Privacy Policy

1. Who we are

SteadyBounds is provided by Vantaryn Labs LLC (“Vantaryn Labs,” “we,” “us” or “our”), a Wyoming limited liability company. We are responsible for the personal information described in this Privacy Policy. You can reach us at hello@steadybounds.com, by phone at (307) 393-5609, or by mail at 30 N Gould St #69108, Sheridan, WY 82801, United States.

This policy explains how we handle information when you use the SteadyBounds app for iPhone and iPad (the “app”), our website at https://steadybounds.com (the “website”) and our support channels (together, “SteadyBounds”). Please read it together with our Terms of Use.

In this policy, “parent” means a parent or legal guardian who uses SteadyBounds to manage a child’s device, and “child” means a child whose profile a parent adds. Apple provides the App Store, Apple Accounts, Family Sharing and the Screen Time system on your devices. Apple’s own privacy policy, not this one, governs how Apple handles information.

2. Information we collect

What we collect depends on the features your family uses. To use SteadyBounds, a parent must give us an email address and password and, for each child, a name or nickname, an age from 3 to 17 and a grade group (elementary or middle). Everything else is either created as your family uses the app or is optional.

Information parents give us

• Parent account. Your email address, your password, the account ID we assign, the display name you choose and an optional profile photo. We ask you to confirm your email address. Our sign-in provider stores your password only in a scrambled (hashed) form, so we can’t see it.
• Family details. Your family’s name (optional), its time zone (taken from your device), and which parents belong to the family and whether each is the owner or an invited parent.
• Invitations. If you invite another parent, the email address you enter. We keep it only in a scrambled (hashed) form that we use to check that the right person accepts.
• Child profiles. Each child’s name or nickname (a nickname is fine), age, grade group and learning level, an avatar or an optional photo you choose, and settings such as school days and whether your child may ask for more time. We use age and grade group to choose a suitable starting level for learning activities and to show the child’s age to the parents in your family.
• Rules and settings. Daily limits, bedtimes, school time, breaks, pauses, extra time you give, Time Bank settings, learning and reward settings, website rules (the web addresses you type) and the apps you choose. Section 3 explains how app choices are handled.
• Family activity. Chores and tasks you create and their instructions, rewards you describe, your approvals and declines, a family plan if you write one, and messages you send in family chat.
• Reports and support messages. Chat safety reports you submit, and anything you send us by email.
• Consent records. Which version of this Privacy Policy and our Terms you accepted, and when.

Information from children’s use of SteadyBounds, set up by a parent

Children use SteadyBounds on a device their parent has connected. They do not create an account, sign in with an email address or give us contact information. When a child uses the app, we collect:

• Learning activity. Answers your child submits, results, progress, completed activities and time earned. Most activities send answers when your child finishes; in adaptive math practice, each answer is sent when your child checks it. Hints your child uses stay on the device.
• Requests and tasks. Requests for more time, including any reason or note your child adds, and chores your child marks as done.
• Family chat. If a parent adds your child to a family conversation, the messages your child sends and any chat safety reports, blocks or mutes your child uses.

Information collected automatically from devices

• Device and connection details. A name for each connected device (usually a general name such as “iPad,” or one that includes a nickname entered during setup), an ID we assign to it, a sign-in credential for that device (we keep only a scrambled version), pairing records, which child the device belongs to, when it last connected and whether it has applied your latest settings.
• Screen Time status and daily time totals. Described in Section 3.
• Notification token. If you allow notifications, the token Apple provides so we can send notifications to that device.
• Technical information. Like most online services, our servers and service providers receive your device’s IP address and the basic technical details a device sends when it connects, such as app and operating system version. We use this to run SteadyBounds, keep sign-ins secure and limit abuse. For example, we limit repeated pairing attempts using a scrambled form of the IP address, which expires after a day and is then deleted during routine cleanup.
• Location (optional). Only if a parent turns on location sharing for a child’s device and that device also grants Apple’s location permission: the device’s most recent location, how accurate it is and when it was recorded. Parents’ devices do not share their location.
• Bedtime activity (optional). Only if a parent turns it on for a child: the date and time Apple reports that the child’s device was first used during a bedtime period. It does not include which apps were used or every time the device was unlocked.
• Crash reports from Apple. If you have turned on the iOS “Share with App Developers” setting, Apple may share crash reports and basic diagnostic information about SteadyBounds with us. You can turn this off in Settings > Privacy & Security > Analytics & Improvements.

