EZ Token Board Privacy Notice

1. Who we are and scope

EZ Token Board by EZducate (the “App”) is provided by EZducate LLC (“EZducate,” “we,” “us,” or “our”), a Virginia limited liability company. This notice applies to the standalone EZ Token Board mobile app. It does not govern the separate EZducate website or platform.

The App is designed for parents, caregivers, educators, and clinicians to use with a child. A child may interact with restricted Board Mode, but purchases, external links, settings, text entry, and network AI features are reserved for an adult behind a caregiver check.

2. Information kept on the device

The App stores the following locally:

• profile display names, which should be first names or nicknames only;
• profile avatars and photos selected for tokens or rewards;
• board titles, goals, target-behavior text, rewards, configurations, and progress;
• caregiver praise recordings and downloaded generated audio or art;
• session history, timestamps, completion information, and local notes;
• settings, caregiver-gate preferences, and cached entitlement status; and
• locally generated PDF, PNG, DOCX, CSV, and EZ Token Board backup files.

EZducate does not receive this information merely because the App stores or displays it. An adult may deliberately send an export to another person or service using the operating-system share, print, or file picker. The destination then handles the file under its own privacy terms. Device or cloud backups controlled by Apple, Google, an employer, a school, or the device owner may preserve local App data after it is removed from the App.

3. Information processed off the device

Service, device, and security information

The App may send the device platform, App version, a Play Integrity or Apple App Attest result, an anonymous installation credential, request timestamps, IP address, and limited error or security metadata. We use it to deliver configuration, authenticate an installation without an account, prevent abuse, protect purchases and AI credits, troubleshoot failures, and secure the service. We do not use advertising identifiers or fingerprint a device for advertising.

Optional AI requests

When an adult chooses an AI feature, the App may send a plain-language board goal, general age band, setting such as home or school, and language; an art noun or description, style, and art type; or caregiver-written praise lines and a selected voice and language. We process the request, moderation result, generated output, request ID, and credit usage to provide the feature, enforce safety rules, prevent abuse, and troubleshoot.

Local profiles, session history, photos, recordings, complete boards, and exports are not attached to AI requests.

Do not put a child’s name, contact information, school, diagnosis, IEP content, health information, or other identifying or sensitive information in an AI field.

Generic, child-appropriate AI art may be retained in an approved shared cache and offered to other users so the same safe request does not require another generation. A shared-cache entry does not include the requester’s identity, raw prompt, profile, board, photo, recording, or session history. Board goals, coaching requests, and praise lines are not placed in the shared catalog.

Purchases and subscriptions

Apple App Store or Google Play processes the purchase. EZducate may receive the store, product identifier, purchase token or transaction/order identifier, purchase and renewal status, paid-through date, acknowledgement or refund status, and related entitlement and AI-credit ledger events. We use this data to validate purchases, unlock Pro features, grant and reconcile credits, restore purchases, prevent duplicate grants and fraud, process refunds, and meet accounting and legal obligations. EZducate does not receive the full card number or bank account used for the purchase.

Optional anonymous usage statistics

“Share anonymous usage statistics” is off by default and available only in caregiver-gated Settings. If enabled, the App may send a rotating anonymous identifier, an allowlisted feature name, and a coarse duration bucket. It does not include names, boards, goals, photos, recordings, AI text, free-form notes, or session details. Turning the setting off stops future telemetry.

Support and privacy requests

If you contact us, we process your email address, message, attachments, and identifiers you choose to provide so we can respond, investigate, and keep an appropriate record. Do not send a child’s sensitive information unless it is genuinely necessary.

4. How and why we use information

We use off-device information only to provide requested features; validate purchases, restoration, and credits; secure the service and prevent fraud or abuse; troubleshoot; provide support; meet store, tax, accounting, dispute, and legal requirements; and understand coarse feature use when an adult enables optional statistics.

For people in the European Economic Area, United Kingdom, or another region requiring a lawful basis, our bases are performance of the requested service or contract, consent for optional telemetry and permission-based device access, EZducate’s legitimate interests in security and reliable operation, and legal obligations relating to purchases, tax, fraud, and disputes. You may withdraw consent for optional processing at any time. The App does not make decisions producing legal or similarly significant effects through automated profiling.

5. Service providers and disclosures

We disclose limited information only as needed to:

• OpenAI, for moderation, structured text generation, image generation, and text-to-speech used by optional AI features;
• Apple and Google, for app distribution, device attestation, purchases, subscriptions, refunds, and store restoration;
• infrastructure and security providers that host and protect the mobile API; and
• professional advisers, authorities, courts, or transaction counterparties when reasonably necessary to comply with law, protect rights and safety, investigate misuse, or complete a corporate transaction with appropriate safeguards.

EZducate does not sell personal information. We do not share it for cross-context behavioral advertising, serve targeted ads, or use App information to build advertising profiles.

