Privacy Policy for Cloudboard

1. Introduction

Cloudboard is a collaborative whiteboard and social study platform designed to help students learn together through real-time collaboration, chat, direct messaging, and a social feed for sharing educational content.

This Privacy Policy describes how Cloudboard ("the App," "we," "us," or "our"), operated by Greg Powell, an individual developer ("Developer"), collects, uses, and shares information about you when you use our iOS application. By using Cloudboard, you agree to the collection and use of information in accordance with this policy.

Age Requirement: Cloudboard is only for users age 13 and older. We do not knowingly collect information from children under 13.

Contact: support@cloudboardapp.com

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Email address, encrypted password, username, and display name when you create an account.
• Profile Information: Profile bio, subjects of interest, avatar/profile picture, custom display names, and color schemes.
• Social Content: Posts you publish to the feed, images and videos you upload, captions, likes, and comments you make.
• Messages: Chat lobby messages, direct messages (DMs), and all communications sent through the app.
• Social Connections: Friend requests, follow relationships, and blocked user lists.
• Whiteboard Content: Drawings, whiteboard content, pages, notes, and any materials you create or upload.
• Room Information: Room names, descriptions, join codes, and collaboration settings.
• Folder Organization: Folder names and structure for organizing your content.

2.2 Information Collected Automatically

• Device Information: Device token for push notifications, device type, operating system version, and IP address.
• Usage Data: Features used, pages created, rooms joined or created, collaboration activities, feed posts viewed, videos watched, and content interactions.
• Authentication Tokens: Session tokens to maintain your logged-in state.
• Activity Data: Likes, comments, follows, video view history, chat participation, and notification interactions.
• Timestamps: Creation dates, last seen times, modification dates for content and activities.
• Analytics: Anonymous usage patterns to improve the app experience.

2.3 Information from Device Permissions

When granted, Cloudboard may access:

• Camera: To capture photos and record video tutorials (videos are stored when you post them to the feed).
• Photo Library: To save and share whiteboard snapshots.
• Microphone: For voice chat during collaborative sessions (audio is not recorded or stored).
• Notifications: To send alerts about room activities and collaborations.

3. How We Use Your Information

We use collected information to:

• Provide and maintain the Cloudboard service, including social features, messaging, and feeds.
• Authenticate users and secure accounts.
• Enable real-time chat, direct messaging, and chat lobby communication.
• Display your posts, comments, and content on the social feed to other users.
• Facilitate user discovery, friend/follow connections, and social interactions.
• Send push notifications about messages, likes, comments, follows, and room activities (when enabled).
• Personalize your feed and recommend content based on your activity.
• Enable collaboration and room functionality.
• Sync your content across devices.
• Moderate content and enforce community guidelines.
• Improve app performance, analyze usage patterns, and fix bugs.
• Comply with legal obligations and respond to legal requests.

4. Data Storage and Security

• Storage Location: Data is stored using Supabase infrastructure (PostgreSQL database) and third-party cloud storage.
• Encryption: Passwords are protected using industry-standard bcrypt hashing. Data in transit is encrypted via HTTPS/TLS.
• Data Retention:
  • Messages and posts: Stored until you delete them or delete your account
  • Direct messages: Permanently deleted when both parties delete them
  • Account data: Permanently deleted within 30 days of account deletion request
  • Backup data: May remain in temporary backups for up to 90 days
• Security Measures: All communication uses HTTPS/TLS encryption. We implement reasonable safeguards, but cannot guarantee absolute security.
• Access Controls: Row-level security ensures users only access data they're authorized to view.
• iCloud Sync (if enabled): Files may also be securely stored in your private iCloud Drive using Apple's infrastructure.

5. Data Sharing and Disclosure

We do not sell your personal information to third parties. We may share data in the following circumstances:

• Public Content: Posts, comments, and profile information you share on the feed are visible to other Cloudboard users.
• Messages: Chat messages are visible to chat lobby participants. Direct messages are visible to the recipients you choose.
• Social Features: Your profile, bio, subjects, and follow/follower lists may be visible to other users based on your privacy settings.
• Collaboration: Content shared in rooms is visible to all room participants.
• Service Providers: We share data with trusted third parties who help us operate Cloudboard:
  • Supabase (database and authentication)
  • Ably (real-time messaging infrastructure)
  • Apple Push Notification Service (notifications)
  • Website hosting and analytics providers
  • Cloud storage providers (for video tutorials and media)
• Legal Requirements: To comply with law, court order, subpoena, or government request.
• Safety and Enforcement: To protect rights, property, or safety of users, enforce our Terms, prevent fraud, or investigate abuse.
• Business Transfers: If Cloudboard is acquired or merged, your information may be transferred to the new owner.