Information from Apple and RevenueCat

• Purchases. When a parent buys SteadyBounds Premium, Apple processes the payment. Apple and RevenueCat send us the purchase records we need to confirm and provide Premium to your family, such as transaction and product IDs, purchase and renewal dates, and whether a subscription is active, expired or refunded. We don’t receive your card number or your Apple Account password.
• Screen Time. Apple’s Screen Time frameworks provide the information described in Section 3.

What we don’t collect

• We don’t collect payment card or bank details, your contacts, or text messages, iMessages or emails from other apps.
• The app does not use the microphone or the camera. Read-aloud plays recordings built into the app or uses a voice already on the device, and lesson text is not sent to any speech service.
• The app doesn’t get access to your photo library. When a parent picks a profile photo for themselves or a child, the app receives only that photo: it crops it to a small image and removes its location and camera details before saving it. Family chat is text only, so photos can’t be sent in chat.
• We don’t collect your device’s advertising identifier, biometric information or browsing history, and our servers don’t receive app-by-app usage reports.
• Some information stays only on your family’s devices, such as hints your child uses and your child’s choice of Home background. We don’t receive your parent PIN. It is kept on devices only as a protected check value, and when your phone passes that check value to your child’s device during setup, it is encrypted so that our servers, which relay it, can’t read it.

3. Screen Time (Apple Family Controls) data

SteadyBounds uses Apple’s Screen Time frameworks (Family Controls, Managed Settings and Device Activity) to apply the rules a parent chooses. Apple requires a parent or guardian in the child’s Apple Family Sharing group to approve this on the child’s device, and Apple’s system enforces the rules on the device. Here is what that involves.

• App and website choices. When you choose apps or categories, Apple gives SteadyBounds private tokens instead of app names, and SteadyBounds does not get a list of the apps installed on a device. The tokens are stored on your family’s devices. When your choices need to move between your phone and your child’s device, the sending device encrypts them with keys that only your family’s connected devices hold. Our servers relay and store the encrypted data but do not have those keys, so they can’t read your choices. Our servers do see basic details needed for the transfer, such as how many apps and categories were included and when. Website rules are saved as the web addresses you type. They are settings, not a record of browsing.
• Detailed usage stays on the device. Apple’s detailed Device Activity reports, which show which apps were used and for how long, are displayed on the device through Apple’s report feature. They are not sent to us.
• Daily time totals. To keep one shared daily allowance across a child’s devices, each child device sends us a running total of screen time used that day, counted across all apps or across the apps you selected, depending on your rule. The total comes with the time it was measured, the day and time zone, technical details about Apple’s daily reset, and version numbers for the rules, app choices and permissions in effect. It does not include app names, websites or browsing history.
• Status. Whether each device has applied your latest rules and whether Apple’s Screen Time permission is in place.
• Bedtime activity. If a parent turns it on, the time of first use during a bedtime period, as described in Section 2.

We use this information only to provide SteadyBounds’s Screen Time features to your family: to apply your rules, show remaining time, share one allowance across devices, run requests, extra time and the Time Bank, and show parents device status and reports. Within SteadyBounds, it is shown only to the parents in your family and on the child’s own devices. Our hosting provider stores it for us, and authorized people who work for us can access it only as Section 6 describes. We do not sell Screen Time data. We do not use it for advertising, marketing, data mining or profiling, we do not share it with RevenueCat, and we do not disclose it to anyone for any other purpose, except where a law or valid legal process requires us to.

