Privacy Policy

1. Introduction

SIM Picture Cards ("we," "our," or "us") operates the picture cards facilitation platform at canbeedone-cards.vercel.app (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using our Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the practices described in this Privacy Policy, please do not use our Service.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you provide directly to us, including:

• Email address (for account creation and authentication)
• Display name (for session participation)
• Contact information (when you contact us through our forms)
• Session data (questions, responses, and image selections during facilitation sessions)

2.2 Usage Information

We automatically collect information about how you use our Service, including:

• Session participation data and timestamps
• Image selection preferences
• Browser type and version
• Device information
• IP address
• Pages visited and time spent on the Service

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain our Service
• To enable real-time collaboration in facilitation sessions
• To authenticate users and manage accounts
• To process and respond to your inquiries
• To send administrative communications about your account or the Service
• To improve and optimize our Service
• To analyze usage patterns and trends
• To comply with legal obligations

4. Data Storage and Third-Party Services

4.1 Supabase

Our Service uses Supabase for data storage, authentication, and real-time features. Your data is stored on Supabase's secure servers. Supabase is SOC 2 Type 2 compliant and implements industry-standard security measures. For more information about Supabase's security practices, visit https://supabase.com/security.

4.2 Vercel

Our application is hosted on Vercel. Vercel may collect analytics and performance data to help us improve our Service. For more information about Vercel's privacy practices, visit https://vercel.com/legal/privacy-policy.

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

5.1 Session Participants

When you participate in a facilitation session, your display name and selected responses may be visible to other session participants and administrators. This is essential for the collaborative nature of our facilitation tool.

5.2 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our Service, such as Supabase for data storage and authentication.

5.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Secure hosting infrastructure

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

7. Data Retention

We retain your personal information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy. Specifically:

• Account information is retained until you delete your account
• Session data is retained for the duration of the session and may be archived for service improvement purposes
• Contact form submissions are retained for customer service purposes

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to your personal information
• Rectification: Request correction of inaccurate personal information
• Erasure: Request deletion of your personal information
• Portability: Request a copy of your personal information in a structured format
• Objection: Object to the processing of your personal information
• Restriction: Request restriction of processing your personal information

To exercise these rights, please contact us at info@canbeedone.co.za.

9. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us. If we become aware that we have collected personal information from children without verification of parental consent, we take steps to remove that information from our servers.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws than your country. By using our Service, you consent to the transfer of your information to these countries. We ensure that such transfers are conducted in accordance with applicable data protection laws.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

12. Contact Information

If you have any questions about this Privacy Policy, please contact us: