BuckTime! Privacy Policy

Effective Date: March 6, 2026 | Last Updated: August 31, 2026

DEFINITIONS AND INTERPRETATION

1.1 Definitions

In this Privacy Policy:

"Active Boost" means the optional activity-based feature that utilizes activity-recognition information, including step counts and movement-related metrics, to support rewards, incentives, bonuses, achievements, and related functionality.

"Active Guard" means the monitoring functionality that assists Parent Account holders in determining whether designated applications have been used during a Focus Window and, where the Daily Balance earning model is in use, in determining how much time designated applications were used across a calendar day, as described in sections 6.6 to 6.11.

"All-Day Measurement" means the functionality that records the amount of time designated applications were used across a calendar day, including outside a Focus Window. All-Day Measurement forms part of the Daily Balance earning model and operates wherever that model is in use. It is not separately switched on or off by a Parent Account holder.

"App" means the BuckTime! mobile application, website, software, content, features, support services, notifications, analytics tools, and related technologies.

"Child Profile" means a profile created and administered by a Parent Account holder on behalf of a child.

"Company", "BuckTime!", "we", "us", or "our" means 2422019 Ontario Inc. (o/a BuckTime!), together with its affiliates, successors, and assigns.

"Family Group" means a collection of Parent Accounts, Child Profiles, Linked Devices, settings, rewards, and related information associated with a household.

"Focus Window" means a period designated by a Parent Account holder during which Active Guard attempts to determine whether designated applications have been accessed.

"Linked Device" means any smartphone, tablet, wearable device, computer, gaming device, or other supported device associated with a Child Profile or Family Group.

"Parent Account" means the primary account established by a parent, guardian, or other authorized individual that administers one or more Child Profiles.

"Parent Account Holder" means the individual who creates, controls, and manages a Parent Account.

"Personal Information" means information about an identifiable individual and shall be interpreted in accordance with applicable privacy legislation.

"Privacy Policy" means this Privacy Policy, as amended from time to time.

"Service Provider" means a third party engaged by the Company to assist in the operation, support, hosting, maintenance, security, analytics, notification delivery, authentication, or administration of the App.

"Terms of Service" means the BuckTime! Terms of Service, as amended from time to time.

"Usage Data" means technical, operational, diagnostic, analytical, performance, and activity-related information generated through use of the App.

1.2 Interpretation

Unless the context otherwise requires:

• (a) singular words include the plural and vice versa;
• (b) references to legislation include amendments, replacements, and successor legislation;
• (c) headings are for convenience only and do not affect interpretation;
• (d) the words "including", "includes", and "such as" mean "including without limitation"; and
• (e) references to a child include any Child Profile administered through the App.

INTRODUCTION AND SCOPE

2.1 Our Commitment to Privacy

BuckTime! is committed to protecting the privacy, security, and confidentiality of information relating to parents, guardians, children, and other users of the App.

Because the App is designed for family use and involves information relating to children, we recognize that enhanced privacy protections and transparency are essential.

This Privacy Policy describes how we collect, use, disclose, store, process, retain, transfer, and protect information when users access or use the App.

2.2 Scope of this Privacy Policy

This Privacy Policy applies to:

• Parent Accounts;
• Child Profiles;
• Family Groups;
• visitors to our website;
• customer support interactions;
• users of notifications and communications services;
• subscription holders; and
• users of any feature or functionality made available through the App.

This Privacy Policy applies whether information is collected through:

• the mobile application;
• websites operated by the Company;
• customer-support communications;
• account-registration processes; or
• other interactions with the Company.

2.3 Relationship with the Terms of Service

This Privacy Policy should be read together with the Terms of Service.

In the event of any inconsistency between this Privacy Policy and the Terms of Service regarding privacy matters, this Privacy Policy shall govern to the extent of the inconsistency.

2.4 Geographic Scope

The App is intended primarily for users located in Canada, although users may access the App from other jurisdictions.

By using the App, users acknowledge that information may be processed in jurisdictions other than their place of residence as described in this Privacy Policy.

CHILDREN’S PRIVACY AND PARENTAL CONSENT

3.1 Family-Oriented Service

The App is designed as a family-management platform intended to assist parents and guardians in encouraging healthy technology habits, administering rewards programs, and monitoring designated applications during Focus Windows and, where the Daily Balance earning model is in use, across the calendar day.

