Your family's learning stays in your family's hands.

Draft last updated: July 30, 2026 · Effective date: [set at launch]

The short version

• Your child's lessons, quiz answers, scores, progress, and voice are processed and stored on your device. We never receive them — there is no account, no sync, and no server holding a profile of your child.
• OUMA contains no advertising, no third-party analytics, and no trackers. We do not sell, rent, or share personal information with anyone, for any purpose.
• The only personal information we ever hold is email you choose to send us (waitlist, support), used solely to reply and kept until you ask us to delete it.
• Delete the app, and your family's learning data is deleted with it. That's what on-device means.

Who we are

OUMA is made by the studio behind ouma.app [legal entity name and jurisdiction to be inserted before launch]. For anything in this policy, contact waitlist [at] ouma [dot] app.

What data exists, and where it lives

What the OUMA app collects and sends to us

Nothing. OUMA has no user accounts, no cloud sync, no advertising SDKs, no third-party analytics SDKs, and no crash-reporting service that transmits personal information. The AI model that teaches, quizzes, and grades runs entirely on your device. Our intended Apple privacy "nutrition label" for OUMA is Data Not Collected.

When the app uses the network at all

• One-time model download. On first run, OUMA downloads its AI model (~4.4 GB) over Wi-Fi from [model distribution host — to be named before launch]. Like any internet download, the server involved sees standard connection metadata (such as your IP address) for the duration of the download. The download carries no information about your child or their learning.
• App Store purchases and updates. Handled entirely by Apple under Apple's privacy policy. We receive the aggregate reporting Apple provides to every developer — counts and revenue, never the identity of a purchaser or learner.
• That's the complete list. Lessons, quizzing, grading, and progress never touch the network.

Children's privacy (COPPA)

OUMA is built for learners, including children under 13 — and its architecture is our COPPA posture: we do not collect personal information from children. Specifically:

• Your child's voice is transcribed on the device. Audio is not uploaded, and no voiceprints are created, stored, or transmitted.
• We do not use children's data to train AI models — ours or anyone else's. The model your child talks to was trained before it ever reached your phone, and nothing your child says changes it or leaves the device.
• There is no behavioral advertising, no profiling, and no contact information requested from a child.
• Parents control everything, because everything is on a device the parent owns: to review your child's data, open the app; to delete it, delete the app.

For schools, co-ops, and districts (FERPA)

Because OUMA processes and stores all learning data on the student's own device and transmits none of it to us, no student education records are created, held, or accessible on our systems. Schools evaluating OUMA for FERPA purposes should note that there is no data-sharing agreement to sign because there is no data flow to govern — we are glad to confirm this in writing for your records.

The ouma.app website

This website is static. It sets no cookies, runs no analytics, and embeds no third-party trackers. If you email the waitlist or support address, we use your email to respond and to contact you about OUMA. We do not add you to anything else, and we delete your correspondence on request.

Data retention and deletion

• Learning data: retained on your device until you delete it in the app or delete the app itself. We cannot delete it for you — or read it — because we never have it.
• Email: retained while we correspond with you; deleted on request at any time.

Security

On-device data is protected by iOS device encryption and Apple's app sandboxing — the same protections that guard your photos and messages. The strongest security statement we can make, though, is architectural: data that never leaves your device cannot be breached from our side, because there is no "our side" holding it.

Your rights (GDPR, UK GDPR, CCPA, and similar laws)

Privacy laws around the world grant rights to access, correct, delete, and port personal data, and to object to its processing. Because the only personal data we hold is correspondence you sent us, exercising these rights is simple: email waitlist [at] ouma [dot] app and we will confirm, show you, or delete what we have. For California residents: we do not sell personal information and we do not "share" it for cross-context behavioral advertising, as those terms are defined in the CCPA/CPRA — there is nothing to opt out of.

Changes to this policy

If this policy changes in any material way — especially any change to the on-device architecture described above — we will post the new version here with a new date and a plain-language note about what changed. We consider the on-device promise the product itself; weakening it quietly is not something an update will ever do.

Contact

waitlist [at] ouma [dot] app — privacy questions get straight answers. It's the whole point of the product.