Privacy Policy

Updated: 2026-09-19

Information about school data processing is supplemented by the specific school’s trial-use agreement and Data Processing Addendum. For information about your school’s data, contact the school or HeroMio by email.

1. Who is responsible for the data?

Data controller: Rytis Stankevičius, a self-employed individual. Contact email: heromiolt@gmail.com. Where school data is processed on its behalf, the school may be the data controller for that processing and the service provider may act as the data processor.

2. What data may we process?

Account and profile data, such as a name or chosen profile name, grade, and teacher or school relationship.
Login and authentication data, such as student ID, PIN or school code.
Learning data: answers, attempts, results, progress, XP, achievements and activity history.
Technical data needed for service security and operation, such as IP address, session information and technical logs.
Teacher and school administrator account data.
Visitor technical diagnostics data: session identifier, visited page path, generalized user role, IP address, browser/operating system information, bot indicator and visit times.

3. Why is the data processed?

Data is processed to provide the learning service, save progress, manage school and class accounts, ensure security, resolve technical issues, understand aggregated platform use and meet legal obligations. The purposes and legal basis for school data processing are specified in school documentation.

4. School use

When HeroMio is used on behalf of a school, the school generally determines the purposes and means of processing student data, while HeroMio may act as a data processor under a separate data-processing agreement. Specific roles depend on the actual use model.

5. Children’s data

HeroMio is designed for children’s learning, so data collection should be limited to what is necessary for learning functions. Schools and parents/guardians are informed according to the applicable legal basis and school processes.

6. Who may receive the data?

Platform hosting and related technical infrastructure use services from UAB „Interneto vizija“ Other service providers are included only when they are actually used and necessary to provide the service.

7. How long is data retained?

During school trial use, active school data is deleted within 30 days of the school’s request or the end of the agreement, except where law requires longer retention. Data may remain in backups until automatically overwritten under the applicable hosting backup cycle. For the current retention period of internal visitor diagnostics records, contact us at heromiolt@gmail.com.

8. Your rights

Under the GDPR, you may have the right to access, correct or delete data, restrict processing and lodge a complaint with the Lithuanian State Data Protection Inspectorate. Where data is processed on behalf of a school, requests concerning these rights may first need to be directed to the school.

9. Cookies and browser storage

The platform uses browser storage technologies localStorage and sessionStorage. They are used, among other things, to store local learning and login data. Separate internal visitor diagnostics operate on the platform server. More information: cookie and browser storage page.

10. Contact

Privacy questions: heromiolt@gmail.com.