Effective July 2, 2026 · Updated September 24, 2026 · Written for parents, in plain language
The short version: we collect only what's needed to help your child learn, you approve and can see everything, every chat is moderated for safety, we never show ads, and we never sell data. Ever.
StreakOwl ("we", "us") is operated by BSSR Labs (OPC) Private Limited ("BSSR Labs"), Hyderabad, India. This policy covers the StreakOwl mobile and web apps and streakowl.app. Because our users are children in classes 4–10, we hold ourselves to the strictest reading of India's Digital Personal Data Protection Act, 2023 (DPDP) and comparable children's-privacy standards.
A child's account does not become active until a parent or guardian gives verifiable consent by email. Until consent is granted, the app does not store the child's learning activity. Parents can withdraw consent at any time from the Parent Dashboard, which deactivates the child's account.
We do not collect location, contacts, photos (except a problem photo your child explicitly snaps for Ask Owl AI, used only to answer that question), or any advertising identifiers.
Our marketing website (streakowl.app) uses Google Analytics to understand which pages help parents find us — only if you say yes to the cookie notice, with Google's advertising features switched off. You can decline and the site works exactly the same. The StreakOwl app itself — on Android and at web.streakowl.app, where children study — contains no third-party analytics at all. Our payment pages carry no analytics either.
Crash reports. The Android app uses Google's Firebase Crashlytics so we find out when the app crashes and can fix it. A crash report contains the technical error, the app version, technical details of the phone (such as its model, Android version, free memory and storage), and a random ID that Crashlytics creates for that installation. It never contains your child's name, email, account, answers or messages, and we never link a report to an account. Crash reports are used only to fix bugs, never for analytics or advertising, and Google deletes them after 90 days. The web app at web.streakowl.app sends no crash reports.
Every chat message is checked automatically before delivery. Messages containing personal information (phone numbers, emails), links, unkind or unsafe content are blocked. Serious safety concerns — bullying, grooming patterns, or signs of distress — trigger an immediate alert to the parent and are queued for review by our trained safety team, on every plan, free. Children always see a notice that chats are moderated: we protect, we don't spy.
Learning progress is kept while the account is active and for 12 months after a subscription lapses (so streaks and mastery survive a break). Chat messages are retained for 12 months, then deleted. Content blocked for safety reasons may be retained longer where required for child-protection review or by law. You can request deletion of your child's data at any time (see Section 9); we complete deletion within 30 days.
Data is stored on servers located in India. Two things are handled by Google Firebase and may be processed outside India: push notifications (Section 3) and crash reports (Section 6). Neither carries your child's name, email or learning data. Access is restricted to employees who need it to operate the service, with additional controls around chat and safety data. Passwords are hashed, transport is encrypted (TLS), and we run periodic security reviews.
Parents can access, correct, export, or delete their child's data, and withdraw consent, by emailing support@ssrlabs.co.in or using the Parent Dashboard. Step-by-step instructions are on our Delete your account page. We respond within 7 days. If you're unsatisfied, you may complain to the Data Protection Board of India.
If we change this policy in a way that affects children's data, we'll email parents at least 30 days before the change takes effect and ask for fresh consent where the law requires it.
Grievance Officer, BSSR Labs — support@ssrlabs.co.in.