TYB Privacy Policy

Effective Date: August 13, 2024

Introduction

TYB ("we," "us," or "our") is committed to protecting the privacy of our users, particularly the children who use our AI tutoring platform. We understand the importance of safeguarding the personal data of children and ensuring that parents feel confident and secure in our handling of their child's information.

This Privacy Policy outlines how we collect, use, and protect your personal data when you use the TYB platform ("Services"). By using our Services, you consent to the practices described in this policy.

Table of Contents

1. What Does This Privacy Policy Cover?
2. How is Children's Personal Data Treated?
3. What Personal Data Does TYB Collect?
4. How Does TYB Use the Information it Collects?
5. Will TYB Share Any of the Information it Receives?
6. Is Personal Data Secure?
7. Data Deletion & Retention
8. Your Privacy Rights
9. International Data Transfers
10. Changes to This Privacy Policy
11. Questions or Concerns

What Does This Privacy Policy Cover?

This Privacy Policy covers how TYB treats personal data ("Personal Data") and children's personal data ("Children's Personal Data") that we collect when you or your child use our Services. Personal Data refers to any information that identifies or relates to an individual. We do not use data collected from children for the purposes of training our AI models.

How is Children's Personal Data Treated?

TYB complies with the Children’s Online Privacy Protection Act (COPPA) and the General Data Protection Regulation (GDPR). We do not knowingly collect Personal Data from children under 13 (or under 16 in certain jurisdictions) without verifiable parental consent ("Parental Consent"). Children's Personal Data is collected only with the parent's explicit consent and is used solely for providing and improving our educational services.

Parental Consent

Before collecting any Personal Data from a child, we require Parental Consent. Parents can review, modify, or delete their child's data at any time by contacting us.

What Personal Data Does TYB Collect?

We collect the following types of data from our users:

• Profile Information: We collect information such as the child's username, age, and gender when a parent creates an account for their child.
• Activity Data: We record the child's usage of the Services, including their performance on educational activities and games, to provide progress reports to parents and improve the learning experience.
• Voice Data: If the child uses features that involve voice recording, such as reading aloud, the recordings are stored locally on the device and are not sent to our servers. These recordings are automatically deleted after use.
• Contact and Payment Information: We collect a parent’s email address, payment details, and any other necessary information when they register for our Services.
• Technical Data: We collect data such as IP addresses, browser type, and usage logs to ensure the security and functionality of our Services.

How Does TYB Use the Information it Collects?

We use the collected data for the following purposes:

• Providing and Improving Services: We use the data to create and manage user accounts, process transactions, and improve our educational content and AI tutoring services.
• Personalization: The data helps us tailor the learning experience to each child’s needs, providing customized recommendations and content.
• Communication: We use contact information to send parents updates, progress reports, and information about new features or services.
• Security: Data is used to monitor, prevent, and detect fraud or abuse, and ensure the security of our users and platform.
• Compliance: We may use the data to comply with legal obligations or in connection with legal claims, regulatory requirements, or investigations.

Will TYB Share Any of the Information it Receives?

We do not sell or rent your Personal Data or Children's Personal Data to anyone. We share your data only as described below:

• Service Providers: We may share data with third-party service providers who perform functions on our behalf, such as hosting, payment processing, and customer support. These providers are bound by confidentiality obligations and are not permitted to use your data for any other purposes.
• Legal Compliance: We may disclose data if required by law or in response to legal processes, such as subpoenas or court orders.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.
• Aggregated Data: We may share anonymized, aggregated data (data that does not identify any individual) for research, analysis, or marketing purposes.

Is Personal Data Secure?

We take the security of your Personal Data and Children's Personal Data seriously and implement various security measures to protect it, including:

• Encryption: We encrypt data both in transit and at rest to protect it from unauthorized access.
• Access Controls: Access to personal data is restricted to authorized personnel who need it to perform their job functions and are bound by strict confidentiality agreements.
• Regular Security Audits: We conduct regular security assessments, including penetration testing, to identify and address potential vulnerabilities.

However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Data Deletion & Retention

We retain your Personal Data and Children's Personal Data only as long as necessary to fulfill the purposes for which it was collected, or as required by law.

• Account Deletion: You can request the deletion of your account and associated data at any time by contacting us. Upon deletion, we will remove your data from our active databases, although some information may be retained in backups for a limited period or as required by law.
• Inactive Accounts: If an account remains inactive for more than two years, we will automatically delete or anonymize the associated Personal Data, unless otherwise required by law.

Your Privacy Rights

You have certain rights regarding your Personal Data and Children's Personal Data:

• Access and Correction: You can request access to or correction of your personal data at any time.
• Deletion: You can request the deletion of your personal data, subject to certain exceptions.
• Opt-Out: You can opt out of certain processing activities, such as receiving marketing communications.
• Withdraw Consent: If we rely on your consent for processing, you can withdraw it at any time.

To exercise any of these rights, please contact us at support@tyb.com.

International Data Transfers

TYB operates globally, and your Personal Data may be transferred to and processed in countries outside of your home country. We take steps to ensure that your data is treated securely and in accordance with this Privacy Policy, including by using approved contractual clauses and data protection agreements.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make material changes, we will notify you by email or through a prominent notice on our Services before the change becomes effective. Your continued use of the Services after the changes become effective constitutes your acceptance of the new policy.

Questions or Concerns

If you have any questions or concerns regarding privacy on our Services, please contact us at support@tyb.com. We will make every effort to resolve your concerns.