The App is not intended for independent registration by children.

3.2 Parent-Controlled Registration

Children may not independently create accounts.

All Child Profiles must be created by a Parent Account holder.

The Company does not knowingly permit children to independently establish accounts or directly register for the App.

3.3 Parental Authorization

By creating a Child Profile, the Parent Account holder represents and warrants that:

• (a) they are the child’s parent, legal guardian, or other legally authorized decision-maker;
• (b) they possess authority to provide privacy consents on behalf of the child;
• (c) they possess authority to authorize use of Active Guard and related functionality;
• (d) they have reviewed this Privacy Policy; and
• (e) they consent to the collection, use, disclosure, storage, processing, retention, and transfer of information relating to the child as described herein.

3.4 Child Information Submitted by Parents

Information associated with a Child Profile is provided by the Parent Account holder or generated through use of the App.

The Company does not knowingly solicit personal information directly from children without parental involvement.

3.5 Withdrawal of Consent

A Parent Account holder may withdraw consent for a Child Profile at any time.

Withdrawal of consent may result in:

• suspension of the Child Profile;
• deletion of Child Profile information;
• loss of access to certain functionality; and
• closure of the Child Profile.

Certain information may be retained where required by law or reasonably necessary for security, fraud prevention, legal compliance, dispute resolution, backup integrity, or enforcement purposes.

3.6 Unauthorized Child Registration

If we learn that a child has attempted to independently register for the App or has provided information without appropriate parental authorization, we may:

• suspend access;
• restrict functionality;
• seek parental verification;
• delete information; or
• terminate the applicable account.

INFORMATION WE COLLECT FROM PARENTS

4.1 Account Registration Information

When a Parent Account is created, we may collect:

• name;
• email address;
• authentication information;
• Google account identifier;
• email-verification status;
• account-creation date;
• account-modification date;
• family identifier; and
• timezone information.

4.2 Google Sign-In Information

Where a Parent Account holder elects to use Google Sign-In, we may receive information from Google including:

• name;
• email address;
• Google account identifier; and
• profile photo URL.

The profile photograph itself is not uploaded to, hosted by, or stored by BuckTime!. We retain only the profile image reference supplied through Google’s authentication service.

4.3 Account Credentials

For accounts created using email and password authentication:

• passwords are stored in encrypted and protected form;
• raw passwords are never stored by the Company; and
• authentication credentials are processed solely for account-security purposes.

4.4 Support Communications

If a Parent Account holder contacts us for support, we may collect:

• contact information;
• account information;
• correspondence;
• support requests;
• troubleshooting information; and
• information voluntarily provided by the user.

4.5 Subscription and Billing Information

If paid subscriptions or premium services are introduced, we may collect subscription-related information including:

• subscription status;
• billing status;
• transaction identifiers; and
• related account information.

Payment-card information is generally processed by third-party payment providers and not stored directly by the Company.

INFORMATION WE COLLECT ABOUT CHILDREN

5.1 Child Profile Information

When a Parent Account holder creates a Child Profile, we may collect:

• child name;
• nickname or preferred name;
• avatar selection;
• profile settings;
• reward settings;
• earning settings;
• allowance information;
• Ledger information;
• Family Group information; and
• related account-management information.

5.2 Authentication Information

Child Profiles may utilize PIN-based authentication.

PIN credentials are stored using security measures designed to protect against unauthorized access, including cryptographic hashing and related security controls.

5.3 Optional Child Email Addresses

A Parent Account holder may optionally provide a child’s email address.

Such information is collected only where voluntarily entered by the Parent Account holder and may be used in connection with future reward or payment functionality.

5.4 Activity and Reward Information

We may collect information relating to:

• earnings;
• balances;
• rewards;
• allowances;
• achievements;
• streaks;
• bonus calculations;
• activity metrics; and
• participation in App features.

5.5 Device Information Associated with Child Profiles

We may collect device-related information associated with a Child Profile, including:

• device manufacturer;
• device model;
• operating-system information;
• device capabilities;
• timezone information;
• language settings;
• notification identifiers;
• permission status information; and
• related technical information.

