Privacy policy
Version of 22 October 2026
This is a translation for convenience; in case of discrepancy, the French version prevails.
Our principle: keep as little as possible
Ogrelo helps your child revise. To do so, it only needs their homework and their revision results. Anything else, we do not ask for and we do not keep: no surname, no address, no date of birth, no photo of the child, no recorded voice, no advertising, no selling of data.
For students, in a few words
- Ogrelo reads your homework and lessons on Pronote or École Directe. It never changes anything there.
- For Pronote, you log in with the QR code: Ogrelo never sees your password. It only keeps an encrypted access token, which lets it read your homework again.
- It keeps only what helps you: your revision sheets and your quiz results.
- When you talk to it, it writes down what you said, then deletes your voice straight away.
- Scanned sheets: the sheets you give Ogrelo (exercise sheets, worksheets, lessons, your work on paper) are kept so you don't have to photograph them again. A worksheet or lesson page that is only text is copied out by Ogrelo, then the photo is deleted: only the text is kept. A page with a figure, table, diagram or map keeps its photo, and your own work (an exercise done on your sheet, “Check my work”) always keeps its photo, along with the copied-out text. Everything is deleted on 31 August, at the end of the school year, and you can view them, delete one or everything whenever you like (Me › Settings › My data › Scanned sheets). Your teachers never see them. Hide your name before taking the photo.
- When a new mark comes in, Ogrelo suggests that you take a photo of your marked test. It looks for your mistakes, then deletes the photos straight away: it only keeps the list of your mistakes, never your name. You can always answer “I don't have this test”.
- Brevet mock exams: if you do a paper on sheets (“paper version”) and send photos of your whole script (12 pages at most), Ogrelo marks it question by question, then deletes the photos as soon as the marking is done. It only keeps your result (marks and comments for each question), never your script. Hide your name before taking the photo.
- To help you, Ogrelo asks an artificial intelligence for its input. It never gives it your first name.
- Your information is never sold and there is no advertising.
- In "What Ogrelo knows about me" (Me tab), you see what Ogrelo has learned from your work. If it's wrong, you correct it; you can also erase everything.
- Ogrelo may ask you how you feel: it's optional, you can skip it or turn it off. Your answers are never shown to your teachers and are deleted after 6 months.
- Your parent can see everything and delete everything from their area.
- Your school has no school app? With an Ogrelo account without a school app, Ogrelo only keeps your first name, your surname initial if you give it, your year and your classes. Your recovery code is secret: don't give it to anyone, not even your teacher. You can delete your account in Me.
Who is responsible for your data
The data controller is MOBINPROTECT, a single-member limited liability company (société à responsabilité limitée à associé unique) with share capital of €1,000, registered office: 5 voie Félix Éboué, 94000 Créteil, France (SIREN 804 973 899), publisher of Ogrelo. Contact for any question about your data: [email protected]. No data protection officer has been appointed to date: the managing director answers your requests directly.
