1. The short version
- Your boards, profile names, reward photos and session history are stored on your device. We never receive them and cannot see them.
- There is no account to create and no advertising of any kind.
- The only personal data that reaches a third party is what Apple and RevenueCat need to process and validate a purchase, if you buy Token Board Pro.
- You can erase everything from Settings in the App at any time.
2. Who is responsible for your data
The data controller is Pixby Media AB, a company registered in Sweden. If you have a question about this policy or want to exercise your rights, email us at hello@pixby.se.
3. Information stored on your device
Token Board stores the following locally, in the App's own storage on your iPhone or iPad:
- learner or profile names you enter
- board names, rewards, token counts, themes and progress
- reward photos or images you choose for a board
- lightweight session history used to reopen and reuse boards
- app preferences, such as visual theme and purchase status
This information is not transmitted to us and not uploaded to a Pixby server. We have no ability to read it, recover it or share it. It is included in an encrypted device backup only if you have configured your device to back up that way, in which case it is governed by Apple's terms, not ours.
4. Camera and photo library
Token Board asks for camera access only when you choose to take a reward photo, and for photo library access only when you choose an image from your library. You can decline, and the App still works — you can use an emoji, a symbol or text instead.
Photos you select are saved into the App's local storage and used only to build the board you are setting up. They are not uploaded anywhere.
5. Purchases and subscriptions
If you buy Token Board Pro, the purchase is processed by Apple, and we use RevenueCat as our purchase and subscription infrastructure.
Information processed in connection with a purchase may include:
- transaction receipts and purchase history
- subscription and entitlement status
- product identifiers and the price and currency of the transaction
- an anonymous app user identifier generated by RevenueCat
- your App Store country or storefront, and basic device and platform information such as OS version and app version
We use this to unlock the features you paid for, to restore purchases across your devices, to handle support requests about billing, and to see aggregate subscription figures such as how many active subscribers there are.
Apple handles all payment information. We never receive or store your card details.
We do not supply a custom user identifier to RevenueCat and there is no account in the App, so this purchase data is not linked to your name or email by us. RevenueCat acts as a processor on our behalf under a data processing agreement. Apple acts as an independent controller for the payment itself, under Apple's own privacy policy.
Legal bases (GDPR). Performance of our contract with you, Article 6(1)(b), for delivering and restoring purchases; and our legitimate interests, Article 6(1)(f), in preventing fraud, supporting customers and understanding aggregate sales, balanced against your rights.
6. What we deliberately do not do
- We do not show ads and include no advertising SDKs.
- We do not request the IDFA and show no App Tracking Transparency prompt.
- We do not track you across other apps or websites, and we do not build a profile of you or of any child.
- We do not sell or share personal information, and we never have.
- We use no remote analytics, telemetry or crash-reporting service in the App.
- We do not require, or offer, an account.
7. If you contact us
If you email us for help, we keep that correspondence and your email address so we have context if you write again. Legal basis: our legitimate interest, Article 6(1)(f), in providing support and keeping a record of it. We keep support email for up to 24 months, unless we need it longer for a legal claim.
8. This website
gettokenboard.com sets no cookies and runs no analytics, tracking
pixels or third-party scripts. There is nothing to consent to.
Our hosting provider processes standard server request logs, which can include IP address, user agent and the page requested, to deliver the site and protect it from abuse. Legal basis: legitimate interest, Article 6(1)(f). These logs are kept for a short period and are not used to profile visitors.
9. Children
Token Board is a caregiver-operated tool. It is designed to be set up and managed by an adult, it is not directed to children, and it is not published in the App Store Kids Category. We do not knowingly collect personal information from a child.
An adult may enter a child's name or a photo of a child's reward. That content stays on the device and never reaches us, so we never process it. Adults should still avoid entering anything they would not want stored on that device, particularly on a shared or organisation-owned device.
If you believe a child has provided personal information to us directly — for example by emailing us — contact hello@pixby.se and we will delete it.
10. Cloud sync and sharing
This version of Token Board does not sync or share your board data. Everything stays on your device.
If we add an explicit sync or sharing feature in a future version, we will update this policy before that feature is released, and it will be something you choose to turn on.
11. How long we keep data
- Board data on your device: until you delete it, or delete the App. We have no copy and no retention period, because we never receive it.
- Purchase records: for as long as your entitlement is active, and afterwards as required for accounting and tax purposes — under Swedish law, generally seven years.
- Support email: up to 24 months, as described in section 7.
12. International transfers
RevenueCat is based in the United States, so purchase-related data described in section 5 is processed outside the EEA. Those transfers are covered by the European Commission's Standard Contractual Clauses, together with additional safeguards where required. Apple processes payment data under its own terms and transfer mechanisms.
You can request a copy of the relevant safeguards by emailing hello@pixby.se.
13. Your rights under the GDPR
If you are in the EEA or the UK, you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have data erased
- restrict or object to processing based on legitimate interests
- receive your data in a portable format
- withdraw consent where processing is based on consent
- lodge a complaint with a supervisory authority
To exercise any of these, email hello@pixby.se.
One practical note: because there is no account and your board data never leaves your device, we usually hold nothing that identifies you. If you ask us for a copy of your data, we may need the transaction identifier from your App Store receipt to find your purchase record, and if we genuinely cannot identify you we will tell you so rather than guess.
Our supervisory authority is the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), imy.se. You may also complain to the authority where you live.
14. Your rights in California
We do not sell personal information and we do not share it for cross-context behavioural advertising, as those terms are defined by the CCPA and CPRA. We have not done so in the preceding twelve months.
The only category of personal information we process is commercial information — purchase and subscription records — as described in section 5, together with limited internet activity information in server logs as described in section 8. We do not process sensitive personal information.
California residents have the right to know, delete, correct and opt out, and the right not to be discriminated against for exercising those rights. To make a request, email hello@pixby.se.
15. Deleting your data
- In the App: Settings → Erase Local Data removes local profiles, boards, session history and saved reward photos from the device. This cannot be undone, and it does not cancel an App Store subscription.
- Delete the App: removes its local data from that device. Deleting the App does not cancel a subscription — subscriptions are managed in your Apple Account settings.
- Purchase records: email hello@pixby.se and we will delete what we can, subject to the accounting retention period in section 11.
16. Security
Board data sits inside the App's own sandboxed storage, protected by iOS file protection and your device passcode. Data in transit to Apple and RevenueCat for purchases is encrypted with TLS. No system is perfectly secure, but keeping your content on your device — rather than on a server of ours — removes the largest category of risk by design.
17. Changes to this policy
We may update this policy to reflect new features or legal requirements. The
"Last updated" date above always shows the current version, and the current
version is published at https://gettokenboard.com/privacy. If a change
materially affects how we handle your information, we will give notice in the
App before it takes effect.
18. Contact
Pixby Media AB — hello@pixby.se
Support: gettokenboard.com/support