5.6 Information We Do Not Intentionally Collect from Children

Unless expressly disclosed elsewhere in this Privacy Policy, we do not intentionally collect:

• precise GPS location information;
• contact lists;
• browsing history;
• text-message content;
• email content;
• photographs stored on the device;
• video files stored on the device;
• microphone recordings;
• financial account information; or
• government-issued identification numbers.

ACTIVE GUARD MONITORING INFORMATION

6.1 Purpose of Active Guard

Active Guard is designed to assist Parent Account holders in encouraging healthy technology habits by determining whether designated applications have been used during a Focus Window and, where the Daily Balance earning model is in use, how much time designated applications were used across a calendar day.

Active Guard is intended solely as a family-management and parental-assistance tool.

6.2 Information Collected Through Active Guard

When Active Guard is enabled, the App may collect, generate, process, or store information including:

• monitored application identifiers;
• application package names;
• application category information;
• application usage events;
• foreground application activity;
• Focus Window participation information;
• monitoring status information;
• monitoring configuration settings;
• permission status information;
• device compatibility information; and
• related technical and diagnostic information.

6.3 Information Not Collected Through Active Guard

Active Guard is designed to identify application activity and is not designed to access or collect:

• text-message contents;
• email contents;
• instant-message contents;
• chat contents;
• photographs;
• videos;
• documents;
• files stored on a device;
• contact lists;
• passwords;
• keystrokes;
• screen recordings;
• screenshots;
• microphone recordings; or
• browsing-history contents.

The Company does not intentionally review, access, or store content viewed by users within third-party applications.

6.4 Monitoring Limitations

Active Guard relies upon operating-system permissions, accessibility services, usage-access permissions, device settings, and platform functionality.

Accordingly, monitoring information may be affected by:

• operating-system restrictions;
• device settings;
• user actions;
• permission changes;
• software updates;
• hardware limitations;
• connectivity interruptions;
• manufacturer restrictions; and
• third-party platform changes.

The Company does not guarantee that monitoring information will be complete, uninterrupted, or entirely accurate.

6.5 Monitoring Information Retention

Monitoring information may be retained for purposes including:

• displaying historical information;
• generating reports;
• producing analytics;
• calculating rewards;
• troubleshooting;
• fraud prevention;
• security monitoring; and
• improving App functionality.

Retention periods may vary depending upon the nature of the information and operational requirements.

6.6 All-Day Measurement

Where the Daily Balance earning model is in use, the App records the amount of time designated applications were used across a calendar day, including outside a Focus Window. This measurement is integral to that model: the day’s reward is reduced by use of designated applications whenever it occurs, and measurement confined to Focus Windows would not record it.

This functionality exists so that a Child Profile may earn rewards for reduced overall use of designated applications, rather than only for use during a scheduled period.

6.7 Information Recorded Through All-Day Measurement

All-Day Measurement records totals. It does not record a history of activity. The information recorded consists of:

• the total number of seconds designated applications were used during the calendar day;
• on Android devices, that total apportioned across the twenty-four hours of the day;
• on Apple devices, the cumulative usage totals reported by Apple’s Screen Time functionality when they pass thresholds set by the App, and the times at which those thresholds were passed;
• the device’s timezone offset and the time at which the total was calculated, so that a day is measured against the Child Profile’s local calendar day; and
• technical information identifying which component of the App delivered the report.

6.8 Information Not Recorded Through All-Day Measurement

The information recorded through All-Day Measurement does not identify which designated application was used, in what order applications were used, or what was done within any application. Application names and application identifiers do not form part of this record.

6.9 Applications Included in All-Day Measurement

Only applications designated by the Parent Account holder are counted. Time spent in any other application is not counted. The BuckTime! application itself is excluded, so that use of the App is never counted against a Child Profile.

Where the App is unable to determine which applications have been designated, no information is recorded for that period. The App does not record a day of zero use in these circumstances.

6.10 How All-Day Measurement Is Performed

On Android devices, All-Day Measurement uses the operating system’s usage-access statistics, which the Parent Account holder authorizes during setup.

On Apple devices, All-Day Measurement uses Apple’s Screen Time functionality, which reports to the App only that cumulative use of designated applications has passed a threshold. Apple does not disclose the underlying detail to the Company.

