Privacy Policy
SteadyTouch is operated by KCB Strategic Solutions, LLC. Privacy questions and requests can be sent to [email protected].
Our approach
SteadyTouch is built to support learning and communication without advertising, cross-app tracking, or learner accounts. We collect as little information as we practically can, and we are especially careful because the app is used by children.
SteadyTouch contains no advertising, no third-party analytics, no tracking SDKs, and no in-app purchases. We do not sell personal information, and we do not use app data for targeted advertising or cross-app tracking.
Information that stays on the device
The following is stored on the iPad or iPhone and is not transmitted to us:
- Caregiver-selected AAC, learning, touch, color, and speech preferences.
- Custom AAC tile labels, selected built-in symbols, and any photo taken or chosen for a tile.
- The learner's local star total.
- Recent lesson subject names, used only to keep lessons varied.
- Lessons a caregiver has reported, so they can be reviewed in Settings.
AAC messages, free-form messages, and answers typed on the lesson keyboard are never transmitted. Custom AAC photos are resized and stored only on the device; they are not sent to Firebase, Google Gemini, Wikimedia, or any other provider.
SteadyTouch is compatible with Apple's system Eye Tracking and Dwell Control. Calibration, gaze estimation, and pointer control are handled entirely by iPadOS on the device. SteadyTouch receives only the resulting ordinary control activation, and does not collect, store, or upload face images or gaze data.
Information sent when a lesson is generated
Stories & Learning is optional. When it is used to build a fresh lesson, the app sends the following through Firebase AI Logic to Google Gemini:
- The selected learning path and difficulty level.
- Recent lesson subject names, so the new lesson is not a repeat.
- Only when a caregiver uses Interest Lab, the custom subject typed there.
Interest Lab is a free-text field intended for a caregiver. Please do not enter a child's full name, address, medical information, or other personal details. The app shows this warning in Settings, and we repeat it here because it matters.
After a lesson is generated, the app separately sends the lesson's scene subject — a short phrase such as "honey bee" — to Wikipedia's public summary API to look for an educational photograph. No learner information is included in that request.
Firebase App Check sends a device integrity token, using Apple's App Attest, to help reject requests that do not come from a genuine SteadyTouch installation. Firebase Remote Config supplies the approved AI model name.
Third-party providers
| Provider | What it receives | Why |
|---|---|---|
| Google (Firebase AI Logic, Gemini) | Lesson topic, difficulty, recent subjects, and any Interest Lab subject | To generate the lesson text |
| Google (Firebase App Check, Remote Config) | A device integrity token and app configuration requests | To block unauthorized clients and supply the model name |
| Wikimedia Foundation | A short subject phrase | To find an educational image for the lesson |
Like most internet services, these providers and the networks in between necessarily process IP addresses, device and network metadata, and request logs in order to deliver, secure, and troubleshoot their services. Each handles that data under its own terms and privacy policy: Firebase, Google, and Wikimedia.
How information is used
Information is used only to provide and vary educational lessons, deliver requested lesson images, protect the service from abuse and excessive automated requests, and diagnose reliability or security problems.
Children's privacy
SteadyTouch is intended to be used with caregiver or educator involvement. We do not request a child's name, contact details, precise location, or any other directly identifying information, and the app has no accounts, no messaging, no social features, and no open web browsing.
A caregiver may deliberately take a familiar photo for a local custom AAC tile. That photo stays on the device and is never collected by us.
If you believe a child entered personal information into Interest Lab, contact us at [email protected] and we will investigate and delete it where we are able to.
Retention and deletion
Data stored by the app remains on the device until the app is deleted or its data is cleared. Deleting SteadyTouch removes all of it, including custom tiles and photos.
We do not operate a server that stores learner data, and we hold no account for you to delete. For requests concerning data held by the providers above, or for any privacy request, write to [email protected] and we will respond within 30 days.
Security
All app network traffic uses HTTPS. The Gemini API credential is held behind the Firebase AI Logic proxy and is not distributed in the app binary. Firebase App Check uses Apple's App Attest on signed devices to help ensure lesson requests originate from an authentic SteadyTouch installation. No method of transmission or storage is perfectly secure, but we use safeguards appropriate to the data and the service.
Changes to this policy
We may update this policy as SteadyTouch changes. The published policy always shows its effective date, and we will communicate material changes as required.
Contact
KCB Strategic Solutions, LLC
[email protected]