You stay in control. A parent can disconnect a device or remove a child at any time, and Apple’s Screen Time settings also let a parent turn off SteadyBounds’s access. Once Apple’s permission is turned off, SteadyBounds can no longer apply rules on that device.

4. How we use information

• To provide SteadyBounds. We create and secure accounts; connect and manage devices; apply your rules through Apple’s Screen Time system; keep one daily allowance across a child’s devices; handle requests, approvals, extra time and the Time Bank; grade learning activities, choose the next practice questions within the level you set, and track progress and earned time; and run chores, family chat, profile photos, optional location sharing, optional bedtime activity and parent reports.
• To send notifications. We tell the right device when something needs attention, such as a request or a decision. The notifications we send don’t include names, message text or locations.
• To provide Premium. We verify purchases with Apple and RevenueCat, restore them, and turn Premium on for the family it was bought for.
• To keep SteadyBounds safe and secure. We protect accounts, ask for a parent’s password before sensitive changes, prevent abuse and unauthorized access, review chat safety reports and enforce our Terms. Family chat automatically blocks a short list of clearly abusive phrases before a message is posted. This is a simple automated filter, and it can’t catch everything. We don’t monitor conversations; people who work for us see messages only in the situations described in Section 6.
• To support you and communicate with you. We answer your questions, send account emails (such as confirming your email address or resetting your password) and tell you about important changes to SteadyBounds, our Terms or this policy. If we ever email parents news about SteadyBounds, each message will include a way to unsubscribe. We don’t send marketing messages to children.
• To fix problems and improve reliability. We use support conversations, technical records and any crash reports Apple shares with us. We don’t use third-party analytics tools.
• To comply with the law and respond to lawful requests.

We do not use your family’s information for advertising or to build marketing profiles, and we do not make decisions with legal or similarly significant effects about anyone based solely on automated processing.

5. Legal bases for users outside the U.S.

If you are in the European Economic Area, the United Kingdom, Switzerland or another place whose law requires a legal basis for using personal information, we rely on:

• Contract: to provide SteadyBounds under our Terms.
• Consent: for a parent’s consent to use their child’s information, and for optional features such as location sharing, bedtime activity, profile photos and notifications. You can withdraw consent at any time (see Section 10). Withdrawing does not affect anything we did before.
• Legitimate interests: to keep SteadyBounds secure, prevent abuse, fix problems and handle safety reports, where those interests are not outweighed by your rights.
• Legal obligation: to comply with the law.

Depending on where you live, you may have the right to access, correct, delete or download your information, to restrict or object to our use of it, and to complain to your local data protection authority.

6. How we share information

Within your family, by role

• Parents in a family can see and manage the family’s information, including each child’s profile, rules, device status, learning, requests, tasks, screen time reports, and location and bedtime activity if turned on. Every parent you invite gets this access and can also add children to the family, so invite only a parent or legal guardian of your children whom you trust.
• A child’s device receives what it needs for that child, such as the child’s rules, requests, tasks and conversations.
• Names, avatars and profile photos are visible to members of your family.
• Family chat messages are visible to the people in that conversation. Only parents can create family conversations and choose who is in them, and they must include themselves. People added to a conversation see messages from the time they joined. Messages that someone has already seen, or that a parent has exported, can’t be recalled.

Service providers

• Supabase: hosting, database and storage, sign-in (authentication), account emails such as email confirmations, and server functions.
• Apple: Apple Push Notification service delivers our notifications, which contain only a generic message. Apple’s Screen Time frameworks run on your family’s devices. Apple processes App Store purchases under its own terms and privacy policy.
• RevenueCat: keeps track of subscription status. Its software is part of the app, but SteadyBounds turns it on only when a signed-in parent opens the Premium or purchase screens, and it then stays active until the app is closed. SteadyBounds does not turn it on for a child’s device. It receives a random ID we create for your family’s purchases (not your name or email address), the App Store transaction, product and subscription details, and the technical information its software sends to provide its service, such as the device’s IP address and app and system versions. We turn off its automatic device-identifier collection and its diagnostics, and we do not send it children’s information, messages, locations, photos, learning records, Screen Time data or your email address. RevenueCat also uses these purchase records to show us overall subscription reports, such as how many families start, renew or cancel Premium.
• Email providers: to deliver account emails and to run our support mailbox.
• Website hosting provider: to deliver our website.