6. Your Rights and Choices

You have the right to:

• Access: View your personal data through the app settings.
• Update: Modify your profile, bio, subjects, and account information at any time.
• Delete Content: Delete your posts, comments, messages, and whiteboard content individually.
• Delete Account: Permanently delete your account and all associated data (instructions below).
• Export: Request a copy of your data by contacting support@cloudboardapp.com.
• Opt-Out of Notifications: Disable push notifications in iOS Settings → Cloudboard → Notifications, or revoke them at any time.
• Privacy Controls: Control who can see your posts, send you messages, and join your rooms via in-app privacy settings.
• Block Users: Block other users to prevent them from contacting you or seeing your content.
• Report Content: Report inappropriate content or users for review and moderation.

To delete your account: Open Cloudboard → Settings → Account → Delete Account. This will permanently delete your account, profile, posts, messages, and all associated data within 30 days. This action cannot be undone.

For assistance with data requests, contact support@cloudboardapp.com.

7. Children's Privacy (COPPA Compliance)

Cloudboard is only for users age 13 and older. We do not knowingly collect, use, or share personal information from children under 13 years of age.

During account creation, users must confirm they are at least 13 years old. If we discover that a user under 13 has created an account, we will immediately terminate the account and delete all associated data.

Parents and Guardians: If you believe your child under 13 has provided us with personal information, please contact us immediately at support@cloudboardapp.com and we will promptly delete the account and all related data.

For users aged 13-17:

• Parental consent may be required depending on your location.
• We recommend parental supervision when using social features, chat, and direct messaging.
• Parents should review privacy settings and monitor their teen's activity.
• We encourage teens to use privacy controls and report any concerning behavior.

8. International Data Transfers

Your information may be processed in countries other than your own. By using Cloudboard, you consent to such transfers. We maintain appropriate safeguards to protect your information.

9. Third-Party Services

Cloudboard integrates with the following third-party services:

• Supabase — database and authentication infrastructure
• Ably — real-time messaging and chat infrastructure
• Apple Push Notification Service — sends notifications about messages, likes, and activity
• Cloud storage providers — store video tutorials and media content
• Website hosting providers — host our website and marketing pages
• Analytics services — help us understand app usage and improve performance

These third-party services have their own privacy policies and data practices, which we encourage you to review. We are not responsible for how third parties handle your information.

10. Data Breach Notification

If a data breach may compromise your personal information, we will:

• Notify affected users via email within 72 hours.
• Provide details about the affected data.
• Outline remediation steps.
• Suggest protective actions for users.

11. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA:

• Right to know what personal information is collected.
• Right to know if it is disclosed (we do not sell data).
• Right to deletion of personal information.
• Right to non-discrimination for exercising privacy rights.

We do not sell your personal information.

To exercise these rights, contact: support@cloudboardapp.com

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have the right to:

• Access, rectify, and erase your data.
• Request data portability.
• Restrict or object to processing.
• Withdraw consent at any time.
• Lodge a complaint with a supervisory authority.

Legal Basis for Processing: Consent, legitimate interests, and contractual necessity.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted in the app and on our website with an updated "Last Updated" date. Continued use of Cloudboard after updates constitutes acceptance of the revised policy. For material changes, we will provide prominent in-app or email notice.

14. Contact Information

Developer: Greg Powell (Individual Developer — not a company or LLC)

Email: support@cloudboardapp.com

Response Time: We aim to respond within 30 days (best effort).

15. Disclaimer and Limitation of Liability

Notice: The Developer is an individual, not a business entity.

Cloudboard is provided "as is" and "as available," without warranties of any kind, express or implied.

Liability Cap: The Developer's total liability shall not exceed the greater of $10 USD or the amount you paid (if any) in the preceding 12 months.

The Developer shall not be liable for:

• Indirect, incidental, special, or consequential damages.
• Loss of data, profits, goodwill, or other intangible losses.
• Unauthorized access, data breaches, or service interruptions.
• Third-party content or technical failures.

You agree your sole remedy for dissatisfaction is to discontinue using the app.

16. Assumption of Risk

By using Cloudboard, you expressly acknowledge and accept potential risks, including:

• Data loss or corruption.
• Unauthorized access or technical failures.
• Service discontinuation without notice.
• Interactions with other users.
• Reliance on AI-generated content.

17. No Professional Services

Cloudboard does not provide professional educational, medical, legal, or financial advice. All content, including user-generated tutorials and explanations, is for informational and learning support purposes only. Always verify information with qualified professionals or trusted sources.