Privacy Policy

The short version

• We collect what the app needs to remember your journey — your account, your progress, and the things you write or create.
• We do not sell your data, and we do not run advertising networks inside EyeCreate.
• We do not collect your precise location, your contacts, your photo library, or camera or microphone recordings.
• You can export everything you have made, and you can delete your account and its data.

Account information we collect

• Email address and a password (stored only as a salted hash by our authentication provider — we never see or store your password).
• Display name, and an age group signal (child or adult) that decides which experience you see.
• Sign-in metadata such as sign-in times and session tokens, used to keep you logged in securely.

Learning progress we collect

• Completed lessons, adventures, missions, and Life Paths™ progress.
• World progress and world evolution state (for example, how your Garden or Language world has grown).
• Role growth, traits, confidence milestones, badges, and celebration history.
• Discovery log entries from the Encyclopedia and other exploration features.

Content you create

• Journal entries, reflections, legacy entries, and life notes.
• Bookmarks, favorites, and saved stories.
• Messages you send to Iris and to Crazy Crew chats, and the replies generated for you.
• Any audio or images you deliberately choose to record or upload inside a feature that asks for them. These are stored in private buckets that only your account can read.

Nothing you create is public by default. EyeCreate has no public profiles, no public leaderboards, and no follower counts.

Settings and preferences

• Accessibility preferences (motion, contrast, text size, read-along mode).
• Language preferences, audio and narration settings, and Iris voice settings.
• Notification and reminder preferences, including calendar settings if you use them.

Technical and diagnostic data

• Browser type, operating system, and screen size — used to render the right layout and to reproduce bugs.
• Crash reports and error logs, including the page you were on and a technical stack trace.
• Anonymous, aggregate feature usage and load-time measurements used to keep the app fast.

We do not build advertising profiles, and we do not use cross-site tracking pixels.

What we explicitly do NOT collect

• Precise or background location. We never request GPS access.
• Your contacts or address book.
• Your photo library. We can only ever see an image you deliberately upload inside a feature.
• Background microphone recordings. Audio is captured only while you are actively using a record button, and only if you grant permission.
• Camera access or video recording.
• Payment card numbers. We do not process card data ourselves.
• Biometric identifiers, health records, or government ID numbers.

Why we collect it (legal bases)

• To provide the service you asked for — remembering your progress is the product.
• To keep accounts secure and to prevent abuse.
• To fix bugs and improve performance, using the smallest amount of data that works.
• With your consent, for anything optional — such as connecting a calendar or enabling voice.

Who can access your data

• You. Every table that holds your content is protected by row-level security rules scoped to your account.
• A small number of EyeCreate staff, only when required to investigate a support request or a security incident.
• Our infrastructure providers, strictly to run the service on our behalf.

We never sell, rent, or trade personal data. We do not share it with data brokers.

Third parties we rely on

• Hosting, database, authentication, and file storage — our cloud platform provider, which stores your account and content.
• AI model providers — used to generate Iris's responses, narration, and story text. Prompts and the conversation context needed to answer are sent to the model provider. We ask providers not to train on this content.
• Optional calendar sync — if, and only if, you connect a calendar, we store an access token so scheduled items can sync. Disconnecting removes it.

We do not add advertising SDKs, social media tracking pixels, or third-party analytics that identify individual children.

Children's privacy

EyeCreate is designed for children as well as adults, and children can create accounts. Child accounts get the same protections as adult accounts, plus stricter defaults: no public sharing, no leaderboards, no social pressure mechanics, and no advertising.

For children, we collect only what the learning experience needs: an email for sign-in and recovery, a display name, progress, and the things they choose to write. We do not ask children for a home address, a phone number, a school name, or a photo of themselves.

A parent or guardian may contact us at any time to review, export, or delete a child's data. See the Children's Privacy Notice for the full detail.

How long we keep data

• Account and learning data: for as long as your account exists.
• Crash and error logs: kept short-term for debugging, then discarded.
• Backups: encrypted and rotated; deleted content falls out of backups within 30 days.

Your rights and controls

• Access — see the data we hold about you.
• Export — download your progress, journal, achievements, discovery log, and reflections.
• Correct — fix anything inaccurate in your profile or entries.
• Delete — remove your account and its data entirely.
• Withdraw consent — turn off any optional feature, such as calendar sync or voice.

To exercise any of these, use the controls in your account settings, or email eyecreatellc@outlook.com.

How we protect your data

See the Security section on our Trust Center for detail: encrypted transport, hashed passwords, row-level access rules, rate limiting, encrypted backups, and audit logging on privileged actions.

Changes to this policy

If we make a material change, we will update the effective date and tell you inside the app before it takes effect. We will not quietly widen what we collect.

Questions

Write to us at eyecreatellc@outlook.com. A real person reads it. We aim to reply within five business days.