We choose service providers that can keep information confidential and secure. Their agreements with us allow them to use the information we give them only to provide their services to us and require them to protect it. We rely on those agreements so that your information receives the same or equal protection to what this policy describes. Service providers are not “third parties” that use your family’s information for their own purposes.

People who work for us

Authorized people who work for Vantaryn Labs can access information only when needed to provide support, review a chat safety report, keep SteadyBounds secure or comply with the law.

Legal and safety reasons

We may disclose information if we believe in good faith that it is necessary to comply with the law or legal process, respond to lawful requests from public authorities, protect the safety of a child or anyone else, report suspected child sexual exploitation to the National Center for Missing & Exploited Children as the law requires, or protect the rights, property and security of SteadyBounds, our users or the public.

Business transfers

If Vantaryn Labs is involved in a merger, acquisition, financing, reorganization, bankruptcy or sale of assets, information may be transferred as part of that transaction. Any successor must protect it as this policy describes, or with at least equal protection, and must ask for any parental consent the law requires before using children’s information in a materially different way. We will notify you before your information becomes subject to a materially different privacy policy.

When you choose to share

When you save or send a family export or a conversation export, you decide who receives it. Exports contain private family information, so store and share them carefully.

What we don’t do

• We don’t sell personal information.
• We don’t share personal information for cross-context behavioral (targeted) advertising, and we don’t use it for targeted advertising ourselves.
• There are no ads in SteadyBounds, and the app contains no advertising, analytics or crash-reporting software from other companies.
• We don’t give or rent your family’s information to data brokers or to other companies for their own purposes.

7. Children’s privacy

SteadyBounds is designed for parents to use with their children, including children under 13. This section describes our practices for children’s information. It includes the notice required by the U.S. Children’s Online Privacy Protection Act (COPPA) and our written retention policy for children’s information. The operator responsible for children’s information collected through SteadyBounds is Vantaryn Labs LLC, 30 N Gould St #69108, Sheridan, WY 82801, United States; hello@steadybounds.com; (307) 393-5609.

How a parent sets up a child and gives consent

Children cannot create a SteadyBounds account. This is how a family is set up:

1. A parent creates a parent account with an email address and password, and confirms the email address by tapping a link we send to it.
2. Before the family is created and before any child is added, the app shows the parent a summary of what SteadyBounds saves about the family, with links to this Privacy Policy and our Terms. To continue, the parent must turn on a switch confirming that they are a parent or legal guardian, that they agree to our Terms, and that they authorize the use of their family’s information described in this policy. We record when they did so and which version of this policy they accepted.
3. That parent becomes the family owner, and their consent applies to each child added to the family. The owner can invite another parent or guardian, who joins by accepting the invitation with their own password and can then see and manage the family’s children. Invite only someone who is a parent or legal guardian of your children.
4. To turn on Screen Time controls, Apple separately requires a parent or guardian in the child’s Apple Family Sharing group to approve SteadyBounds on the child’s device with their Apple Account.

We don’t collect information from a child’s use of SteadyBounds until a parent has created the family, given this consent and connected the child’s device. Optional features that collect more information, location sharing and bedtime activity, stay off until a parent turns them on, and location also requires permission on the child’s device. Before we collect, use or disclose children’s information in a materially different way, we will notify parents and, where the law requires, ask for their consent again.

