Privacy Policy

Date of issue of this Privacy Policy: 03/01/2026

Last updated: 03/01/2026

At Slonig, Inc., we highly value your privacy and data protection rights. We acknowledge the significance of safeguarding the personal data we collect and process. This Privacy Policy aims to provide a clear understanding of the personal information we collect and how we use it.

In this Privacy Policy and the Terms of Service, the term “Slonig“ (“we”, “us”, “our”) refers to all websites (including slonig.org, app.slonig.org), applications, their features, and content we offer. The services we provide and the information collected are managed by Slonig, Inc., located at 1111B S Governors Ave STE 48458, Dover, DE 19904, USA.

Student Privacy Policy: In addition to this Privacy Policy, we have created a dedicated Privacy policy for students that provides additional information specifically about how we handle student information. Parents, guardians, and educators are encouraged to review both this Privacy Policy and our Privacy Policy for Students to fully understand our practices regarding student data protection.

By using Slonig, you expressly consent to the practices and policies outlined in our Privacy Policy. Please note that your use of our services is always subject to our Terms of Service which includes this Privacy Policy.

1. Purpose and Scope

This Privacy Policy explains how we process “Personal Information.” Personal Information includes information that can identify an individual directly, or indirectly when combined with other information.

This Privacy Policy applies if you interact with our websites, voluntarily share Personal Information with us, or receive communications from us. We collect only the Personal Information needed to operate and improve the website and (where applicable) provide requested services.

1.1 User Categories

Slonig may serve three user categories:

  • Students (Children): Under 18 and using app.slonig.org for educational purposes. Students use Slonig without creating accounts.
  • Educators: Teachers and school/district administrators who deploy and manage Slonig for classrooms or organizations, using www.slonig.org and app.slonig.org.

2. Personal Information We Collect

We collect limited Personal Information needed to operate the site and services. Sources generally include:

  • Information provided by Educators and Parents
  • Information about Educators obtained from third parties (e.g., public school/district contact sources)
  • Usage information you generate when using the site

2.1 Categories of Personal Information

For Educators: name, email, school/district name and address, telephone (often for administrators), and role/position.

For Parents (Homeschoolers): name, email, telephone, and mailing address (if used for communications).

2.2 Data Ownership and Use Limitations

We do not claim ownership of your data and do not use it for unrelated marketing. We apply additional restrictions for children’s data and do not use children’s data to market to minors.

2.4 Referral Information

If an Educator uses an invitation/referral feature to invite colleagues, we may collect the colleague’s email (and optionally name) solely to send the invitation and measure referral success.

3. Automatic Information

We may automatically collect technical and usage information such as masked/anonymized IP address, browser type, operating system, activity times, and pages/features used. This helps operate the site, improve usability, and maintain security.

4. Cookies

We do not use cookies.

5. How We Use Personal Information

We use Personal Information to:

  • Provide requested services and support
  • Operate, troubleshoot, secure, and improve the website and platform
  • Prevent fraud and enforce our terms
  • Send service announcements and important updates

5.1 Legal Bases and Retention

If you are in the EU/EEA or the UK, we rely on the following legal bases under GDPR/UK GDPR to process Personal Information. We keep data only as long as necessary for the purposes described below, unless a longer period is required by law (e.g., record-keeping obligations) or needed to establish, exercise, or defend legal claims.

PurposeDataLegal basisTypical retention
Provide requested services and respond to inquiriesName, email, school/district, role; messages you send usContract / steps prior to entering a contract; Legitimate interests (customer support)While we are actively working with you, then typically up to 24 months after last interaction (or earlier upon request), unless required longer for legal reasons
Operate, secure, troubleshoot, and prevent abuseMasked/anonymized IP, device/browser info, timestamps, pages/features used, security eventsLegitimate interests (security, fraud prevention, service reliability)Security logs typically 30–180 days (longer only if needed to investigate an incident or comply with law)
Website analytics (where enabled)Usage events, masked/anonymized IP, approximate location derived from IP, device/browser infoLegitimate interests (improving the site) or Consent (where required)Typically up to 13 months for analytics logs/events, then aggregated statistics may be kept longer
Send invitations/referrals initiated by an EducatorColleague email (and optional name)Legitimate interests (sending a requested invitation) / Consent (where required)Invitation records typically 30–90 days, then deleted or de-identified
Marketing to Educators/Parents (not to children)Name, email, school/district, role, preferences (e.g., unsubscribe status)Legitimate interests (B2B outreach) or Consent (where required)Until you unsubscribe, then we keep a minimal suppression record to honor your opt-out (typically as long as needed to prevent re-contact)

Note: Retention can vary based on contracts with schools/districts, legal obligations, and operational needs. Where feasible, we delete or anonymize data when it is no longer needed.

