
Object: Object to our processing of your personal information
Sensitive Data Limits: Request limitation of sensitive personal information use
Non-Discrimination: Not be discriminated against for exercising your rights
Deletion: Request deletion of your account and associated data
Correction: Update or correct inaccurate information
Portability: Export your data in a machine-readable format
Consent Withdrawal: Withdraw any consent you previously gave us
Account Deletion: Delete your account through your settings
You may update your information and exercise certain rights through your account Settings. For data access or deletion requests, please contact us at official@olar.ai
Please note these rights are not absolute and may be limited by legitimate reasons such as identity verification requirements, legal compliance, or protection of third-party rights. You may also have the right to make a GDPR complaint to the relevant Supervisory Authority in your jurisdiction.
Payment Information & Processing
Our payment processing is handled securely by Stripe, a PCI-DSS Level 1 certified payment processor:
Payment information is collected and processed directly by Stripe
We do not store complete credit card details on our servers
All payment data is encrypted using industry-standard protocols
Transactions are processed in compliance with international security standards
Payment records are retained for tax and legal compliance purposes
Cookies and Tracking Technologies
We use cookies and similar technologies to:
Maintain your login session
Remember your preferences and settings
Analyze platform usage for improvement purposes
Ensure security and prevent fraud
We do not use cookies for advertising or tracking across third-party websites. You can manage cookie preferences through your browser settings.
International Data Transfers
OLAR AI is based in the United States and processes data in the United States, which may not provide equivalent levels of data protection as your home jurisdiction. If you are accessing our services from outside the United States:
Your data may be transferred to and processed in the United States
We ensure appropriate safeguards are in place for international transfers
For EU users, we comply with GDPR requirements for cross-border data transfers
Data processing agreements include standard contractual clauses where required
We adhere to international data protection frameworks where applicable
Classroom-Specific Privacy Features
When our platform is used in classroom settings, additional privacy protections apply:
Teachers can only access data for students in their assigned classes
Student email addresses are visible to teachers for legitimate educational communication
Class rosters and assignment data are isolated between different classes
Teachers can manage classroom privacy settings and student data access
Students can leave classrooms at any time, removing teacher access to their data
Educational institutions maintain control over classroom data and can request deletion
Do Not Track
Our Service is not designed to respond to "Do Not Track" signals sent by some browsers. However, we provide privacy controls through your account settings and limit tracking to educational improvement purposes only.
Third-Party Service Providers
We use trusted third-party service providers who are contractually obligated to protect your data:
Stripe: Payment processing (PCI-DSS Level 1 compliant)
Supabase: Database and authentication services (SOC 2 Type II compliant)
OpenAI and other AI providers: AI tutoring and content generation (student data training disabled, privacy-enhanced processing)
Lovable: Platform hosting and development services
AI Provider Data Handling
When using AI features, some data may be processed by third-party AI services:
We disable training on user data for all AI providers to protect privacy
AI interactions are processed securely and not used to improve third-party models
Student educational data receives enhanced protection under FERPA compliance agreements
AI providers are contractually bound to protect user privacy and delete data after processing
No personal information is included in AI training datasets
Accessibility Commitment
We are committed to ensuring our platform is accessible to all users:
We strive to meet WCAG 2.1 AA accessibility standards
Regular accessibility audits and improvements
Alternative formats available upon request
Feedback welcomed to improve accessibility features
For privacy-related questions, concerns, or to exercise your rights, contact: official@olar.ai
How We Process Your Information
We process your personal information according to the following legal bases: to provide educational services you request, to promote our legitimate interests in improving education, to comply with legal obligations, and with your consent where required. Specifically, we may process and share your information to:
Provide Educational Services: Maintain learning progress, deliver personalized content, enable classroom features, and provide customer support
Improve Our Platform: Analyze usage patterns, fix bugs, conduct educational research, and enhance AI tutoring capabilities
Communicate With You: Send essential service messages, learning reminders, progress reports, and platform updates
Ensure Safety and Compliance: Moderate content, prevent fraud, comply with legal requests, and protect user safety
Share with Service Providers: Work with hosting providers (Supabase), payment processors (Stripe), analytics services, and AI services (OpenAI) under strict data protection agreements
Links to Third-Party Websites
Our Service may contain links to other websites or educational resources. We are not responsible for the privacy practices of other websites. This Privacy Policy applies only to information collected by Olar AI. When you click external links, you will be subject to those third parties' privacy policies.
Supplemental Terms in Certain Jurisdictions
In some jurisdictions, our Service may be subject to additional privacy laws or regulations. For users in those jurisdictions, applicable local laws will take precedence over this Privacy Policy to the extent they conflict. We comply with state privacy laws including the California Privacy Rights Act and similar regulations.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes to our practices or for legal compliance. Material changes will be communicated through:
Posting the updated policy with a new "Last Updated" date
Email notifications for significant changes affecting user rights
In-platform announcements where appropriate
Direct notice to educational institutions for changes affecting student data
At least seven (7) days advance notice for material changes
