Last updated: 9/9/2025
Children's Privacy Protection
TokenTree is committed to protecting children's privacy and complies with the Children's Online Privacy Protection Act (COPPA). We require parental consent for children under 13 and implement additional safeguards for all minors.
1. Information We Collect
From Parents/Guardians:
- Email address and name (for account authentication)
- Family structure information (number and names of children)
- Educational preferences and settings
- Reward approval decisions and feedback
From Children (with parental consent):
- First name only (no last names stored)
- Academic grades and subjects
- Token earnings and spending
- Reward requests and preferences
- Login activity (for progress tracking)
Technical Information:
- Device type and browser information
- IP address (for security purposes only)
- Usage analytics (aggregated and anonymized)
- Error logs and performance data
2. How We Use Your Information
Service Provision: To provide and maintain the TokenTree platform functionality
Family Management: To enable parents to track children's academic progress and manage rewards
Security: To protect accounts and prevent unauthorized access
Improvement: To analyze usage patterns and improve our service (using aggregated, non-personal data)
Communication: To send important updates about the service (parents only)
3. COPPA Compliance for Children Under 13
Parental Consent: We obtain verifiable parental consent before collecting any personal information from children under 13
Limited Collection: We collect only the minimum information necessary for the educational service
No Sharing: We do not share children's personal information with third parties
Parental Rights: Parents can review, delete, or refuse further collection of their child's information
No Behavioral Advertising: We do not use children's information for targeted advertising
4. Information Sharing and Disclosure
We DO NOT sell, rent, or trade personal information to third parties.
We may disclose information only in these limited circumstances:
- Within Families: Family members can see their own family's data only
- Legal Requirements: When required by law or to protect safety
- Service Providers: To trusted partners who help operate our service (under strict privacy agreements)
- Emergency Situations: To prevent harm to children or others
5. Data Security and Protection
Encryption: All data is encrypted in transit and at rest
Access Controls: Strict access controls limit who can view data
Family Isolation: Each family's data is completely isolated from others
Regular Security Audits: We regularly review and update our security measures
Secure Authentication: We use industry-standard authentication methods
6. Your Privacy Rights
For Parents/Guardians:
- Access and review all family data
- Correct or update information
- Delete family accounts and all associated data
- Export family data in a portable format
- Opt out of non-essential communications
Additional Rights for EU Residents (GDPR):
- Right to data portability
- Right to restrict processing
- Right to object to processing
- Right to be forgotten
7. Data Retention
Active Accounts: Data is retained while accounts remain active
Inactive Accounts: Data may be deleted after 2 years of inactivity (with prior notice)
Deleted Accounts: Data is permanently deleted within 30 days of account deletion
Legal Requirements: Some data may be retained longer if required by law
8. Cookies and Tracking
Essential Cookies: We use cookies necessary for the service to function (login sessions, family codes)
Analytics: We use aggregated, anonymized analytics to improve our service
No Advertising Tracking: We do not use cookies for advertising or behavioral tracking
Third-Party: We minimize third-party cookies and scripts
9. International Data Transfers
Your data is stored on secure servers. If we transfer data internationally, we ensure appropriate safeguards are in place to protect your privacy rights in accordance with applicable data protection laws.
10. Updates to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes through the platform or by email. We encourage you to review this policy periodically to stay informed about how we protect your privacy.
11. Age Verification
TokenTree is designed for families with children. We do not knowingly collect personal information from children under 13 without parental consent. If we discover we have collected information from a child under 13 without consent, we will delete it immediately.
12. Contact Us About Privacy
If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us:
Privacy Officer: ahmedlotfy700@gmail.com
Support Team: ahmedlotfy700@gmail.com
Mail: [Your Business Address]
Response Time: We will respond to privacy requests within 30 days
13. Parental Controls and Oversight
Full Visibility: Parents have complete visibility into their children's activity
Approval Systems: All reward requests require parental approval
Data Access: Parents can access, modify, or delete their child's data at any time
Privacy Settings: Parents control all privacy settings for their family
This Privacy Policy is part of our Terms of Service. By using TokenTree, you consent to the data practices described in this policy.