Scope

This Privacy Policy applies to the Custom Token Board mobile application and related services we use to operate account sign-in, syncing, subscriptions, feedback handling, storage, and account management.

Custom Token Board supports both guest use and signed-in use. Some privacy practices differ depending on whether you use the app in guest mode or create/sign in to an account.

Information We Collect

A. Account and Sign-In Information

If you create an account or sign in, we may collect and process information such as:

• email address
• internal account identifier or user ID
• sign-in provider information, such as email/password, Google, Apple, or other enabled sign-in providers
• session and authentication information needed to keep you signed in and manage account security

B. Profile Information

If you choose to add or update profile information, we may collect:

• first name
• role or account type, such as Parent, Teacher, Therapist, Caregiver, or Other

C. User-Generated Content

Depending on how you use the app, we may collect and process content you create or upload, including:

• token board titles
• “working for” text
• custom board configuration data
• token progress state
• photos, images, backgrounds, reward images, and related uploaded media

D. Feedback and Support Information

If you send feedback through the app, we may collect:

• the message you submit
• account-linked information associated with that message, such as your email, first name, or role if you are signed in
• limited technical information used to prevent abuse, spam, or repeated submissions

E. Purchase and Subscription Information

If the app offers paid features, subscriptions, or restored purchases, we may process:

• app user ID
• entitlement or access status
• subscription or purchase state
• restore-purchase activity
• product and billing metadata provided through Apple, Google, RevenueCat, or related billing providers

We do not receive your full payment card information directly. Payments are processed by the platform or billing provider you use.

F. Device, Local App, and Technical Information

We may store or process:

• local preferences and settings
• guest-mode content stored on the device
• cached board content and cached media
• installation identifiers used for abuse prevention or app functionality
• limited operational, security, and troubleshooting data needed to operate the app safely

G. Permissions

The app may request access to:

• camera
• photo library / media library

These permissions are used so users can select or capture images for boards, tokens, or rewards.

How We Use Information

We may use information collected through Token Board to:

• create and manage user accounts
• authenticate users and maintain secure sessions
• store uploaded images and other custom media
• save, sync, restore, and display boards and related content
• manage subscriptions, entitlements, and premium access
• process feedback submitted through the app
• send internal notifications when feedback is received
• prevent spam, abuse, fraud, or misuse
• troubleshoot, secure, maintain, and improve the app
• comply with legal obligations and enforce our policies

Guest Mode and Signed-In Use

Guest Mode:
If you use Custom Token Board in guest mode, much of your content may remain stored locally on your device, including certain boards, labels, images, cached files, and settings.

Signed-In Use:

If you create an account or sign in, some account data and user-generated content may be stored with our backend service providers so that features such as account management, syncing, backups, billing access, entitlement checks, and feedback handling can function.

Users can revoke camera or photo permissions at any time through their device settings.

Where Data Is Stored

A. Local Device Storage

Depending on how you use the app, the following may be stored locally on your device:

• guest boards and guest board settings
• cached signed-in content
• uploaded images or temporary media files
• token progress and local app preferences
• feedback cooldown or similar local state

B. Cloud / Server Storage

For signed-in users and other cloud-backed features, certain data may be stored by our service providers, including:

• account records
• profile information
• entitlement / premium access records
• synced boards and board metadata
• private uploaded media
• feedback submissions and related support records

When We Share Information

We do not sell your personal information.

We may share information only in the following circumstances:

• with service providers that help us operate the app
• with platform providers involved in subscriptions, billing, or sign-in
• if required by law, legal process, or valid government request
• to protect the rights, safety, security, or integrity of the app, our users, or others
• in connection with a merger, acquisition, restructuring, or sale of assets, subject to applicable law

Service Providers and Third Parties

We currently use or may use the following categories of service providers:

Supabase:
Used for authentication, database services, server functions, and private file storage.

RevenueCat:
Used for subscription management, entitlement status, and purchase-related app access.

Apple and Google:
Used for app distribution, platform billing, authentication, and related platform services.

Google Sign-In and Sign in with Apple:
Used when users choose those sign-in methods.

Resend or similar email service providers:
Used to send internal email notifications when in-app feedback is submitted.

These providers may process information as needed to provide their services to us and to support app functionality.

