Privacy Policy

Effective date: March 26, 2026

Last updated: March 26, 2026

This Privacy Policy explains how Oppiyah, operated by Mikko Salama, collects, uses, shares, and protects personal data when you use oppiyah.com and related services (the "Service").

Oppiyah is an educational platform for parents, teachers, schools, and children, including a content library, games, dashboards, and AI-assisted lesson/content creation tools.

1. Who operates the Service

Data controller: Mikko Salama (sole operator, Finland)

Service name: Oppiyah

Contact: mikko.salama@oppiyah.com

2. Data we may collect

Account and profile data

• Name, email address, and role (for example parent, teacher, learner)
• Authentication and account settings data
• Class or learning-group relationship data where applicable

Learning and usage data

• Progress, lesson activity, interactions, and completion data
• Content creation and dashboard activity
• Device/browser information, logs, timestamps, and diagnostics

AI input/output data

• Prompts and instructions submitted to AI-assisted features
• AI-generated outputs, edits, and usage metadata

Cookies and analytics

We may use cookies and similar technologies for authentication, language preferences, security, analytics, and service performance.

3. How we use personal data

• Provide, maintain, and secure the Service
• Manage accounts and user access
• Support learning features and educator workflows
• Operate and improve AI-assisted features
• Communicate service notices and support responses
• Comply with legal obligations

4. Legal bases for processing (GDPR)

• Contract: providing the Service you request
• Legitimate interests: operating, securing, and improving the Service
• Consent: where consent is required
• Legal obligation: where required by law

5. How data may be shared

We do not sell personal data. We may share data when necessary with service providers, AI providers, educational actors in your workflow, and authorities where legally required.

6. Retention, transfers, and security

We retain personal data only as long as needed for the purposes described in this policy and legal obligations. Some providers may process data outside Finland/EEA with appropriate safeguards. We use reasonable technical and organizational security measures.

7. Children's privacy

Oppiyah may be used by children in educational contexts. Parent, teacher, or school involvement is expected where required by law. Contact us if you believe child data was submitted inappropriately.

8. Your rights

Subject to applicable law (including GDPR), you may have rights to access, correct, delete, restrict, object, and request portability of your data, and to withdraw consent where applicable.

To exercise rights, contact mikko.salama@oppiyah.com.

9. Third-party links and services

The Service may include links or integrations to third-party services, which have their own policies and terms.

10. Policy updates

We may update this Privacy Policy and will publish updates on this page with a revised "Last updated" date.