What we collect about children, and how

• From the parent: the child’s name or nickname, age (3 to 17), grade group and learning level, an avatar or optional photo, and the rules and settings the parent chooses. We ask for age and grade group only to choose a suitable starting level for learning activities and to show the child’s age to the family’s parents.
• From the child’s use of the app: learning answers, results and progress; requests for more time and any notes; chores marked as done; and, if a parent adds the child to a family conversation, the messages the child sends and any chat safety reports, blocks or mutes the child uses.
• Automatically from the child’s device: a name for the device, the device ID we assign, its sign-in credential, its notification token, its IP address and basic technical details, whether it has applied the latest settings, daily Screen Time totals (Section 3), and, only if a parent turns them on, the device’s latest location and bedtime activity.

How we use children’s information

We use it only to provide SteadyBounds to the child’s family: to apply the parent’s rules, keep the child’s daily time in sync across devices, deliver and grade learning activities and choose the next practice questions within the level the parent sets, track progress and earned time, handle requests and tasks, deliver family messages, show parents optional location and bedtime activity, send notifications, keep the service secure and meet legal requirements. We don’t use children’s information for advertising or marketing, we don’t build profiles of children for those purposes, and we don’t sell it.

Persistent identifiers

The device ID we assign, the device’s sign-in credential, its notification token and its IP address are persistent identifiers. We use them only to support the internal operations of SteadyBounds: to sign the device in, keep its rules and time in sync, deliver notifications, limit abuse such as repeated pairing attempts, and keep the service working and secure. We don’t use or disclose them to contact a specific child, to build a profile about a child, for advertising or for any other purpose. Our service providers may use them only to provide their services to us.

Children can’t make their information public

SteadyBounds has no public profiles, no public posts and no way to find or message people outside your family. A child can message only the family members a parent adds to a conversation. Children can’t create conversations or add people to them.

Who receives children’s information

• People in the child’s family. The parents and guardians in the family can see and manage the child’s information, and the members of a conversation see the messages the child sends there. This is part of how SteadyBounds works.
• Our service providers. Supabase hosts it, Apple delivers notifications to the child’s device, and our email provider handles anything a parent sends us by email. They process it only on our behalf, to run SteadyBounds (Section 6). RevenueCat does not receive it.
• People who work for us. Authorized people may see it only when reviewing a chat safety report, providing support or keeping the service secure.
• Legal and safety reasons. Where the law requires or permits it, as Section 6 describes, for example to respond to legal process or to protect a child’s safety.

We don’t disclose children’s information to any other third party, including advertisers, data brokers or companies that would use it for their own purposes. For that reason we don’t ask parents for a separate consent to third-party disclosure. If we ever want to disclose children’s information to a third party in a way that is not part of how SteadyBounds works, we will first ask for a parent’s separate consent, and a parent can agree to our collection and use of their child’s information without agreeing to that disclosure.

Only what’s needed

We do not condition a child’s participation in any activity in SteadyBounds on the child disclosing more personal information than is reasonably necessary for that activity.

A parent’s rights, and how to use them

• Review. See your child’s information in the app, or download a copy of your family’s information in Settings > Account & Family Data > Prepare Family Export. You can also email us to ask what information we hold about your child.
• Correct. Change your child’s profile and settings in the app. If you can’t change something yourself, email us and we will correct it.
• Delete. In Settings, tap Remove a Child or Allow App Removal. Under your child, tap Devices & Removal, open Remove Child, then tap Remove [your child’s name] from SteadyBounds and confirm. Your child’s information is deleted as described below once all of your child’s devices have disconnected. If one of those devices is lost or can’t get online, the app can’t finish removing that one child, so email us and we will delete your child’s information. You can also delete your whole family (Section 10).
• Refuse further collection or use. Turn off optional features, disconnect your child’s device, remove your child, or email us. We can’t provide SteadyBounds for a child without the basic information it needs, but refusing does not affect your own parent account.

What happens to chat when you remove one child but keep your family: once the removal finishes, the text of every message your child sent is deleted, along with your child’s name and avatar on those messages. Each one is replaced by a short “Message removed” note from a “Former family member”, so the conversation still reads in order. Chat safety reports your child filed, or that are about or mention your child, are deleted at the same time. What stays: messages other family members wrote, even if they mention your child, and internal security, consent and removal records that contain your child’s internal ID but no content from your child, until the family is deleted.

