Privacy Policy
SteadyTouch is operated by KCB Strategic Solutions, LLC. Privacy questions and requests can be sent to support@kcbsolutions.org.
Our approach
SteadyTouch is built to support learning and communication without selling advertising, tracking people across apps, or requiring learner accounts. We collect as little information as we practically can, and we are especially careful because the app is used by children.
SteadyTouch does not sell advertising or include third-party analytics or tracking SDKs. We do not sell personal information or use app data for targeted advertising or cross-app tracking. Optional YouTube videos are served by YouTube and may contain advertising or other third-party content under YouTube's policies. Core AAC is free; an optional one-time SteadyTouch Plus purchase unlocks additional app features through Apple's App Store.
Information that stays on the device
The following is stored on the iPad or iPhone and is not transmitted to us:
- Caregiver-selected AAC, learning, touch, color, and speech preferences.
- Custom AAC tile labels, selected built-in symbols, and any photo taken or chosen for a tile.
- Local profiles, rewards, progress and the learner's star total.
- Lessons a caregiver has reported, so they can be reviewed in Settings.
AAC messages, free-form communication text, and answers typed on the lesson keyboard are not sent to our servers or lesson providers. Custom AAC photos are resized and stored locally; they are not uploaded to Firebase, Gemini or YouTube. The paired Apple Watch can receive communication vocabulary from the iPhone through Apple's device-to-device services. Device backups are controlled by your Apple settings. Recent lesson subjects are stored locally and may be sent with a later lesson request to avoid repetition, as described below.
SteadyTouch is compatible with Apple's system Eye Tracking and Dwell Control. Calibration, gaze estimation, and pointer control are handled entirely by iPadOS on the device. SteadyTouch receives only the resulting ordinary control activation, and does not collect, store, or upload face images or gaze data.
Information sent when a lesson is generated
Stories & Learning is optional. When it is used to build a fresh lesson, the app sends the following through Firebase AI Logic to Google Gemini:
- The selected learning path and difficulty level.
- Recent lesson subject names, so the new lesson is not a repeat.
- Only when a caregiver uses Interest Lab, the custom subject typed there.
Interest Lab is a free-text field intended for a caregiver. Please do not enter a child's full name, address, medical information, or other personal details. The app shows this warning in Settings, and we repeat it here because it matters.
After a lesson is generated, the app separately sends its short scene subject and topic, such as "honey bee", to the YouTube Data API to find a relevant public educational video. This request does not include AAC messages, learner answers, custom photos or a learner profile.
Firebase App Check sends a device integrity token, using Apple's App Attest, to help reject requests that do not come from a genuine SteadyTouch installation. Firebase Remote Config supplies the approved AI model name.
YouTube API Services and embedded videos
SteadyTouch uses YouTube API Services. It searches public video metadata and
checks details such as embeddability, duration and language. Selected videos play from YouTube's
privacy-enhanced youtube-nocookie.com embedded player in a temporary web session.
Privacy-enhanced playback does not mean that no data reaches YouTube: loading or playing the player
sends network and device information, including IP address, to Google/YouTube. The player may use
cookies or similar technologies, process playback interactions and display YouTube-controlled content
or advertising. In the current public version, the selected video can start automatically, muted.
We do not download, rehost or sell YouTube audiovisual content. SteadyTouch does not ask for a Google or YouTube sign-in, access private YouTube account data, or upload, comment, rate or manage playlists on a user's behalf. YouTube remains the source of the videos.
Google handles YouTube data under the Google Privacy Policy. Use of YouTube features is also subject to the YouTube Terms of Service.
TestFlight versions and Apple cloud lessons
TestFlight candidates that enable Apple cloud lessons can use Apple Private Cloud Compute on eligible devices and OS versions. When enabled and available, lesson-generation inputs are sent to Apple. If Apple generation is unavailable, Gemini is used only when its setting permits it; otherwise the app may offer a saved lesson. Availability depends on the installed build, Apple eligibility and service limits. This describes the beta feature, not a claim that public version 1.0.2 uses Apple cloud generation.
The updated TestFlight candidate also caches screened public YouTube video metadata locally for reuse for up to seven days. This contains video IDs, titles and related public metadata, not downloaded video or audio. Quota reset information is stored locally to avoid repeated failed requests.
Third-party providers
| Provider | What it receives | Why |
|---|---|---|
| Google (Firebase AI Logic, Gemini) | Lesson topic, difficulty, recent subjects, and any Interest Lab subject | To generate the lesson text |
| Google (Firebase App Check, Remote Config) | A device integrity token and app configuration requests | To block unauthorized clients and supply the model name |
| Google / YouTube | Lesson scene subject and topic; network, device and playback information for the player | To find and play a relevant public educational video |
| Apple | App Store purchase/restore requests; lesson inputs when the eligible beta uses Apple cloud generation | To process optional Plus purchases and, where available and enabled, generate beta lessons |
Like most internet services, these providers and the networks in between necessarily process IP addresses, device and network metadata, and request logs in order to deliver, secure, and troubleshoot their services. Each handles that data under its own terms and privacy policy: Firebase, Google, and Apple.
How information is used
Information is used only to provide and vary educational lessons, find and play relevant educational videos, protect the service from abuse and excessive automated requests, and diagnose reliability or security problems.
Children's privacy
SteadyTouch is intended to be used with caregiver or educator involvement. We do not request a child's name, contact details, precise location, or any other directly identifying information, and the app has no accounts, no messaging, no social features, and no open web browsing.
A caregiver may deliberately take a familiar photo for a local custom AAC tile. That photo stays on the device and is never collected by us.
If you believe a child entered personal information into Interest Lab, contact us at support@kcbsolutions.org and we will investigate and delete it where we are able to.
Retention and deletion
Local content remains until you remove it in the app or delete the app and its local data. Deleting the app removes its local container, including custom tiles, photos and video metadata cache. Apple-managed backups and purchase records are separate and follow your Apple account settings. The app may retain its Plus entitlement in the device Keychain for purchase restoration.
Temporary player web storage is not used as a persistent SteadyTouch browsing profile. Google may retain requests and playback data under its own policy. SteadyTouch has no YouTube account authorization to revoke. You can review permissions granted to other applications in Google account permissions.
We do not operate a server that stores learner data, and we hold no account for you to delete. For requests concerning data held by the providers above, or for any privacy request, write to support@kcbsolutions.org and we will respond within 30 days.
Security
All app network traffic uses HTTPS. The Gemini API credential is held behind the Firebase AI Logic proxy and is not distributed in the app binary. Firebase App Check uses Apple's App Attest on signed devices to help ensure lesson requests originate from an authentic SteadyTouch installation. No method of transmission or storage is perfectly secure, but we use safeguards appropriate to the data and the service.
Changes to this policy
We may update this policy as SteadyTouch changes. The published policy always shows its effective date, and we will communicate material changes as required.
Contact
KCB Strategic Solutions, LLC
support@kcbsolutions.org