Neither method accesses or records the contents of any application.

6.11 Where All-Day Measurement Does Not Apply

Where the Daily Balance earning model is not in use, no information described in sections 6.6 to 6.10 is recorded outside a Focus Window.

ACTIVE BOOST ACTIVITY INFORMATION

7.1 Purpose of Active Boost

Active Boost is an optional feature intended to encourage physical activity through activity-based rewards, achievements, incentives, and bonus calculations.

7.2 Activity Information Collected

Where Active Boost is enabled, the App may collect or receive activity-related information including:

• step counts;
• movement metrics;
• activity measurements;
• exercise-related information;
• activity goals;
• achievement information;
• reward calculations; and
• related performance information.

7.3 Sources of Activity Information

Activity information may be obtained through:

• operating-system services;
• activity-recognition services;
• supported device sensors; and
• other authorized system functionality.

7.4 Health and Medical Disclaimer

Active Boost is intended solely for motivational and reward purposes.

The App is not:

• a medical device;
• a healthcare service;
• a fitness-monitoring service;
• a diagnostic tool; or
• a substitute for professional medical advice.

Users should not rely upon Active Boost information for medical, health, or fitness decisions.

7.5 Accuracy of Activity Information

Activity information is generated through third-party operating systems and device sensors.

Accordingly, activity information may be incomplete, delayed, inaccurate, unavailable, or affected by technical limitations.

The Company does not guarantee the accuracy of activity-related information.

DEVICE INFORMATION AND PERMISSIONS

8.1 Device Information

The App may collect technical information relating to devices connected to the App, including:

• device manufacturer;
• device model;
• operating-system version;
• operating-system build information;
• timezone information;
• language settings;
• notification identifiers;
• permission status information;
• technical diagnostics; and
• security-related information.

8.2 Android Permissions

Depending upon functionality enabled by the user, the App may request certain device permissions.

These permissions may include:

• Usage Access permissions;
• Accessibility Service permissions;
• Notification permissions;
• Camera permissions;
• Activity Recognition permissions;
• Overlay permissions;
• Background-service permissions;
• Wake-lock permissions; and
• related operating-system permissions required for functionality.

8.3 Purpose of Permissions

Permissions are requested solely for purposes including:

• operation of Active Guard;
• operation of Active Boost;
• Focus Window functionality;
• notification delivery;
• QR-code pairing;
• monitoring functionality;
• activity-based rewards;
• device compatibility; and
• related App functionality.

8.4 Permissions Not Requested

As of the effective date of this Privacy Policy, the App does not intentionally request permissions for:

• precise GPS location tracking;
• contact-list access;
• text-message access;
• call-history access; or
• microphone recording for monitoring purposes.

Future versions of the App may introduce additional permissions, which will be disclosed through updated privacy notices and consent mechanisms where required by law.

8.5 Device Diagnostics

The Company may collect diagnostic information to:

• identify software defects;
• investigate crashes;
• improve performance;
• maintain compatibility;
• improve security; and
• support users.

INFORMATION WE DO NOT COLLECT

9.1 General Principle

The Company seeks to collect only the information reasonably necessary to operate, maintain, improve, and support the App.

9.2 Information Not Intentionally Collected

Unless expressly disclosed elsewhere in this Privacy Policy, the Company does not intentionally collect:

• precise GPS location information;
• contact lists;
• text-message contents;
• email contents;
• chat contents;
• photographs stored on a device;
• videos stored on a device;
• financial account credentials;
• banking passwords;
• government-issued identification numbers;
• passport information;
• driver’s licence information;
• biometric identifiers;
• voice recordings;
• microphone recordings;
• browsing-history contents;
• health records;
• medical records; or
• information unrelated to operation of the App.

9.3 Child Information Minimization

The Company is committed to data-minimization principles and seeks to limit the collection of information relating to children to information reasonably necessary to provide the App.

9.4 No Sale of Personal Information

The Company does not sell personal information.

The Company does not knowingly sell information associated with Child Profiles.

9.5 No Behavioural Advertising Directed at Children

The Company does not knowingly use Child Profile information for:

• behavioural advertising;
• interest-based advertising;
• cross-context advertising; or
• targeted advertising directed at children.

HOW WE USE INFORMATION

10.1 Service Delivery

The Company uses information to:

• create and administer accounts;
• create Child Profiles;
• operate Family Groups;
• authenticate users;
• provide App functionality;
• operate Active Guard;
• operate Active Boost;
• provide rewards functionality; and
• deliver notifications.

10.2 Analytics and Reporting

Information may be used to:

• generate analytics;
• produce dashboards;
• calculate rewards;
• calculate earnings;
• measure engagement;
• generate reports;
• improve App functionality; and
• develop future features.

10.3 Security and Fraud Prevention

Information may be used to:

• verify accounts;
• detect unauthorized access;
• investigate misuse;
• prevent fraud;
• maintain security;
• identify software vulnerabilities; and
• enforce the Terms of Service.

10.4 Customer Support

Information may be used to:

• respond to inquiries;
• provide support;
• troubleshoot issues;
• investigate complaints;
• resolve disputes; and
• communicate with users.

10.5 Legal and Regulatory Compliance

Information may be used to:

• comply with legal obligations;
• respond to lawful requests;
• cooperate with regulators;
• enforce legal rights;
• investigate violations of law; and
• protect users, children, and the public.

10.6 Product Improvement

Information may be used to:

• improve functionality;
• enhance user experience;
• evaluate performance;
• improve reliability;
• improve security;
• develop new features; and
• conduct internal research and development.

10.7 Aggregated and De-Identified Information

The Company may create aggregated, anonymized, statistical, or de-identified information derived from App usage.

Such information may be used for:

• analytics;
• benchmarking;
• research;
• product development;
• operational planning;
• business analysis; and
• other lawful business purposes.

Provided such information does not reasonably identify an individual, it may continue to be used following account deletion.

10.8 Future Features

The Company may use information to provide future functionality including:

• subscriptions;
• premium services;
• enhanced analytics;
• additional rewards systems;
• payment integrations;
• artificial-intelligence features; and
• other services introduced in future versions of the App.

Where required by law, additional notice or consent will be obtained before implementing materially different uses of information.

DISCLOSURE OF INFORMATION

11.1 General Principle

The Company does not sell personal information.

The Company does not knowingly sell information associated with Child Profiles.

The Company does not disclose personal information except as described in this Privacy Policy, as authorized by users, or as otherwise permitted or required by law.

11.2 Disclosure to Service Providers

The Company may disclose information to Service Providers that assist with:

• cloud hosting;
• database hosting;
• authentication services;
• push notifications;
• analytics;
• customer support;
• software maintenance;
• cybersecurity services;
• infrastructure management;
• subscription management;
• payment processing; and
• other operational functions.

Service Providers receive only the information reasonably necessary to perform their services.

11.3 Disclosure Within Family Groups

Information associated with a Child Profile may be made available to Parent Account holders associated with the applicable Family Group.

Such information may include:

• rewards;
• balances;
• activity metrics;
• monitoring information;
• achievements;
• streaks;
• allowance information; and
• related Family Group information.

11.4 Legal Compliance

The Company may disclose information where reasonably necessary to:

• comply with applicable law;
• comply with court orders;
• respond to subpoenas;
• respond to warrants;
• respond to regulatory requests;
• respond to law-enforcement requests;
• enforce legal rights;
• investigate unlawful conduct; or
• protect users, children, or the public.

11.5 Business Transactions

Information may be disclosed in connection with:

• mergers;
• acquisitions;
• financings;
• reorganizations;
• asset sales;
• investments;
• restructurings; or
• similar corporate transactions.

Where appropriate, the Company may require recipients to maintain confidentiality protections consistent with this Privacy Policy.

11.6 Protection of Rights

The Company may disclose information where reasonably necessary to:

• protect Company rights;
• protect intellectual property;
• investigate fraud;
• investigate misuse;
• maintain security;
• prevent harm; or
• enforce contractual rights.

11.7 Aggregated and De-Identified Information

The Company may disclose aggregated, anonymized, statistical, or de-identified information that does not reasonably identify an individual.

Such information may be used for:

• research;
• benchmarking;
• analytics;
• reporting;
• product development;
• security analysis; and
• business planning.

11.8 No Sale of Child Information

The Company does not knowingly:

• sell Child Profile information;
• disclose Child Profile information for behavioural advertising;
• disclose Child Profile information for interest-based advertising; or
• monetize Child Profile information through third-party advertising networks.

SERVICE PROVIDERS AND INFRASTRUCTURE PROVIDERS

12.1 Use of Service Providers

The Company utilizes third-party Service Providers to assist in operation of the App.

These Service Providers may process information on behalf of the Company.

12.2 Categories of Service Providers

Service Providers may include:

• authentication providers;
• cloud-hosting providers;
• database providers;
• notification providers;
• analytics providers;
• infrastructure providers;
• cybersecurity providers;
• support providers;
• payment providers; and
• other operational vendors.

12.3 Access to Information

Service Providers may receive access to information only where reasonably necessary to provide services to the Company.

The Company seeks to limit access to information based upon operational need.

12.4 Contractual Safeguards

Where appropriate, the Company may require Service Providers to:

• protect information;
• maintain confidentiality;
• implement security safeguards;
• restrict unauthorized use;
• comply with applicable privacy requirements; and
• process information solely for authorized purposes.

12.5 Third-Party Policies

Service Providers operate under their own privacy practices and contractual obligations.

While the Company seeks to work with reputable providers, the Company does not control all aspects of a Service Provider’s operations.

12.6 Changes to Providers

The Company may add, remove, replace, or modify Service Providers at any time.

Updated information regarding material Service Providers may be reflected in future updates to this Privacy Policy.

GOOGLE SIGN-IN AND AUTHENTICATION SERVICES

13.1 Authentication Providers

The App may permit authentication through Google Sign-In and other authentication services introduced in future versions of the App.

13.2 Information Received Through Google Sign-In

When a user elects to authenticate through Google Sign-In, the Company may receive:

• name;
• email address;
• Google account identifier; and
• profile image reference information.

The specific information received depends upon permissions granted by the user and Google’s authentication services.

13.3 Purpose of Authentication Information

Authentication information may be used to:

• create accounts;
• authenticate users;
• maintain account security;
• facilitate account recovery;
• reduce fraud;
• provide support; and
• operate the App.

13.4 Google’s Independent Practices

Google processes information in accordance with its own privacy policies, terms, and practices.

Users should review Google’s privacy documentation for additional information regarding Google’s handling of information.

13.5 Future Authentication Providers

The Company may introduce additional authentication providers in the future.

Additional providers may be subject to separate privacy practices and user disclosures.

PUSH NOTIFICATIONS, MESSAGING, AND COMMUNICATIONS

14.1 Push Notifications

The App may utilize push-notification services to deliver information to users.

Push notifications may be delivered through:

• Firebase Cloud Messaging;
• Expo Push Services;
• Apple Push Notification Services; or
• other notification services.

14.2 Notification Information

To facilitate delivery of notifications, the Company may process:

• push-notification identifiers;
• device tokens;
• notification preferences;
• Family Group information;
• account identifiers; and
• related technical information.

14.3 Types of Notifications

Notifications may include:

• Focus Window notifications;
• reward notifications;
• earnings notifications;
• allowance notifications;
• activity notifications;
• account-security notifications;
• support communications;
• service announcements;
• administrative communications; and
• legal notices.

14.4 User Controls

Users may disable or modify certain notification preferences through:

• App settings;
• device settings; or
• operating-system controls.

Certain administrative, legal, security, and service-related communications may continue notwithstanding notification preferences where permitted by law.

14.5 No Emergency Service

Notifications are not emergency communications.

The Company does not guarantee:

• delivery;
• timing;
• accuracy; or
• receipt

of notifications.

Users should not rely upon notifications for emergency, medical, safety, or time-sensitive purposes.

HOSTING, DATABASES, INTERNATIONAL TRANSFERS, AND DATA RESIDENCY

15.1 Hosting Infrastructure

The App utilizes third-party hosting, cloud, infrastructure, and database providers to operate the App.

Information may be stored, processed, transmitted, backed up, or accessed through such providers.

15.2 Database Services

The Company currently utilizes MongoDB Atlas and related database infrastructure to support operation of the App.

Database providers may process information on behalf of the Company in accordance with applicable contractual arrangements.

