The camera and your family’s privacy

You are putting a camera in your home and pointing it at your children. You are entitled to a straight answer about what it does. Here is one, in plain language.

The short version

  • The camera picture is turned into movement on your own device, inside the browser. Camera frames are held in the browser’s memory only, and no picture or video ever leaves the device.
  • What does leave your home is numbers: signing in, which activity was open and for how long, how each round went — answers, help needed, and movement measures like how smoothly your child moved — and details about the device that help us fix problems.
  • There is no advertising in occo, no ad tracking, and no recommendation feed built out of what your child does.
  • You can turn the camera off and still use occo by touch.

The rest of this page explains each of those. If you want the binding legal version rather than the readable one, that is the Privacy Policy and the Terms of Service.

What the camera actually does

When a scene responds to a wave, something has to work out that an arm moved. In occo that happens on the machine in front of you: the browser reads the camera and runs the motion tracking there, using a model that runs on the device. What comes out of that is not a picture. It is a set of points marking where hands, a body or a face are in the frame, and in some activities a rough outline of the body’s shape. The scene reacts to those, and each frame’s points are thrown away as the next one arrives.

Raw camera video is never sent to occo’s servers, or anywhere else. That is a property of how the product is built, not a setting you have to find and switch on.

Two things that do reach the internet

Being precise matters more than sounding reassuring, so two honest caveats about camera activities:

  • The tracking model is downloaded to you. The first time a device runs a camera activity, the browser fetches the model files from occo’s own site. That traffic goes one way: the model comes down to your device, and no camera data goes back up.
  • Numbers worked out from the movement. In the activities that measure something, the tracking points are turned into numbers — how far a hand reached, how smooth a movement was, how many answers were right — and those numbers are saved to your child’s profile, so Progress can show them. While an activity is open, occo also sends how many people, hands and faces the camera is finding, and how smoothly the camera is running, so we can tell when tracking is struggling. Neither includes a picture.

What leaves your home

occo is a web app, so some things necessarily travel over the internet. These are they.

  • Signing in. Your email address and the sign-in tokens that keep you signed in, plus the times those events happened. The sign-in and sign-up forms also run Cloudflare’s check that a person, not a bot, is filling them in.
  • The activity library. Scenes and their media are fetched as you open them — this is why a stable connection matters.
  • A record of the visit. While you are signed in, each screen keeps a record of its visit: which pages and activities were open and for how long, sent in small batches every few seconds. It is what Activity history in Progress is built from.
  • How each round went. In the activities that measure something, the numbers described above, saved to the profile that was playing.
  • Device details, and errors. To find and fix problems, that record also carries how quickly pages and scenes load, the browser and operating system, the graphics chip, the screen size and the device’s memory, and the error messages and warnings the page logs. When something breaks, the error goes to occo’s own monitoring, not to an outside service.
  • Ordinary web request information. The same things every website sees: your network’s IP address at the edge, which browser you are using, and timestamps.
  • A device identifier. A random ID is kept in your browser so occo can tell your screens apart. Clearing your browser data removes it, and the screen gets a new one the next time you sign in.
  • Billing. Payments are handled by Stripe, and the app loads Stripe’s own script for the card form. occo does not store your card number. See trial, billing, and cancelling.
  • Buddy speech. The buddy’s lines are written ahead of time and turned into speech on occo’s servers by a text-to-speech service. Your browser never contacts that provider, and nothing your child says or does is sent to it.

And one thing that never leaves, because it is never used: the microphone. occo does not listen, and the site tells the browser it may not use a microphone at all.

What is not in that list is as important as what is. occo has no advertising, no ad network and no ad tracking, and nothing your child does is sold or used to profile them. The services occo relies on are Supabase (the database and sign-in), Netlify (which serves the app), Stripe (payments), ElevenLabs (the buddy’s voice) and Cloudflare (the sign-in check).

What is stored, and where

Your account lives in occo’s database, which is hosted on Supabase. What is kept there is your account and household: the email address you signed up with, the profiles you created and anything you typed into them, the settings on those profiles, each child’s levels and the numbers from their rounds, and the visit records described above.

Anything you type into a profile becomes stored information. If you name a profile after your child, that name is stored, and so is a birthdate if you add one in Settings. Plenty of families use a first name only, or a nickname, and leave the birthdate empty. That choice is yours, and it is worth making deliberately.

occo is not a medical record system, and nothing about a diagnosis or a therapy plan is required for it to work. It does not ask for one.

Stored data is encrypted while it sits in the database and while it travels between your browser and our servers. Access is scoped per account at the database level: row-level security policies restrict each account to its own data. A small number of Ouva staff can also see it, to support you and to fix faults. The Privacy Policy sets out what is stored and for how long; the technical security documentation, written for IT departments evaluating Ouva for a clinic or a school, names the specific protocols and standards.

Turning the camera off

You are not committed to the camera. There are three levels of “off”:

  • Turn it off in occo. The camera button at the top left of an activity is green while the camera is on. Tap it and the camera stops; activities answer touch and clicks instead. The choice is kept for the child who is playing.
  • Take the permission away in the browser. Open the site controls in Chrome’s address bar and set Camera to Block, or turn the browser’s camera access off in your operating system’s privacy settings. occo cannot use a camera the browser will not hand it.
  • Cover it or unplug it. A USB webcam you unplug is unambiguous, and most built-in cameras have an indicator light that no website can override.

Camera setup and troubleshooting covers the camera button and the browser’s camera permission.

Talking to your child about it

A camera in the living room is worth explaining rather than installing quietly, and children tend to accept “it watches how you move so the ocean knows where you are” quite happily. Two things that help: put the camera somewhere visible rather than hidden, and let them see that turning it off stops the scene responding. Understanding that they can switch it off is usually what makes them relaxed about leaving it on.

The documents that actually bind us

This page is an explanation, not a contract. The commitments are in these, and where the two ever differ, these win:

  • Privacy Policy — what is collected, how it is used, and your rights over it.
  • Terms of Service — including who owns what you upload, the commitment not to train generative AI models on your content without your explicit written consent, and what happens to your data after you cancel.

If something here is unclear, or you want to know something this page does not answer, email support@playocco.com and ask. A question about a camera in your own house deserves a real answer.

Common questions

Still stuck?

Tell us what you were doing, what screen you were on, and what happened instead. A photo of the screen helps more than anything.