Privacy Policy

Obzi is operated by Bem LLC (“Bem LLC,” “Obzi,” “we,” “us,” or “our”). We provide software that helps preschools, daycares, early-education programs, schools, and individual caregivers create and share observation updates with families.

This Privacy Policy applies to the Obzi website and web application, including the installable progressive web app (PWA) you can add to your device, and any future Obzi mobile applications (together, the “Service”). Obzi does not currently offer native iOS or Android apps; the Service is delivered through the web and the PWA.

By using the Service you acknowledge the practices described in this Policy. If you do not agree, please do not use the Service.

When a school, program, or caregiver (the “Customer”) uses Obzi, the Customer decides what information to collect and share through the Service and is the party responsible for that information. With respect to children’s information, the Customer is the controller and Obzi acts as the Customer’s service provider and processor, handling information on the Customer’s behalf and on their instructions.

Where the federal Family Educational Rights and Privacy Act (FERPA) applies, Obzi acts as a “school official” with a legitimate educational interest, under the direct control of the Customer with respect to the use and maintenance of education records.

Where the Children’s Online Privacy Protection Act (COPPA) applies, the Customer is responsible for providing any required notices and for obtaining any verifiable parental consent. The Customer authorizes Obzi to collect children’s information solely to provide the Service.

Account information: when a Customer or user signs up, we collect names, email addresses, and the details needed to set up and operate an account, such as program or school name and a user’s role.

Content you create: photos, notes, observations, child names and profiles, class or group information, and other content that you upload or enter to build and send updates.

Family contacts: the names and email addresses you provide so we can deliver updates to the families you choose.

Usage and device information: technical data such as IP address, browser and device type, pages viewed, and basic interaction logs, which help us keep the Service secure, reliable, and improving.

Cookies and similar technologies: we use strictly necessary cookies to run the Service and, with your consent where required, analytics cookies. You can manage non-essential cookies through our cookie banner.

Payment information: paid plans are processed by our payment processor (Stripe). We do not collect or store full payment card numbers; Stripe handles card data under its own terms and privacy policy.

Obzi is intended for use by adults — educators and caregivers — not by children. Information about a child, including photos and notes, is entered by the adults responsible for that child’s care.

We use children’s information only to provide the Service to the Customer: to build, store, and deliver updates to the family recipients the Customer chooses. We do not sell children’s information, we do not use it for behavioral advertising, and we do not build advertising or marketing profiles from it.

The Customer and the families they serve are responsible for obtaining any consent required to photograph a child and to share that child’s information and images. Our photo-consent settings are tools to help you honor those choices; they do not replace your own legal obligations.

We use information to provide, maintain, secure, and improve the Service: to create and deliver updates, authenticate users, prevent fraud and abuse, provide customer support, process payments, and communicate with you about your account and service-related matters.

We may use aggregated or de-identified data — which cannot reasonably be used to identify any individual — to understand how the Service is used and to improve it. We do not use the content you create to train third-party advertising models.

With recipients you choose: we deliver the updates you create to the family recipients you designate, and we make content available to the users within your program according to their roles and permissions.

With service providers (subprocessors): we work with trusted vendors that process information on our behalf and are bound to protect it — including cloud hosting and database providers, email delivery, our content management and image-delivery providers, our payment processor, and analytics providers. They may use the information only to provide services to us.

For legal and safety reasons: we may disclose information if required by law or legal process, to enforce our agreements, or to protect the rights, safety, or property of children, our users, the public, or Bem LLC.

Business transfers: if Bem LLC is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising as those terms are defined under applicable privacy laws.

We retain information for as long as an account is active or as needed to provide the Service, and thereafter as required to comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or de-identify it within a reasonable period. Customers can request deletion as described below.

We use industry-standard safeguards, including encryption in transit and access controls, to protect information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You can access and update much of your account information directly in the Service. Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing.

Because schools and caregivers control children’s and families’ information in the Service, requests relating to a child’s information should be directed to the relevant school or caregiver; we will assist our Customers in responding to such requests as required by law.

To exercise your rights, contact us at hello@obzi.app. We will respond as required by applicable law and may need to verify your identity first. We will not discriminate against you for exercising these rights.

Obzi is operated from the United States and information is processed and stored in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your location.

The Service may link to or integrate with third-party websites and services that we do not control. This Policy does not apply to those third parties, and we are not responsible for their practices. We encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after a change takes effect means you accept the updated Policy.

Questions or requests about this Policy can be sent to Bem LLC at hello@obzi.app, and a real person will reply.