Privacy Policy

1. Introduction

Opius ("we," "our," or "us"), operated by Starfish Engineering, respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Opius at opius.dev or interact with us via SMS text messaging.

2. Information We Collect

We may collect the following types of information:

• Account Information: Email address and authentication data when you create an account.
• Phone Number: Mobile phone number when you opt-in to SMS messaging, used solely to deliver our service.
• School Credentials: Usernames and passwords for school platforms (Schoology, ParentVUE, Google Classroom) that you voluntarily provide. These are encrypted with AES-256-GCM at rest and decrypted only when needed to access your school data.
• Chat Messages: Messages you send through our web or SMS chat interface and the AI-generated responses.
• School Data: Homework assignments, grades, schedules, and other education-related information retrieved from school platforms on your behalf.
• Usage Data: Information about how you interact with our service, including IP address, browser type, and pages visited.

3. How We Use Your Information

We use the information we collect to:

• Provide our core service: answering your questions about your children's school activities
• Log into school platforms on your behalf using your stored credentials
• Send and receive SMS text messages related to school information queries
• Send verification codes to confirm your phone number
• Maintain and improve the reliability and security of our service
• Comply with legal obligations

5. Education Data & Compliance

Opius accesses education records on behalf of parents and guardians. We are committed to compliance with applicable laws:

• FERPA: We act as an authorized agent of the parent/guardian to access their child's education records. We do not store education records beyond the duration of a chat session. We do not share education data with any third parties.
• COPPA: Our service is directed at parents and guardians, not children under 13. We do not knowingly collect personal information from children.
• School credentials are encrypted with AES-256-GCM and are only decrypted during active use to answer your questions.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• AI Processing: Your questions are processed by Anthropic's Claude AI to generate responses. We do not send your school credentials or personal identifiers to the AI model.
• SMS Delivery: We use Twilio to deliver SMS messages. Twilio processes your phone number as needed to deliver messages.
• Legal Requirements: When required by law or to respond to legal process.

7. Data Security

We implement appropriate security measures to protect your information. School credentials are encrypted with AES-256-GCM at rest. All data is transmitted over HTTPS. Access to user data is restricted through role-based access controls. However, no method of electronic storage or transmission is 100% secure.

8. Data Retention

We retain your account data and stored credentials for as long as your account is active. Chat history is retained to provide continuity. School data retrieved during sessions is not permanently stored. You may delete your credentials, phone number, or account at any time through Settings.

9. Your Rights

You have the right to:

• Access and review your stored information
• Delete your school credentials at any time
• Remove your phone number and opt out of SMS
• Delete your account and all associated data
• Opt out of any communications

To exercise these rights, use the Settings page in the app or contact us at hello@opius.dev.

10. Children's Privacy

Opius is designed for use by parents and guardians. We do not direct our service to individuals under the age of 18 and do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.