What we use, why, and for how long
| Data | Why | Retention period |
|---|---|---|
| First name and class (read on Pronote) | Greet the student, adapt the level | As long as the account exists |
| Account without a school app (details): first name, surname initial (optional, one letter), year; no e-mail address, no password, no surname | Greet the student, adapt the level, tell them apart from a namesake in a class | As long as the account exists; can be deleted at any time from the Me tab |
| Recovery code (accounts without a school app): fingerprint and encrypted copy, never in clear | Get the account back on another device | Until the student changes it, or the account is deleted |
| Device session token (fingerprint only) | Stay signed in without a password | 90 days after the device was last used, 1 year at most |
| Homework, lesson content, teachers' attachments (Pronote or École Directe, read-only) | Prepare revision sheets and homework help | Homework updated at each reading; attachments deleted after 3 months |
| Timetable for the next 14 days (Pronote or École Directe, read-only): subject, day, start and end times, cancelled lessons — no teacher names, no rooms | Suggest realistic revision times ("on Tuesday you finish at 3 pm") and the "Get to know me" profile | Replaced at each reading; deleted with the account |
| Without Pronote or École Directe: photos sent by the student (homework diary, marked papers, timetable — read as a subject / day / time grid, no teachers or rooms) and a minimal log (day, hour, photo type, subject); homework read from the diary photo | Know what to revise; reminders on their phone (if allowed, never between 9 pm and 7 am or during school hours); "this week's photos" section in the parents' report (counts and subjects only) | With the account; log limited to the last 150 photos; can be erased |
| Grades for the current term (can be switched off by the parent) | Spot what needs more work | Replaced at each reading; deleted with the account |
| Scanned sheets: sheets photographed by the student (exercise sheet, worksheet, lesson, homework page, their own work on paper) and their transcription | Never ask again for a sheet already provided: reuse it for the same homework, another homework that refers to it, an exercise done again or a check. Each page is copied out as text by the AI (Google Gemini, or Anthropic as a fallback; without the first name); a text-only worksheet, exercise sheet or lesson page keeps only its transcription and its photo is deleted; the student's own written work (exercise on their sheet, check) always keeps its photo, along with its transcription; a page with a figure, table, graph, diagram, map or picture keeps its photo (when in doubt, the photo is kept). Never shown to teachers | Until the following 31 August (end of the school year, Paris time), or until the student deletes them (Me › Settings › My data › Scanned sheets: one sheet or all); deleted with the account |
| Older homework photos (provided before scanned sheets) | Understand the homework | 2 months |
| Marked test sent from a mark's page | Analyse the test and prepare a catch-up | Photos: deleted as soon as the analysis is done (3 days at most if it doesn't happen). Analysis result, without the photo: deleted with the account |
| Marked test paper (photos suggested for each new mark; the student can decline) | Spot mistakes (type, chapter) and prepare one exercise and one flashcard for each; with Ogrelo Complete, follow mistakes from one test to the next | Photos: deleted as soon as the check is done (3 days at most if it does not happen). Mistakes spotted, without any name: 60 days in the free version, 1 year at most with Ogrelo Complete. Parents can see and delete them in their space. |
| Brevet script (photos of one answer, or of the whole script of a paper done on sheets: 12 pages at most), optional note from the student | Mark each question with the mark scheme and suggest what to work on | Photos and note: deleted as soon as the marking is done (3 days at most if it does not happen). Result (marks and comments for each question, without any name): kept with the account, deleted with it. |
| Quiz results and revision activities | Student's statistics and parent's follow-up | 1 year |
| Revision progress (exercises done, brevet papers in progress with written answers, stars on sheets, drafts, settings such as theme or sound) | Find it on every device: kept on the device so it works without internet, and on the account, synced as soon as there is internet | As long as the account exists; deleted with the account |
| Ogrelo's memory (Ogrelo Complete): what Ogrelo has learned from the student's work (strengths, things to work on, habits, progress) and the corrections made by the student | Adapt revision and the next day's session; shown to the student and the parent in "What Ogrelo knows about me" (details) | While Ogrelo Complete is active, then 90 days after it ends (in case the student comes back); can be erased at any time by the student or the parent |
| Optional answers to "Get to know me": choices from lists (favourite or difficult subjects, what gets in the way when revising, how the student remembers best, when and how long they revise, goals, modern languages), never any health question | Adapt revision (short summary for Ogrelo, suggestions, sheet to listen to, daily goal); shown in "What Ogrelo knows about me" (details) | With the account; can be changed or erased at any time by the student or the parent |
| Answers to "How are you feeling?" (optional): day, time, mood (1 to 5) and energy (1 to 3), nothing else | Adapt that day's session; with Ogrelo Complete, spot whether mood or time of day affect results | 6 months, then deleted automatically; can be erased at any time |
| Student's voice (microphone) | Transcribe what they say | None: transcribed then deleted immediately, never saved to disk |