6. How We Protect Personal Information

We may use administrative, technical, and organizational safeguards designed to protect Personal Information (e.g., access controls, encryption in transit, secure backups, and internal policies). No security measures are perfect; we continuously work to improve protections.

7. Disclosure of Information to Third Parties

We do not sell Personal Information. We may share Personal Information with vetted service providers who process data on our behalf (hosting, email delivery, security, analytics), under contractual obligations to protect it. We may also disclose information if required by law, to protect rights/safety, or in connection with a business transfer.

8. Your Rights

Depending on your location, you may have rights regarding your Personal Information. We may need to verify your identity (and your authority to act on behalf of an Educator, school/district, or child) before fulfilling requests.

8.1 EU/EEA and UK (GDPR / UK GDPR)

If you are in the EU/EEA or the UK, you may have the right to:

  • Access your Personal Information and receive a copy of it.
  • Rectify inaccurate or incomplete Personal Information.
  • Delete your Personal Information (in certain circumstances).
  • Restrict our processing (in certain circumstances).
  • Object to processing based on legitimate interests (including direct marketing).
  • Data portability (receive certain data in a structured, commonly used, machine-readable format), where applicable.
  • Withdraw consent at any time where we rely on consent (this does not affect the lawfulness of processing before withdrawal).

Right to lodge a complaint: You also have the right to lodge a complaint with your local supervisory authority in the EU/EEA, or with the UK Information Commissioner’s Office (ICO), if you believe our processing violates applicable law.

8.2 How to exercise your rights

To submit a request, email us at info@slonig.org with the subject line “Privacy Rights Request”. Please include:

  • your name and contact email,
  • the role you have (Educator, Parent/Guardian, or other),
  • the specific right you want to exercise and the details needed to process your request.

If you are an Educator acting for a school/district, or a Parent/Guardian acting for a child, we may ask for reasonable documentation to confirm your authority.

8.3 Response timelines

We aim to respond to verified requests within 30 days. Where permitted by law, this period may be extended (for example, if the request is complex or numerous). If we need more time, we will notify you and explain why.

Note: Certain information may be retained as required by law, to maintain security, prevent fraud, or to establish, exercise, or defend legal claims.

9. Marketing and Advertising

We market to Educators, Parents, and administrators—not to children. You can opt out of marketing emails using the unsubscribe link or by contacting us. Transactional/critical service messages may still be sent.

10. Links to Other Sites

If we link to third-party sites, their policies apply. We do not control third-party privacy practices.

11. Our Policy Towards Minors

We do not knowingly collect Personal Information directly from children without an authorized Educator/Parent providing it. If we learn we collected such information improperly, we will delete it.

12. California Privacy Notice

If you are a California resident, you may have additional rights under California privacy laws. We do not sell Personal Information, and we do not share student data for cross-context behavioral advertising.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in practices, services, or legal requirements. We will post updates here and revise the effective date.

14. Jurisdiction and Applicable Law

This Policy is governed by applicable laws as determined by our agreements and/or the jurisdiction most relevant to the services provided. Some school/district agreements may include additional terms.

15. International Data Transfers

We do not intentionally transfer EU/UK personal data to the U.S. If access or processing outside the EU/UK occurs (for example, support access), we apply appropriate safeguards required by law.

Data may be processed in the EU and, where necessary for support and operations, in other countries depending on where our staff and service providers are located.

16. Contact Us

If you have questions or requests about this Privacy Policy, contact us:

Email: info@slonig.org
Address: Slonig, Inc., 1111B S Governors Ave STE 48458, Dover, DE 19904, USA