To make a request by email, write to hello@steadybounds.com from the email address on your parent account. We will confirm that you are the child’s parent or guardian before acting. We don’t ask for your password, parent PIN or pairing codes.

How long we keep children’s information

We keep a child’s information only as long as reasonably necessary for the purpose we collected it for, and we don’t keep it indefinitely:

• Profile, rules, learning history, requests, tasks, rewards, Time Bank and daily time totals. We need these to run the child’s limits, learning, progress, rewards and reports, and to keep them working when a device is replaced. We keep them while the child’s profile exists and delete them when a parent removes the child or deletes the family, or when we delete an inactive family (below).
• Profile photo. Kept to show the child’s picture to the family. Deleted when a parent replaces or removes it, removes the child or deletes the family.
• Location. Kept to show parents where the child’s device was most recently. We keep only the latest point. It is hidden after 24 hours and cleared by automatic cleanup shortly after. It is cleared right away when sharing is turned off. When a device is disconnected, its location is hidden right away and cleared shortly after.
• Bedtime activity. Kept to show parents device use during bedtime. We keep at most the last 30 days. Older observations are no longer shown and are deleted by automatic cleanup. Turning the feature off stops new observations, and existing ones are deleted once they are 30 days old, or right away if the child or family is deleted.
• Messages. Kept so family members can read their conversations. Kept until the family is deleted, or deleted sooner at a parent’s request.
• Chat safety reports. Kept to review safety concerns. Deleted automatically after 90 days.
• Device identifiers, credentials and notification tokens. Kept to connect and secure the device. Notification tokens are deleted when the device disconnects, credentials stop working when the device disconnects and expire after 90 days if not replaced, and the remaining records are deleted with the child or family.
• IP addresses. Not saved with a child’s profile. Pairing rate-limit records keep only a scrambled form, which expires after one day and is then deleted during routine cleanup. Our hosting provider’s technical logs may include IP addresses for a limited period (Section 8).
• Inactive families. If, for 24 months in a row, no parent in a family uses SteadyBounds and none of the family’s child devices connects to our service, we treat the family as inactive and delete it, including all of its children’s information. We may email the family owner before we do.

Section 8 has more detail, including how long backup copies last. Parent accounts are for adults. If we learn that we have collected personal information from a child without a parent’s consent, or that a parent account belongs to a child, we will delete that information.

8. How long we keep information

We keep information only as long as we need it for the purposes described in this policy, and then delete it. Here is how that works for each kind of information.

After deletion, copies may remain in backups made by us or our hosting provider for up to 90 days, until those backups are deleted or replaced. We protect backups like the rest of our systems and use them only to restore the service. Information stored on a lost or offline device stays on that device until it is recovered, because our deletion tools can’t reach it. We may keep specific information longer only where the law requires it or where needed to protect someone’s safety or resolve a legal claim.

9. Security

We use reasonable administrative, technical and physical safeguards designed to protect your family’s information. For example:

• Information travels over encrypted (HTTPS) connections, and our hosting provider encrypts stored data.
• Our servers use access rules designed so that a parent, child or device can reach only the records their role and family allow.
• The app asks for parent passwords of at least 12 characters, and it asks for your password again before sensitive changes such as changing who has parent access to your family or deleting your family’s data.
• We don’t receive the parent PIN. Devices keep only a protected check value for it, and that check value passes from your phone to your child’s device in encrypted form that our servers can’t read.
• App choices are encrypted on the sending device with keys our servers don’t have, and we keep device sign-in credentials only in scrambled form.
• The notifications we send don’t include names, message text or locations, and message history saved on a device is protected by iOS data protection and left out of device backups.