| Access to Pronote or École Directe (encrypted login token; Pronote: QR code login, the password is never seen; École Directe: the password is used only once to open access and is never kept or logged) | Read homework without keeping the password | Until Pronote is disconnected or the account is deleted |
| Proof of parental consent | Comply with the law (Art. 8 GDPR) | Date of consent and version of the accepted text only (no information about the parent); as long as the account exists |
| Parent's e-mail address (optional) — given by the parent, or by the student: in that case nothing is sent until the parent confirms through the link received (and only after parental consent) | Send the chosen revision report (every Sunday or every evening) | Until the parent deletes it (“unsubscribe” link in each e-mail, or parent area) |
| Account without parental consent | — | Automatically deleted after 7 days, with all its data |
| Subscription (if the parent subscribes): technical identifiers of the customer and the subscription at Stripe, status, trial and renewal dates, date on which the parent confirmed the subscription. No bank card data | Unlock Ogrelo Complete, manage the trial, renewal and cancellation | As long as the account exists (deleted with it; the subscription is then cancelled). Invoices are kept by Stripe in accordance with its legal obligations |
| Study groups (if the student creates or joins one) | Revise together: the other members only see the first name, the Ogrelo avatar, participation in sessions and the group's challenge scores. No surname, no free-text messages (ready-made phrases only), entry only with the code given by a friend | As long as the group exists; closing the group deletes everything, leaving the group removes the student |
| A teacher's classes (if a teacher adds the student with their student code, or if the student enters the class code given by the teacher) | Receive this teacher's lessons, homework and quizzes in Ogrelo. The teacher only sees the student's first name and their results on the homework and quizzes of their class; never their Pronote grades, their other subjects or their messages | As long as the student is in the class (the teacher can remove them, the student can leave the class) |
| Notifications (if the student or the parent turns them on) | Send a reminder about homework the day before. The device's technical address provided by the browser, with no phone number or e-mail address | Until they are turned off or the account is deleted |
| Encrypted backups | Restore the service in case of failure | About 1 month, then replaced |
The server's technical logs contain no first name, no content and no question asked: only technical numbers and durations.
On what legal basis
Your consent as a parent (and that of your child), obtained before any use: on the student's device, the parent ticks two boxes after reading what Ogrelo does (Article 6(1)(a) and Article 8 of the GDPR, Article 45 of the French Data Protection Act, loi Informatique et Libertés). You can withdraw it at any time by deleting the account from your parent area.
Who else is involved (processors)
| Provider | Role | Location | What it receives |
|---|---|---|---|
| Hetzner Online | Server hosting | Germany (EU) | All data, encrypted in transit |
| Anthropic | Artificial intelligence (revision sheets, explanations, correction) | United States | The questions, lesson content and photos needed for an answer; never the student's first name or surname |
| Google (Gemini API; Google LLC, and Google Ireland for the European Union) | Artificial intelligence for three uses only: language conversation practice, evaluation of oral answers (oral quiz) and transcription of photographed pages (“My documents”); if it fails, Anthropic takes over | United States | The conversation sentences, the question and answer to evaluate, the photo of the page; pseudonymised data: never the student's first name, surname, school, e-mail or any identifier (replaced before sending). Paid API tier: Google does not use this data to train its models |
| Mistral AI | Voice transcription (microphone), only when transcription on our own server is saturated | France (EU) | The recording of the spoken answer, for the time of the transcription; no name or identifier; never stored on disk by Ogrelo |
| Microsoft (Azure Speech) | Pronunciation exercises (word-by-word assessment); reading voice for revision sheets | France (EU, France Central region) | The recording of the word or sentence the student pronounces, with the expected text; the text of lesson sheets; no name or identifier |
| ElevenLabs | Voices for the sentences and vocabulary of the Languages course | United States | Only lesson text (sentences and words, the same for every student); no student data |
| Cloudflare | Network: website address, attack protection, routing of connections | United States (global network, including the EU) | All requests go through its network, with the device's IP address; encrypted between the device and Cloudflare and on to our server |
| Resend | Sending reports by e-mail; login links for teachers | United States | The parent's address and the content of the report (first name and revision figures) |
| Stripe | Subscription payment, invoices, management portal | Ireland (EU), with possible transfers to the United States | What the parent enters on the payment page (card, e-mail, country) and an opaque identifier of the Ogrelo account; never the student's first name or revision data. Ogrelo never receives card numbers |
| Backblaze | Backup copy | Netherlands (EU) | Encrypted backups (unreadable without our key) |
Transfers outside the European Union are governed by [TO BE COMPLETED: European Commission standard contractual clauses / Data Privacy Framework, depending on the contracts signed]. We do not use OpenAI for student data. Pronote (Index Éducation) and École Directe (Aplim) are not processors for Ogrelo: they are the sources your child authorises Ogrelo to read.