OpenAI states that API data is not used to train its models unless the API customer affirmatively opts in; EZducate does not opt in. EZducate removes raw AI request content and temporary generated files from its operational systems within 24 hours, except approved generic shared-cache art. Under OpenAI’s standard API controls, content may be retained for up to 30 days for abuse monitoring unless shorter approved controls apply, and longer when legally required or reasonably necessary to address serious misuse.

6. Children’s privacy

EZ Token Board is an adult-directed caregiver and educator tool, not a child account service. Board Mode contains no text entry, purchases, external links, or network AI calls. Adult-only areas are protected by a caregiver check.

EZducate does not knowingly collect personal information directly from a child through the App. Information an adult enters about a child for a local board stays on the device. Adults should use first names or nicknames only and must not submit child-identifying or sensitive information to AI features.

If we learn that personal information from a child under 13, or under another applicable local age, was sent to our service without appropriate authorization, we will delete it as required. A parent or legal guardian may contact us to ask whether we hold such information, request access or deletion, or withdraw applicable consent. We may take reasonable steps to verify identity and authority.

7. Schools, education records, and health information

The standalone App is not intended to be a school system of record, medical device, diagnostic service, or substitute for professional judgment. Schools, clinics, and other organizations are responsible for their own authorization, device-management, recordkeeping, consent, FERPA, provincial education-privacy, and similar obligations. Do not submit education records, diagnoses, protected health information, or clinical notes to AI fields. Any separate institutional use governed by a written agreement is subject to that agreement.

8. Retention

• Local App data remains until an adult deletes it, clears App storage, or uninstalls the App, subject to device backups and previously exported files.
• EZducate raw AI request content and temporary generated files are removed from operational systems within 24 hours. Approved generic shared-cache art may remain until retired.
• OpenAI may retain API content for up to 30 days under standard abuse-monitoring controls, subject to the exceptions above.
• Ordinary security and API request logs are retained for no more than 30 days unless isolated for a security, fraud, legal, or abuse investigation.
• Optional anonymous telemetry is retained for no more than 13 months.
• Anonymous device credentials expire and are periodically replaced. Related inactive records are removed when no longer needed unless linked to a purchase, credit balance, security incident, or legal obligation.
• Purchase, refund, entitlement, and credit-ledger records may be kept for the relationship and afterward for restoration, fraud prevention, disputes, tax, accounting, and legal compliance, generally up to seven years after the relevant transaction.
• Support and privacy-request records are generally kept for up to two years after resolution unless a longer period is required for a dispute or law.

When a longer period is required, we restrict the information to that purpose and delete or de-identify it when the reason ends.

9. Security and international processing

We minimize collection, use encrypted HTTPS connections, store anonymous device credentials in operating-system secure storage where supported, keep service credentials out of the App, validate store purchases server-side, and limit access to people and providers who need it. No security measure can guarantee absolute protection. Protect the device, use its screen lock, and review exports before sharing them.

EZducate is based in Virginia, United States. Providers may process information in the United States and other countries where they operate. Where applicable law requires it, we use contractual and other recognized safeguards for international transfers and provide additional information on request.

10. Your choices and regional privacy rights

All users may review, edit, export, or delete local boards and profiles; clear downloaded AI art and praise audio; keep anonymous statistics off or disable them later; avoid network AI and use local templates; deny optional photo or microphone access; and contact us about off-device information we can reasonably verify.

Virginia

Virginia residents may have rights to confirm processing, access, correct, delete, and obtain a copy of personal data, and to opt out of sale, targeted advertising, and certain profiling. We do not conduct those opt-out activities. If we deny an applicable request, reply with “Privacy Appeal” to appeal. We will respond within the period required by Virginia law.

California and other U.S. states

Residents may have rights to know/access, correct, delete, and obtain portable information; opt out of sale, sharing, targeted advertising, or certain profiling; limit certain uses of sensitive information; use an authorized agent; and receive equal service. We do not sell or share App personal information for behavioral advertising.

Canada

Canadian residents may request access and correction, withdraw consent where applicable, and challenge our compliance under PIPEDA or applicable provincial law. Withdrawal does not affect earlier lawful processing and may prevent an optional feature from operating.

European Economic Area and United Kingdom

Residents may request access, correction, deletion, restriction, portability, or objection; withdraw consent; and complain to a local data protection authority. You also have the right not to be subject to solely automated decisions with legal or similarly significant effects; the App does not make such decisions.

Because the App has no EZducate account, we may need a verifiable AI request ID, store order or transaction identifier, or other limited information to locate an off-device record without identifying a child. We may decline or limit a request where law permits, including when we cannot verify it or must retain a record for security, fraud, accounting, legal, or another person’s rights. We will explain appeal or regulator options when required. We do not discriminate against anyone for exercising a privacy right.

11. Changes and contact

We may update this notice when the App, providers, or law changes. We will post the new date and provide additional notice in the App or store listing when a change is material. The bundled offline copy is updated with an App release.