Family chat messages are encrypted in transit and kept on our hosting provider’s encrypted storage, but they are not end-to-end encrypted, so our systems can process them. No method of transmission or storage is completely secure, and we can’t guarantee absolute security. Please keep your password, parent PIN and pairing codes private. If you believe your account has been compromised or you find a security problem, email hello@steadybounds.com. If a security incident affects your information, we will notify you as the law requires.

10. Your choices and rights

Controls in the app

• Change profiles, settings and photos, or remove photos.
• Turn location sharing and bedtime activity on or off. A child’s device can also stop sharing location in the app (Profile > Location sharing > Stop sharing location) or by turning off location access for SteadyBounds in iOS Settings.
• Turn notifications off in iOS Settings.
• Block people or mute notifications in family chat.
• Download a copy of your family’s information in Settings > Account & Family Data > Prepare Family Export. Parents can also export their conversations: in family messages, open the options menu and tap Export my conversations.
• Disconnect a device or remove a child in Settings > Remove a Child or Allow App Removal > Devices & Removal.
• Turn off Apple’s Screen Time or location permission for SteadyBounds in iOS Settings. SteadyBounds then stops applying rules or sharing location on that device.

Deleting your account and family data

On your phone, tap your profile picture on Home to open Settings, then tap Account & Family Data.

1. If you own the family: tap Request Family Removal and confirm with your parent account password. Your child’s devices are asked to release SteadyBounds, so open SteadyBounds on them and keep them online.
2. When the devices have disconnected, tap Finish Removing Family, then Delete Family Records. This permanently deletes the family’s profiles, pictures, messages, learning and requests for all of its parents, except for the limited records described in Section 8.
3. If a device is lost or unavailable, you can choose Delete Without Unavailable Devices. SteadyBounds’s limits may stay on that device until you recover it and remove them there (see our Support page).
4. If you were invited to a family: tap Leave Family. The family and its shared history stay with its owner.
5. After you have left or removed every family, tap Delete Parent Account to permanently delete your sign-in.

Deleting your account, your family or the app does not cancel an App Store subscription. Cancel in Settings > [your name] > Subscriptions. A Premium purchase linked to a deleted family does not automatically move to another family.

Requests by email

You can also ask us to access, correct, delete or provide a copy of your information, or to stop using it, by emailing hello@steadybounds.com with “Privacy request” in the subject line, or by writing to us at the address in Section 16. Anyone may send us a request, wherever they live. Where a law gives you a privacy right, we honor it as that law requires, within the time it sets and subject to the exceptions it allows. A parent’s rights over their child’s information, described in Section 7, apply wherever the family lives.

Verification

To protect your family, we verify requests before acting on them. We will usually ask you to write from the email address on your parent account and may ask you to confirm details about your family. We don’t ask for your password, parent PIN or pairing codes. If we can’t verify a request, we will tell you so and explain why.

Authorized agents

Where the law allows, you may use an authorized agent to make a request for you. We will ask the agent for your signed permission and may ask you to verify your identity with us directly. We may decline a request from an agent who does not provide this proof. A parent or legal guardian may make requests on behalf of their child.

Appeals

If we decline all or part of your request, you can appeal by replying to our decision, or by emailing hello@steadybounds.com, with “Privacy appeal” in the subject line. We will review the appeal and tell you in writing what we decided and why, within the time the law that applies to you requires. If you disagree with the outcome, you may contact your state attorney general, for example through the complaint form on the attorney general’s website.

No discrimination

We will not deny you service, charge you a different price or give you a different quality of service because you used a privacy right. Some requests, such as deleting your account or your child’s information, mean we can no longer provide SteadyBounds, or some features, to you or your child.

11. U.S. state privacy notice

This section adds to the rest of this policy for residents of California and other U.S. states with consumer privacy laws.