Ogrelo account without a school app
Some schools use neither Pronote, École Directe nor Skolengo. Their students can create an Ogrelo account without a school app: with the class code given by an Ogrelo teacher, or on their own, to revise their year's curriculum.
What we ask for: the first name, the surname initial if the student wants to give it (a single letter, so a teacher can tell apart two students with the same first name) and the year (6e to 2de). Nothing else: no e-mail address, no password, no surname, and no data read from any school software.
What we keep: this information, the classes joined with a code (the teacher only sees the first name, the initial if there is one, how the student joined the class, and the results of their class's homework and quizzes), the recovery code and the device's session token. The recovery code is used to get the account back on another device: it is secret, kept only as a fingerprint (hash) and an encrypted copy (to show it to the student in the Me tab), and it is different from the code the student gives their teachers. The session token is kept as a fingerprint and forgotten 90 days after the device was last used. Everything else (quizzes, sheets, Ogrelo's memory, photos) follows the same rules as for other accounts.
Parental consent: the same as for other accounts. Before any use, a parent reads what Ogrelo does on the student's device and ticks two boxes; without consent, the account and all its data are deleted automatically after 7 days.
Deletion: at any time from the Me tab ("Delete my account"), or simply by asking us at [email protected]. Everything is then deleted: account, joined classes, recovery code, sessions and revision data. The teacher can also remove the student from their class; the student then keeps their account.
Class code: a teacher chooses whether to open their class with a code. They can close it or change it at any time, and the code expires every 31 August; students already in the class stay in it.
Ogrelo's memory
What is used: homework, lessons, grades and timetable read from Pronote or École Directe (read-only), activity in Ogrelo (quizzes, flashcards, exercises, revision time) and what teachers post on Ogrelo.
How: with Ogrelo Complete, this data is analysed every night to remember strengths, what still needs work and revision habits, and to prepare the next day's session. The AI never receives the child's first name. In the free version there is no nightly analysis: only a simple calculation on quizzes and flashcards (chapters mastered, chapters to review) is done, on our server. The data kept is the data revision needs; the nightly analysis is part of Ogrelo Complete.
What is never done: no selling, no advertising, no decision made about the child (the memory is only used to adapt revision), no comparison with other students. Nothing Ogrelo has learned is passed to teachers or the school.
How long: while Ogrelo Complete is active. If the subscription stops, the memory is kept for 90 days in case the student comes back, then erased automatically (the basic level and the work done remain). The student (Me tab, "What Ogrelo knows about me") and the parent (parent area) see everything and can erase it at any time; the student can also mark an item "That's wrong": it disappears and Ogrelo must not claim it again. After erasing, Ogrelo starts from scratch.
"Get to know me": on first launch (and later from the Me tab), the student can answer a few optional questions, each with "Skip": favourite and difficult subjects, how they feel in those subjects, what gets in the way when revising (for example "I forget quickly"), how they remember best, when and for how long they revise, their goals and their modern languages. These are only choices from lists, never free text, and never any question about health, a disorder or a diagnosis. The answers are only used to adapt revision (a very short summary given to Ogrelo without the first name, daily suggestions, the sheet to listen to first, the daily session goal). They are kept with the account, visible in "What Ogrelo knows about me" (and in the parent area), and can be changed or erased at any time, one by one or all at once; they are deleted with the account. They are never passed to teachers or the school. In the demo, nothing is kept.
