Privacy Policy

1. Who This Policy Applies To

Oumie operates in two modes:

• Solo Mode — your school is not an Oumie partner. Your data stays with you and is never shared.
• Partnered Mode — your school has signed a partnership agreement AND you have separately consented to share data with your school. Different sections of this policy apply depending on which mode you are in.

Sections 2, 3, 4b, 4c, 6, 7, 8, 9, 10, and 11 apply to all users. Sections 4a and 5 apply only to Partnered Mode users.

This policy applies to users of the Oumie Chrome extension, the Oumie web dashboard at oumie.app, and any related services operated by Oumie LLC.

2. Information We Collect

Account information

• Your name, email address, and university
• Your year in school, major, and self-reported study preferences collected during onboarding
• Your school calendar feed URL if you choose to connect it, along with the assignment titles and due dates it contains

Study session data

• The domain name of all websites visited while the Oumie extension is active (e.g. "youtube.com", "docs.google.com") — not the full URL, not any page content, not any text from any page
• Time spent on each domain per session, with idle time automatically excluded
• Activity category for each session: study, research, entertainment, or social
• Tab titles on supported study sites only (Canvas, Google Docs, Brightspace, and similar), used solely to match your session to an imported assignment
• Course code if detectable from a supported LMS URL (e.g. a Canvas course ID embedded in the URL)

We do not collect: keystrokes, content of any document, passwords, or anything inside Google Docs, Canvas, Brightspace, or any other application beyond the URL and tab title on supported study sites.

Assignment information you enter manually or import through your school calendar feed is also stored. If you disconnect your calendar, all synced assignment data is deleted from our servers immediately.

3. How We Use Your Information

We use the information we collect to:

• Power your personal study dashboard and generate insights about your study habits
• Calculate your Focus Score and track your streaks and progress over time
• Generate personalized assignment time estimates based on your historical study patterns
• Deliver AI Coach recommendations — your session data is sent to Google Gemini to generate personalized coaching suggestions. Google's handling of API data is governed by Google's API terms.
• Send deadline reminders and notifications via email (Resend) or SMS (Twilio) if you have opted in
• Improve Oumie as a product using aggregated, de-identified behavioral patterns — individual users are never identifiable in product analytics
• Respond to your support requests and communicate with you about your account

4. Information Sharing

4a. With your university

We share your individual data with your university only if two conditions are both true: your school has signed a current Oumie partnership agreement, and you have separately clicked an "I consent" button specifically authorizing data sharing with your school. This consent is a separate step — it is not bundled with account creation or extension installation. If either condition is not met, no individually identified data is ever shared with your school.

You can revoke this consent at any time. See Section 6c.

4b. With service providers

We use the following third-party services to operate Oumie. Each receives only the data it needs to perform its function:

• Render — cloud hosting for our backend servers. Has access to all server-side data at the infrastructure level.
• PostgreSQL (via Render) — our primary database. Stores all user account data, session records, and assignment data.
• Resend — email delivery. Receives your email address and the content of any notification or transactional email we send you.
• Twilio — SMS delivery. Receives your phone number (if you have opted into SMS notifications) and the content of SMS notifications.
• Google Gemini — AI Coach. Receives your study session data and behavioral patterns to generate coaching recommendations. Data handling is governed by Google's API terms.

All service providers are contractually prohibited from using your data for any purpose other than providing their service to Oumie.

4c. Third parties and advertising

We do not sell your data to any third party. We do not use your data for advertising. We do not share your data with data brokers, analytics platforms, or ad networks.

5. The FERPA Partnership Mechanism

This section applies only to Partnered Mode users.

When a university partners with Oumie, the university formally designates Oumie as a "school official with a legitimate educational interest" — a standard legal mechanism under the Family Educational Rights and Privacy Act (FERPA). This is the same mechanism used by Canvas, Brightspace, Turnitin, and virtually every other third-party platform that universities use to deliver educational services.

Under this designation, Oumie is permitted to receive and process student data on the university's behalf — but only within the scope of the educational purpose the university has defined. Oumie does not use partnered student data for any purpose outside of providing the service to that university.

Beyond the FERPA school official designation, Oumie requires your separate explicit consent before any named data about you is shared back with your school. The partnership agreement between Oumie and the university requires the university to inform you of the partnership and present you with a consent mechanism before any individual data flows to them.

If you have questions about whether your school is an Oumie partner, contact us at oumiellc@gmail.com.

6. Your Rights

6a. Right to access

You can request a copy of all personal data we hold about you at any time by emailing oumiellc@gmail.com. We will respond within 45 days.

6b. Right to delete

You can delete your account at any time through your account settings. On deletion, we de-identify your user record — your name, email, and any other directly identifying fields are removed or replaced with anonymous identifiers. We retain aggregated behavioral patterns for product analytics; these patterns are never personally identified and cannot be linked back to you after de-identification.

If your school is a current Oumie partner, the school may retain historical records under FERPA's record retention requirements — this is the school's responsibility under FERPA, not Oumie's. Oumie will de-identify its own copy of your data on request regardless of what records the school holds.

6c. Right to revoke partnership consent

If you previously consented to share data with your partnered university, you can revoke that consent at any time from your account settings. Revoking consent stops future data sharing with your school immediately. It does not delete your Oumie account or affect your personal dashboard. Records already shared with your school prior to revocation may be retained by the school under FERPA — that retention is the school's responsibility under FERPA, not Oumie's.

6d. Right to portability

You can request a machine-readable export of your study session data, account information, and assignment records by emailing oumiellc@gmail.com. We will deliver a JSON export within 45 days.

Other rights

You can correct inaccurate account information directly in your account settings at any time. You can disconnect your school calendar feed at any time, which immediately deletes all synced assignment data from our servers. You can opt out of SMS and email notifications from your notification preferences.

7. Children Under 13

Oumie does not knowingly collect personal data from anyone under the age of 13. If we become aware that we have collected data from a child under 13 without verifiable parental consent, we will delete that data immediately.

If your school district uses Oumie with K-12 students, separate COPPA-compliant terms apply and must be agreed to by the district before deployment. Contact us at oumiellc@gmail.com for details.

8. California, Virginia, and Colorado Residents

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how we use it, the right to delete your personal information, the right to opt out of the sale of your personal information (we do not sell your data), and the right to non-discrimination for exercising these rights.

If you are a Virginia resident, you have rights under the Virginia Consumer Data Protection Act (CDPA). If you are a Colorado resident, you have rights under the Colorado Privacy Act (CPA). These rights are substantively similar to those described above.

To exercise any of these rights, email oumiellc@gmail.com with the subject line "Privacy Rights Request." We will respond within 45 days.

9. Data Security

All data transmitted between your browser and our servers is encrypted in transit using HTTPS/TLS. Data stored in our database is encrypted at rest. Passwords are never stored in plain text — they are hashed using industry-standard algorithms before storage. Access to production data is restricted to authorized personnel only.

In the event of a data breach that affects your personal information, we will notify you by email within 72 hours of becoming aware of the breach, consistent with applicable law.

10. Changes to This Policy

When we make material changes to this policy, we will notify you by email and by displaying a banner in your Oumie dashboard before the changes take effect. Your continued use of Oumie after receiving that notification is your acceptance of the updated policy.

11. Contact

For privacy questions, data requests, or concerns about how we handle your information, contact us at oumiellc@gmail.com.