QuizToucan Privacy Policy

Last Updated: October 18, 2026  ·  Effective Date: October 18, 2026

QuizToucan ("we," "our," or "the App") is a parental control and educational challenge application published by Emerald Toucan Technologies LLC. This privacy policy describes what information we collect, how we use it, and how we protect it, including information about children under 13 years of age.

1. Information We Collect

From Parent Accounts

• Email address (for creating the account, signing in, and account emails such as password resets)
• Password, stored only as a secure hash by our authentication provider (we never see or store it in plain text)
• A record of your parental consent: the date, and the version of this policy you agreed to
• The list of apps you choose to lock (app identifiers such as "com.android.chrome"), saved to your account so it can sync between your devices
• Your settings: reward times, weekly subject schedules, and device-time bookings for siblings

Your 4-digit Parent PIN is stored only on your device, as a salted hash in the app's private storage. It is never sent to our servers.

From Child Profiles (with parental consent)

• Child's first name (no last name)
• Age group (5–7, 8–10, or 11–13 — we do NOT collect date of birth)
• An avatar picked from a built-in set (no photos)
• Quiz results: answers given, accuracy, subjects played
• Progress and rewards: XP, levels, streaks, badges, and screen time earned

To adjust question difficulty, the app also keeps each child's last few answers per subject on the device only.

How App Locking Works

On Android, QuizToucan uses Android's Accessibility Service, only after a parent reads our in-app notice and turns it on. The service detects which app is on screen (its app identifier, and the window titles of visible apps for split-screen and picture-in-picture) so it can show a lock screen over apps you have locked. It does not read what is on the screen, text you type, passwords, or messages. Nothing it detects is stored or sent off the device. You can turn it off at any time in Android Settings.

On iPhone and iPad, locking uses Apple's Screen Time. You choose the apps with Apple's own picker, and Apple keeps that choice private: QuizToucan never learns which apps are installed or how they are used.

Information We Do NOT Collect

• Location or GPS data
• Photos, videos, or audio recordings
• Contact lists, call logs, or messages
• Advertising identifiers (IDFA, GAID)
• Screen content, keystrokes, or usage time from other apps
• Biometric data (Face ID or fingerprint unlock is handled entirely by your device; we never receive it)
• Social Security numbers or government IDs
• Browsing history or search queries

2. How We Use Information

We use the information collected solely to:

• Provide educational challenges appropriate for the child's age group and skill level
• Show children's progress to their parent
• Manage screen time rewards and app locking
• Authenticate parent accounts and prevent unauthorized access
• Sync a family's data across the parent's devices
• Keep a record of parental consent, as COPPA requires

We do NOT use information for:

• Advertising of any kind
• Behavioral profiling
• Sale or rental to third parties
• AI model training
• Marketing communications to children

3. How We Store and Protect Information

• All data is encrypted in transit (TLS) and at rest
• Our backend is hosted on Supabase, with Row-Level Security so each parent can only access their own family's data
• Parents sign in with email and password; parent-only screens on the device are protected by the Parent PIN, with lockouts after repeated wrong attempts
• Child data cannot be accessed without the parent's account
• The app's data is excluded from device backups and phone-to-phone transfers
• The app contains no ads and no analytics or tracking software; fonts and images are built into the app, so it makes no requests to third parties

4. Data Sharing

We do not share, sell, rent, or disclose children's personal information to any third party. We use these service providers, who process data only on our behalf:

• Supabase Inc. — database hosting and account authentication. Stores the account and child-profile data described above.
• Resend — delivers account emails (such as email confirmation and password resets) to the parent's email address. Receives only the parent's email address and the email content.
• Cloudflare — hosts this website. It does not receive any data from the app.

5. Parental Rights Under COPPA

As a parent or legal guardian, you can:

• Review your child's information in the Parent Dashboard
• Delete a child's profile and all of its data from Manage Profiles
• Delete your whole account and all of your family's data in the app under Settings → Delete Account, or by following the steps at quiztoucan.com/delete-account
• Refuse further collection, or withdraw consent, by deleting the child's profile or your account

To exercise these rights or ask questions, contact us at the address in Section 9.

6. Data Retention

• We keep a child's data only while their profile exists, and the parent's data only while the account exists
• If an account has no activity for 24 months (no sign-in, no app use and no completed challenges), we delete the account and all of its children's data automatically
• Deleting a child profile deletes its data immediately
• Deleting your account deletes your account and all child data immediately; copies in our provider's encrypted backups expire within 30 days
• We do not keep data beyond what is needed to provide the service

7. Parental Consent

We obtain verifiable parental consent before collecting any information from children under 13. Before any child profile is created, the parent must:

• Create an account and confirm their email address
• Read our notice about the data we collect, with a link to this policy
• Check three boxes confirming they are the child's parent or guardian, have read this policy, and consent to the collection described here

We keep a record of each consent (date and policy version).

8. Changes to This Policy

We will tell parents about material changes to this policy by:

• An in-app notice on next sign-in
• Email to the registered parent email address

Changes that affect children's data will require renewed parental consent.

9. Contact Information

For questions about this privacy policy or to exercise your parental rights:

Emerald Toucan Technologies, LLC
100 Powell Pl 1734
Nashville, Tennessee 37204-3622
Email: privacy@emeraldtoucantech.com

10. COPPA Safe Harbor

QuizToucan is not currently certified under an FTC-approved COPPA Safe Harbor program. We self-certify compliance with COPPA and the amended COPPA Rule (16 CFR Part 312), and intend to pursue kidSAFE or iKeepSafe certification as the product grows.