Legal

Privacy Policy

Effective: May 12, 2026 Contact: hello@outdoapp.com

This policy explains what personal data OUTDO collects, why, how it is shared, and the rights you have under the GDPR. If you have any questions, write to hello@outdoapp.com.

01 Introduction

This Service is operated by OUTDO APP and affiliates ("OUTDO", "www.outdoapp.com" or "we"):

We are committed to protecting personal data in accordance with applicable data protection laws, including the General Data Protection Regulation ("GDPR").

02 Roles and Responsibilities

Depending on how the Service is used:

  1. When individuals sign up directly, we act as a data controller.
  2. When the Service is used by an educational institution, we act as a data processor on behalf of that institution.

Educational institutions remain responsible for ensuring lawful disclosure of student data, including compliance with applicable laws such as the Family Educational Rights and Privacy Act ("FERPA").

03 Categories of Personal Data

We may process the following categories of personal data:

a) Identity and Account Data

  1. Name
  2. Email address
  3. Student or institutional ID

b) Academic Context Data

  1. College or institution name
  2. Class and course information
  3. Assignment-related metadata

c) Technical Data

  1. IP address
  2. Device and browser information
  3. Log and usage data

04 Purposes of Processing

We process personal data for the following purposes:

  1. To provide and operate the Service
  2. To manage user accounts
  3. To facilitate coursework and assignment organization
  4. To maintain system security and integrity
  5. To improve and develop the Service

05 Legal Bases for Processing (GDPR)

We rely on the following legal bases:

  1. Performance of a contract (providing the Service)
  2. Legitimate interests (security, product improvement)
  3. Instructions from educational institutions (where acting as processor)

06 Data Sharing

We do not sell personal data.

We may share personal data with:

  1. Cloud hosting providers
  2. Infrastructure and technical service providers

All third parties are contractually bound to:

  1. Maintain confidentiality
  2. Process data only on our instructions
  3. Implement appropriate security measures

07 International Data Transfers

Personal data may be transferred outside the European Economic Area, including to the United States.

Where such transfers occur, we rely on:

  1. Standard Contractual Clauses approved by the European Commission, or
  2. Other lawful transfer mechanisms under GDPR

08 Data Retention

We retain personal data only for as long as necessary to:

  1. Provide the Service
  2. Support the pilot phase
  3. Comply with legal obligations

Data may be deleted at any time during or after the pilot.

09 Data Subject Rights

Under GDPR, individuals have the right to:

  1. Access their personal data
  2. Request correction of inaccurate data
  3. Request deletion of data
  4. Restrict or object to processing
  5. Request data portability

To exercise these rights:

  • Contact us at hello@outdoapp.com.
  • Where we act as a processor, requests may be directed to the relevant educational institution.

10 Data Security

We implement appropriate technical and organizational measures to protect personal data. However, no system can be guaranteed to be completely secure.

11 Children and Students

  1. The Service is intended for use within educational institutions.
  2. Educational institutions are responsible for obtaining any required parental or legal consent for minors.

12 Subprocessors

  1. We may engage subprocessors to support the Service (e.g., hosting providers).
  2. A list of subprocessors may be provided upon reasonable request.

13 Changes to this Policy

  1. We may update this Privacy Policy from time to time.
  2. The updated version will be published with a revised "Last Updated" date.

14 Contact

For any privacy-related inquiries, contact OUTDO APP: