Privacy Policy

Effective date: July 12, 2026 · Last updated: July 12, 2026

Canvoz is an education and communication-learning app that helps children with communication differences build and use personalized AAC (augmentative and alternative communication) boards. Because Canvoz is often used by and for children, we designed it around one principle: collect the least data needed to make the app work, keep it safe, and let you delete it.

Canvoz is not a medical device. It is an educational and communication-learning tool. It does not provide medical, diagnostic, or therapeutic advice, and nothing in the app should be treated as such.

This Privacy Policy explains what information Canvoz ("Canvoz", "we", "us") — an app built and operated by an independent developer based in Ohio, USA — collects through the Canvoz mobile app and this website, how we use it, and the choices you have. By using Canvoz you agree to this policy.

Who uses Canvoz

Canvoz is set up and managed by an adult — a parent, caregiver, or educator (the "account holder"). The account holder creates the account and enters information about the child who will use the boards. Children use the talker to communicate, but they do not create accounts or enter account information themselves.

Information we collect

Account information

When you create an account we collect your email address and, if you provide them, your name and role (parent or educator). Educators may add an organization name and work setting. Authentication is handled by our hosting provider (Supabase); sign-in with Apple is also supported.

Information about the child

To generate a personalized board, the account holder provides information such as the child's first name, age, developmental communication level, and language, plus survey answers about the child's world — routines, the people in their life (name and role), favorites, communication goals, and where communication is difficult. This information is provided by the caregiver, is used only to build and improve that child's boards, and is visible only to the account holder.

Content you create

Boards, pages, cards, and vocabulary you create or generate are stored in your account. If you use the optional assistant, only confirmed, minimized facts about the child's world (for example, "likes trains") are saved as reviewable memory. We never store health or diagnosis information, and the assistant's conversation is not saved.

Photos

Photos are local-first: a photo you add to a card stays on your device by default and is not uploaded to us. A photo only leaves your device when you explicitly choose to (1) send it for the optional photo-to-vocabulary analysis, or (2) include it in a file you share. When you use analysis, the photo is processed in transit only — it is not stored on our servers and is deleted after suggestions are produced unless you choose to keep it as a card symbol.

Purchases

Subscriptions are processed by Apple and Google through our payments partner (RevenueCat). We receive a purchase record and a customer identifier so we can unlock features; we never receive or store your full payment card details.

Information that stays on the device (we do not collect it)

Word-prediction data and how often cards are used — this stays on the device and is never sent to us or synced between devices.
Assistant conversation transcripts — these are temporary and are never saved, logged, or synced.

How we use information

To operate the app: sign-in, saving and syncing your boards, and running features.
To generate personalized boards, pages, and vocabulary suggestions from the information you provide.
To process and restore subscriptions.
To respond to support requests and keep the service secure.

We do not use your information for advertising, and we do not sell or rent personal information.

AI processing

Board and vocabulary generation, the assistant, and photo analysis use the Anthropic Claude API as a data processor. Content sent for these features is processed to return a result and is not used to train AI models and not retained by the AI provider beyond processing. Child data is never included in our logs. AI suggestions are drafts for the caregiver to review — nothing becomes part of a board without the caregiver's action.

Children's privacy

Canvoz is intended to be used by children under the supervision of a parent, caregiver, or educator, and accounts are created and controlled by that adult. The adult account holder is responsible for the information they enter about a child and, where required, for obtaining any consent needed for a child to use the app. We practice data minimization for all information about children, do not show third-party ads, and do not track users across apps or websites. A parent, caregiver, or educator can review, edit, and delete a child's information at any time, and can delete the entire account (see "Your choices and rights"). If you believe a child's information has been provided to us without proper authorization, contact us at canvozsupport@gmail.com and we will delete it.

How information is shared

We share information only with service providers that help us run Canvoz, and only as needed:

Supabase — secure hosting, database, and authentication.
Anthropic — AI processing for generation, assistant, and photo analysis (no training, no retention, as described above).
RevenueCat, Apple, and Google — subscription billing and management.

We may also disclose information if required by law or to protect the rights and safety of our users. We do not share information with advertisers or data brokers.

Data retention and deletion

We keep your information for as long as your account is active. You can delete individual memory entries or all of them from the review screen, and you can delete your entire account from within the app, which removes your account data. To request deletion by email, contact canvozsupport@gmail.com.

Security

Data is encrypted in transit. Each account's data is isolated at the database level so users can only access their own information. Photos are local-first and access-controlled when synced. No method of storage or transmission is perfectly secure, but we work to protect your information.

Your choices and rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. Canvoz gives you direct in-app controls to review and delete child information and to delete your account. To make any other request, contact us at canvozsupport@gmail.com. We do not sell personal information, and we do not use it for cross-app tracking.

International users

Canvoz is operated from the United States and information is processed there. By using the app you understand that your information will be processed in the United States and other countries where our service providers operate.

Changes to this policy

We may update this policy from time to time. If we make material changes we will update the effective date above and, where appropriate, notify you in the app.

Contact us

Questions about this policy or your data: canvozsupport@gmail.com
Operator: Canvoz — an independent developer based in Ohio, USA.