Advertising, Analytics, and Tracking

We do not currently use third-party advertising SDKs inside the app for behavioral advertising.

We do not currently use third-party analytics or ad-tracking tools inside the app for personalized marketing.

However, platform providers such as Apple and Google may collect diagnostic, transactional, or platform-level information under their own privacy policies when users download, install, purchase, or use apps distributed through their stores.

Data Retention

We retain information for as long as reasonably necessary to provide the app, operate accounts, maintain security, process subscriptions, respond to feedback, enforce policies, and comply with legal obligations.

Examples:

• local guest data may remain on the device until the user deletes it or removes the app
• account-linked cloud data may remain until it is deleted by the user, removed through account deletion, or no longer needed for operational purposes
• support, abuse-prevention, security, or backup records may be retained for a limited period even after some user content is deleted

Children's Privacy

Token Board is intended to be used by adults such as parents, caregivers, educators, and therapists. It is not intended for children to independently create accounts or submit personal information directly to us.

Adults may choose to enter or upload information relating to a child or learner, such as names, labels, or photos, for the adult’s own use of the app. If you upload or enter information about a child or another person, you are responsible for having the authority and any necessary consent to do so.

We ask users not to upload sensitive personal information that is not necessary to use the app, including medical records, therapy notes, government IDs, financial information, or other highly sensitive content.

How We Share Information

We do not sell or rent personal information. We do not share personal information with data brokers or third parties for their own advertising or marketing purposes.

We may disclose information to trusted service providers that process information on our behalf in order to operate the app, including:

• Supabase, for authentication, database, server functions, and private file storage
• RevenueCat, for subscription and entitlement management
• Apple and Google, for app distribution, platform billing, authentication, and related platform services
• Google Sign-In and Sign in with Apple, when users choose those sign-in methods
• Resend or similar email service providers, for feedback notification emails

We may also disclose information:

• if required by law, regulation, legal process, or valid governmental request
• to protect the rights, safety, security, or integrity of the app, our users, or others
• in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to applicable law

No Sale or Advertising Sharing

We do not sell personal information. We do not share personal information with third parties for cross-context behavioral advertising, targeted advertising, or data broker purposes.

User Controls and Choices

Users may be able to:

• use the app in guest mode
• create an account or sign in
• update profile details
• delete local boards or local images
• submit feedback
• manage camera and photo permissions in device settings
• delete their app account from within the app, where available
• uninstall the app to remove local app data stored on the device

Account Deletion

If you are a signed-in user, Token Board may provide an in-app account deletion option.

When an account deletion request is completed, we delete the account-linked data we control that is associated with that app account, including:

• account profile information
• entitlement and access records
• synced token boards and related board data
• private cloud-stored media associated with those synced boards
• account-linked feedback records, where applicable

Deleting the app from your device does not by itself delete cloud-stored account data.

If you use Token Board in guest mode, your content may remain stored locally on your device until you delete it or remove the app.

We may retain limited information for a reasonable period where necessary for:

• security and fraud prevention
• debugging and system integrity
• legal compliance
• backup or disaster recovery processes
• enforcement of our terms or protection of users and the service

In some cases, deletion of certain backup or residual technical records may not be immediate, but we aim to delete or de-identify account-linked data we control within a reasonable period after a valid deletion request is completed.

Security

We use reasonable technical and organizational measures intended to protect information processed through Custom Token Board.

No method of transmission, storage, or security is perfect, and we cannot guarantee absolute security.

Users should also help protect their information by:

• using secure devices
• keeping their operating system updated
• protecting device access with passcodes, biometrics, or other device-level safeguards
• signing out or deleting accounts when no longer needed

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may update the date above and, where appropriate, provide additional notice inside the app or through other reasonable means.

Your continued use of Custom Token Board after an updated Privacy Policy becomes effective means you acknowledge the updated policy.

International Processing

Depending on your location and the locations of our service providers, information may be processed and stored in countries other than your own. By using the app, you understand that your information may be processed in jurisdictions with different data protection laws than the laws of your place of residence.

Website Usage

When visiting our website, basic technical information such as browser type or device information may be collected automatically by hosting providers or website platforms such as Webflow. This information is used for website functionality and security and is not used to personally identify visitors.

Contact

If you have any questions about this Privacy Policy, please contact:

Renee Gomez
Email: daijobuprints@gmail.com