Categories of personal information we collect

We collect, and in the past 12 months have collected, these categories of personal information, from the sources described in Section 2 (you, your family’s devices, Apple and RevenueCat):

• Identifiers: name or nickname, email address, account and device IDs, notification tokens and IP address.
• Customer records: name, email address and purchase records.
• Characteristics of protected classifications: a child’s age.
• Commercial information: subscription and purchase records.
• Internet or other electronic network activity: how your family uses SteadyBounds, such as learning activity, requests, device status and daily Screen Time totals, plus technical information.
• Geolocation data: a child device’s latest precise location, only if a parent turns on location sharing.
• Audio, electronic, visual or similar information: profile photos.
• Inferences: limited to choosing which practice questions fit a child’s level, within the limit the parent sets.
• Sensitive personal information: account sign-in credentials, precise location (optional), the contents of family chat messages and personal information of children.

Use, disclosure and retention

We use each category for the purposes in Sections 3, 4 and 7. We disclose it for business purposes only to the categories of recipients described in Section 6: our service providers, the members of your family you choose, and others where the law requires. We keep each category as described in Section 8.

No sale or sharing

We do not sell personal information or share it for cross-context behavioral advertising, and we have not done so in the past 12 months. That includes the personal information of children and teens under 16. We do not use personal information for targeted advertising or for profiling that produces legal or similarly significant effects.

Sensitive personal information

We use sensitive personal information only to provide SteadyBounds and keep it secure, as the law permits, and not to infer characteristics about anyone. Because we don’t use it for any other purpose, there is nothing for a request to limit its use to turn off. We collect a child’s information only with a parent’s consent (Section 7), and a child device’s precise location only when a parent turns location sharing on and the device grants permission. We don’t use location or any other information to identify or infer anyone’s health.

Your rights

Depending on your state, you may have the right to know what personal information we collect, use and disclose and to get a copy of it; to correct it; to delete it; to receive it in a portable format; to opt out of its sale, sharing, targeted advertising or certain profiling (we do none of these); to limit the use of sensitive personal information; to appeal our decision; and not to be discriminated against for using these rights. Section 10 explains how to make a request, how we verify it, how to use an authorized agent and how to appeal.

Other state notices

California residents: we do not disclose personal information to third parties for their own direct marketing purposes. Nevada residents: we do not sell covered information as defined by Nevada law.

12. Do Not Track and Global Privacy Control

Some browsers send a “Do Not Track” signal. There is no common standard for how to respond to it. SteadyBounds does not track you across other companies’ apps or websites, our website sets no cookies and uses no analytics or trackers, and no third party collects information about your activity on our website over time or across other sites. Our practices are therefore the same whether or not your browser sends a Do Not Track signal.

Because we do not sell or share personal information, a Global Privacy Control signal has nothing to turn off. Where the law requires, we treat it as a valid request to opt out of sale and sharing.

13. Our website

Our website does not set cookies or use analytics, advertising or tracking tools, and it does not load content from other companies: its fonts and images come from our own site. It has no sign-in and does not ask you to submit information. If you click an email link, your own email app creates the message, and we receive only what you choose to send.

Like any website, the servers that deliver our site receive the basic technical information your browser sends, such as your IP address, browser type, the page requested and the time. Our hosting provider may keep this for a limited time in server logs to deliver the site and protect it from abuse. We do not use it to identify or profile you. Links to other websites, such as Apple’s support pages and the App Store, take you to sites covered by their own privacy policies.

14. International users

Vantaryn Labs is based in the United States, and SteadyBounds is operated from the United States. When you use SteadyBounds, your information is processed and stored in the United States and in other countries where our service providers operate. Their data protection laws may differ from those where you live. Where the law requires, we rely on appropriate safeguards for these transfers, such as the data protection terms our service providers offer.

15. Changes to this policy

We may update this policy from time to time. We will post the new version on this page and change the “Last updated” date at the top. If we make a material change, we will tell parents in the app or by email before it takes effect. If a change would affect how we collect, use or disclose children’s information in a materially different way, we will ask for a parent’s consent where the law requires. Otherwise, continuing to use SteadyBounds after a change takes effect means the updated policy applies.

16. Contact us

For questions about this policy, privacy requests or questions about your child’s information, email us at hello@steadybounds.com. Email is the best way to reach us. You can also write to us or call: