Privacy Policy for Cloudboard

1. Introduction

Cloudboard is a collaborative whiteboard and study tool designed to help students learn interactively and securely.

This Privacy Policy describes how Cloudboard ("the App," "we," "us," or "our"), operated by an individual developer ("Developer"), collects, uses, and shares information about you when you use our iOS application. By using Cloudboard, you agree to the collection and use of information in accordance with this policy.

Developer Contact: hello@cloudboardapp.com

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Email address, encrypted password, username, and display name when you create an account.
• Profile Information: Custom display names, color schemes, and user preferences.
• Content: Drawings, whiteboard content, pages, notes, and any materials you create or upload within the app.
• Room Information: Room names, descriptions, join codes, and collaboration settings.
• Folder Organization: Folder names and structure for organizing your content.

2.2 Information Collected Automatically

• Device Information: Device token for push notifications, device type, and operating system version.
• Usage Data: Features used, pages created, rooms joined or created, collaboration activities.
• Authentication Tokens: Session tokens to maintain your logged-in state.
• Timestamps: Creation dates, last seen times, modification dates for content and activities.

2.3 Information from Device Permissions

When granted, Cloudboard may access:

• Camera: To capture whiteboard photos for the AI tutor feature (photos are not stored permanently unless you save them).
• Photo Library: To save and share whiteboard snapshots.
• Microphone: For voice chat during collaborative sessions (audio is not recorded or stored).
• Notifications: To send alerts about room activities and collaborations.

3. How We Use Your Information

We use collected information to:

• Provide and maintain the Cloudboard service.
• Authenticate users and secure accounts.
• Enable collaboration and room functionality.
• Send push notifications (when enabled).
• Provide AI tutoring assistance for whiteboard content.
• Sync your content across devices.
• Improve app performance and fix bugs.
• Comply with legal obligations.

4. AI Tutor Feature

• The AI Tutor feature processes whiteboard images to provide educational assistance.
• Images are temporarily processed by a secure third-party AI service to generate responses.
• Images are not permanently stored on our servers.
• (Currently powered by OpenAI's API — see OpenAI's Privacy Policy).
• You may choose not to use this feature.

5. Data Storage and Security

• Storage Location: Data is stored using Supabase infrastructure (PostgreSQL database).
• Encryption: Passwords are protected using industry-standard bcrypt hashing.
• Data Retention: Your content remains until you delete it or your account.
• Security Measures: All communication uses HTTPS/TLS encryption.
• Access Controls: Row-level security ensures users only access their own data.
• iCloud Sync (if enabled): Files may also be securely stored in your private iCloud Drive using Apple's infrastructure.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share data only:

• With Your Consent: When you explicitly authorize sharing.
• For Collaboration: With users you invite to rooms or share content with.
• Service Providers: Supabase (database), OpenAI (AI tutor), Apple Push Notification Service.
• Legal Requirements: To comply with law, court order, or government request.
• Safety: To protect rights, property, or safety of users or the public.

7. Your Rights and Choices

You have the right to:

• Access: View your personal data through the app.
• Update: Modify your profile and account information.
• Delete: Permanently delete your account and data.
• Export: Save your whiteboard content locally.
• Opt-Out: Disable push notifications or avoid AI features.
• Restrict: Control who can join your rooms via privacy settings.

To delete your account, use the Delete Account option in Settings. This removes your account and all associated data.

8. Children's Privacy (COPPA Compliance)

Cloudboard is intended for users 13 years and older.

We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has provided us personal information, contact us immediately and we will delete it.

For users aged 13-17:

• Parental consent may be required depending on jurisdiction.
• We recommend parental supervision for collaborative features.

9. International Data Transfers

Your information may be processed in countries other than your own. By using Cloudboard, you consent to such transfers. We maintain appropriate safeguards to protect your information.

10. Third-Party Services

Cloudboard integrates with:

• Supabase — database and authentication
• OpenAI — AI tutoring features
• Apple Push Notification Service — notifications

These services have their own privacy policies, which we encourage you to review.

11. Data Breach Notification

If a data breach may compromise your personal information, we will:

• Notify affected users via email within 72 hours.
• Provide details about the affected data.
• Outline remediation steps.
• Suggest protective actions for users.

12. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA:

• Right to know what personal information is collected.
• Right to know if it is disclosed (we do not sell data).
• Right to deletion of personal information.
• Right to non-discrimination for exercising privacy rights.

To exercise these rights, contact: hello@cloudboardapp.com

13. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have the right to:

• Access, rectify, and erase your data.
• Request data portability.
• Restrict or object to processing.
• Withdraw consent at any time.
• Lodge a complaint with a supervisory authority.

Legal Basis for Processing: Consent, legitimate interests, and contractual necessity.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted in the app and on our website with an updated "Last Updated" date. Continued use of Cloudboard after updates constitutes acceptance of the revised policy. For material changes, we will provide prominent in-app or email notice.

15. Contact Information

Developer: Greg Powell (Individual Developer — not a company or LLC)

Email: hello@cloudboardapp.com

Response Time: We aim to respond within 30 days (best effort).

16. Disclaimer and Limitation of Liability

Notice: The Developer is an individual, not a business entity.

Cloudboard is provided "as is" and "as available," without warranties of any kind, express or implied.

Liability Cap: The Developer's total liability shall not exceed the greater of $10 USD or the amount you paid (if any) in the preceding 12 months.

The Developer shall not be liable for:

• Indirect, incidental, special, or consequential damages.
• Loss of data, profits, goodwill, or other intangible losses.
• Unauthorized access, data breaches, or service interruptions.
• Third-party content or technical failures.

You agree your sole remedy for dissatisfaction is to discontinue using the app.

17. Assumption of Risk

By using Cloudboard, you expressly acknowledge and accept potential risks, including:

• Data loss or corruption.
• Unauthorized access or technical failures.
• Service discontinuation without notice.
• Interactions with other users.
• Reliance on AI-generated content.

18. No Professional Services

Cloudboard and its AI tutor feature do not provide professional educational, medical, legal, or financial advice. All content is for informational and learning support purposes only.