"How are you feeling?": an optional question, at most once a day, at the start of a revision (5 faces for mood, 3 energy levels), with "Skip" always visible; can be turned off in Settings. It is not a diagnosis: no questions about health, sleep, family or eating, and no label is put on the child. Only the day, time, mood and energy are kept, for 6 months at most. They are used to adapt the session (shorter, encouragement) and, with Ogrelo Complete, to spot trends (for example the time of day when the student does best), never before at least 10 results. If the student picks the lowest face several days in a row, Ogrelo shows them once, discreetly, free helplines (Fil Santé Jeunes, 3018) and suggests talking to a trusted adult: no alert is sent to anyone. These answers are never passed to teachers or the school.
Anonymous statistics on shared exercises
Chapter exercises (“Practise”) are the same for every student. So that a student can see where they stand, Ogrelo computes anonymous, aggregated statistics on its server: per chapter, per exercise level and per year group (6e, 5e…), the number of students, the distribution of scores (first attempt and best attempt) and how many students missed each exercise. These statistics contain no name, no identifier and no individual result. They are recomputed every hour from activity, so a deleted account no longer appears in them after the next computation. Demo accounts are not counted.
A comparison is only shown when at least 30 students have contributed. The student only sees their own position (for example “better than 7 out of 10 students”), never a ranking or another student's result. Nothing is passed to teachers, the school or any third party, and no artificial intelligence is used for this computation. The optional “today's session” goal (a number of minutes) is kept with the student's account.
What we never do
- No advertising, no advertising trackers, no selling or renting of data.
- No commercial profiling. Statistics are used only by the student and their parent.
- No ranking of students, and no student sees another student's results (only anonymous, aggregated statistics are shown, see above).
- Nothing is written or changed on Pronote.
Security
Encrypted connections (HTTPS), Pronote access encrypted on the server, each student only sees their own data, encrypted backups stored off the server, restricted administrative access with no personal identifying data.
For teachers (class mode)
The teacher account is used to create quizzes, run live games and manage classes. It has no password: you receive a link and a code by e-mail.
| Data | Why | Retention period |
|---|---|---|
| E-mail address (in lower case), account creation and last login dates | Log you in, check that you are a teacher | As long as the account exists; account deleted after 2 years without login |
| Your classes (name, subject) and the students you add to them with their student code | Send lessons, homework and quizzes; see who has done them. You only see the first name and the results of your own homework, never anything else | As long as the class exists; deleting the class deletes its homework, lessons and results |
| Documents you upload (PDF, photos, Word, PowerPoint; 10 MB maximum) | Show them to the students in the class. If you choose “Ogrelo prepares the sheet”, the text and images of the document are sent to the AI (Anthropic) to write the revision sheet; useful figures are cropped from the document | As long as the lesson or homework exists |
| Notifications (if you turn them on) | Let you know when the whole class has done a piece of homework or when a revision sheet is ready | Until they are turned off or the account is deleted |
| Your quizzes | Find them on all your devices and run them in class | As long as the account exists (you can delete them one by one at any time) |
| Access request (name, subjects, school or “private tutor”, optional website or SIRET number, message) | Check that a non-academic address really belongs to a teacher | Deleted 30 days after the reply (6 months maximum without a reply) |
| Login link and code, connected device | Log you in securely | Link and code: 15 minutes, single use, kept only as a hash. Device: 90 days after last use (technical cookie, with no advertising or audience measurement) |
During a live game, students are never linked to your account: they play with their first name only, and the game deletes itself at the latest 3 hours after it was created. Our e-mails contain no tracking image or tracking link. In your area, the account menu offers “Delete my account”: your address, your quizzes, your requests and your connected devices are then deleted immediately.
Your rights
You can access your child's data, download it, correct it or delete it at any time from your parent area (Settings). You can also write to us at [email protected]. If you believe your rights are not being respected, you can lodge a complaint with the CNIL (the French data protection authority).