Privacy Policy
This Privacy Policy explains how Curious Owl Digital Services – FZCO (“Curious Owl”, “we”, “us”, or “our”) collects, uses, and protects personal information when you use the Curious Owl website and Service. It also explains your rights and how to exercise them.
We take privacy seriously, and we take particular care with information relating to children. We collect as little information as possible and use it only for the purposes described here.
By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
1. Who we are
Curious Owl Digital Services – FZCO is a free zone company established in the International Free Zone Authority (IFZA), United Arab Emirates. We are the party responsible for the personal information handled through the Service.
For any privacy questions or requests, contact us at hello@curiousowl.ae.
2. Who our users are
The account holder must be a parent or legal guardian aged 18 or over. Children do not create accounts themselves. A child accesses content only through a profile set up and authorised by their parent or guardian, who provides consent for that child’s use of the Service and for our handling of their information as described here.
3. Information we collect
3.1. Information about the account holder (parent or guardian)
- Name
- Email address
- Login credentials (your password is stored in encrypted form)
- Payment information — handled by our third-party payment provider. We do not collect or store your full card details.
- Records of your subscription, purchases, and communications with us
3.2. Information about a child on the account
We deliberately keep information about children to the minimum needed to provide the Service. For each child profile we hold only:
- The child’s first name (or a display name chosen by the parent)
- The child’s age band (for example, 10–13 or 13–17), so we can show age-appropriate content
- The child’s progress within the content (such as modules completed and points earned)
- The child gets a username and a generated password, with a placeholder email that isn’t a real mailbox.
We do NOT collect a child’s date of birth, photographs, home address, school name, phone number, or any other unnecessary personal details.
3.3. Information collected automatically
When you visit the website, some information is collected automatically through cookies and similar technologies, such as your device type, browser, and general usage of the site. This is described in Section 7 below.
4. How we use information
We use personal information to:
- provide, operate, and maintain the Service, including setting up and managing accounts and member profiles;
- process subscriptions, payments, renewals, and refunds;
- show age-appropriate content and track a child’s own progress;
- communicate with you about your account, including service messages, renewal reminders, and support;
- send you progress updates about your child where you have an active subscription;
- understand and improve how the Service is used;
- keep the Service secure and prevent misuse;
- comply with our legal obligations.
We do not sell personal information. We do not use children’s information for advertising or marketing, and we do not create advertising profiles of children.
5. Our basis for processing and consent
We process personal information where it is necessary to provide the Service you have requested and to perform our contract with you, where we have a legitimate interest in operating and improving the Service, where we need to comply with a legal obligation, and where you have given consent.
For any information relating to a child, we rely on the consent and authorisation of the child’s parent or legal guardian, which is given when the account holder adds the child to the account. You may withdraw this consent at any time by contacting us or by closing the account, though this may mean the child can no longer use the Service.
6. Children’s privacy
Protecting children’s information is central to how we operate. In summary:
- The parent or guardian is always the account holder and controls the account.
- We collect only a child’s first name, age band, and progress.
- We do not knowingly collect any other personal information from or about children.
- We do not show children third-party advertising and do not build advertising or marketing profiles of children.
- A parent or guardian may review, correct, or request deletion of their child’s information at any time by contacting us.
If we become aware that we have inadvertently collected more information about a child than described here, we will delete it as soon as reasonably possible.
7. Cookies and analytics
We use a small number of cookies and similar technologies to make the website work, to keep you logged in, and to understand how visitors use the site.
We use Google Analytics to collect general, aggregated information about how the site is used, such as which pages are visited, the type of device and browser, the approximate location (country or city level) and how people found the site. We also record when someone clicks a Plans button or completes a purchase, so we can see what is working. Google Analytics sets cookies (for example _ga) to tell visits apart.
We do not use Google Analytics on pages used by logged-in members, apart from the purchase confirmation page. We have turned off Google’s advertising features and ad personalisation, and we do not use analytics data to build advertising profiles of anyone, including children. Google processes analytics data under its own privacy policy. You can opt out with the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout.
Most browsers let you refuse or delete cookies through their settings. Blocking some cookies may affect how the website works, for example you may not be able to stay logged in.
8. How we share information
We do not sell personal information. We share it only with trusted third parties who help us provide the Service, and only as needed:
- Payment provider — to process subscription payments securely. They handle your card details under their own terms and privacy policy; we do not store full card details.
- Email delivery provider (Brevo), to send account and service emails.
- Hosting and technology providers — who host the website and store data on our behalf under appropriate safeguards.
- Analytics provider (Google Analytics) — as described above.
- Professional advisers and authorities — where required by law, regulation, legal process, or to protect our rights, users, or the public.
We require these providers to protect personal information and to use it only for the purposes of providing their services to us.
9. Where information is stored and transferred
The Service uses third-party hosting and payment providers, and personal information may be stored and processed on servers located outside the United Arab Emirates. Where information is transferred internationally, we take reasonable steps to ensure it is handled securely and in line with this Privacy Policy and applicable law.
10. How long we keep information
We keep personal information for as long as your account is active and for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete it or anonymise it. You may request deletion of your account and associated information as described below. If a subscription ends or a renewal payment fails, we keep the account and its progress for 12 months so you can rejoin, and then delete it. We delete it sooner if you ask us to.
11. Security
We take reasonable technical and organisational measures to protect personal information against loss, misuse, and unauthorised access, including secure connections (SSL/HTTPS), restricted access, and the use of reputable third-party providers. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
12. Your rights
Subject to applicable law, you may:
- request access to the personal information we hold about you or your child;
- ask us to correct information that is inaccurate or incomplete;
- ask us to delete your account and associated personal information;
- withdraw consent for our handling of your child’s information (which may end their access to the Service);
- object to or ask us to restrict certain processing;
- ask for a copy of certain information in a portable format.
To exercise any of these rights, contact us at hello@curiousowl.ae. We will respond within a reasonable time and in accordance with applicable law. We may need to verify your identity before acting on a request.
13. Third-party links
The Service may contain links to third-party websites or services that we do not control. This Privacy Policy does not apply to those third parties, and we are not responsible for their practices. Please review their privacy policies.
14. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we do and where changes are material, take reasonable steps to notify account holders. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
15. Contact
If you have any questions or requests regarding this Privacy Policy or your personal information, please contact us:
Curious Owl Digital Services – FZCO
Email: hello@curiousowl.ae Location: Dubai, United Arab Emirates