15.3 Application Infrastructure

The Company currently utilizes Fly.io and related infrastructure providers to host and operate portions of the App.

Infrastructure providers may process technical and operational information necessary to provide hosting services.

15.4 Data Residency

The Company’s primary database environment is currently located in Canada.

However, not all Service Providers necessarily store or process information exclusively within Canada.

15.5 International Transfers

Information may be transferred to, stored in, processed in, or accessed from jurisdictions outside:

• Canada;
• a user’s province or territory; or
• a user’s country of residence.

Such jurisdictions may have privacy laws that differ from those applicable where the user resides.

15.6 User Consent to Transfers

By using the App, users acknowledge and consent to the transfer, storage, processing, and access of information in jurisdictions outside their place of residence as described in this Privacy Policy.

15.7 Legal Access in Foreign Jurisdictions

Information processed in foreign jurisdictions may be subject to:

• court orders;
• subpoenas;
• warrants;
• governmental requests;
• regulatory requests; and
• legal processes

issued under the laws of those jurisdictions.

15.8 Transfer Safeguards

Where reasonably appropriate, the Company seeks to implement contractual, organizational, and technical safeguards designed to protect information during cross-border processing.

15.9 Current Service Providers

Current Service Providers and Infrastructure Providers utilized in connection with operation of the App are identified in Schedule "A" to this Privacy Policy, as amended from time to time.

Schedule "A" is incorporated into and forms part of this Privacy Policy.

The Company may update Schedule "A" from time to time to reflect changes in Service Providers, hosting arrangements, infrastructure providers, notification providers, authentication providers, payment providers, analytics providers, security providers, and other operational vendors.

Updates to Schedule "A" do not necessarily constitute a material amendment to this Privacy Policy provided that the Company’s information-handling practices remain substantially consistent with the disclosures contained herein.

15.10 Future Infrastructure Changes

The Company may modify its hosting, cloud, database, storage, backup, infrastructure, and processing providers from time to time.

Such changes may result in information being processed in different jurisdictions.

Material changes may be reflected through updates to this Privacy Policy.

DATA RETENTION

16.1 General Retention Principles

The Company retains information only for as long as reasonably necessary to:

• provide the App;
• administer Parent Accounts and Child Profiles;
• operate Active Guard and Active Boost;
• maintain Family Groups;
• provide customer support;
• comply with legal obligations;
• maintain security;
• prevent fraud;
• resolve disputes;
• enforce agreements; and
• support legitimate business operations.

Retention periods vary depending on the nature of the information involved and the purposes for which it was collected.

16.2 Account Information

Information associated with Parent Accounts and Child Profiles may be retained for the duration of account activity and for a reasonable period thereafter.

Retention following account closure may occur for purposes including:

• legal compliance;
• security;
• fraud prevention;
• dispute resolution;
• backup integrity;
• recordkeeping; and
• enforcement of contractual rights.

16.3 Monitoring Information

Information generated through Active Guard may be retained for purposes including:

• historical reporting;
• analytics;
• troubleshooting;
• reward calculations;
• security monitoring; and
• system improvement.

The Company may periodically delete, archive, anonymize, or aggregate historical monitoring information.

16.4 Website Access Requests

Where a child asks a Parent Account holder to approve a website, the record consists of the website domain, the date of the request, the Parent Account holder’s decision, and any short explanation the child chose to write.

Once the Parent Account holder has approved or declined the request, the record is retained for 90 days and is then deleted automatically, including any explanation written by the child.

The approval itself is stored separately as a setting and is not affected by this deletion.

A request that has not yet been decided is not subject to this period and is retained until the Parent Account holder resolves it.

16.5 Activity Information

Activity-related information generated through Active Boost may be retained for purposes including:

• achievement tracking;
• reward calculations;
• analytics;
• historical reporting; and
• App functionality.

16.6 Backup Copies

Information may continue to exist within backup systems for a limited period following deletion requests.

Backup information is maintained solely for operational continuity, disaster recovery, security, and system-restoration purposes.

16.7 Anonymized and De-Identified Information

The Company may retain aggregated, anonymized, statistical, and de-identified information indefinitely provided that such information does not reasonably identify an individual.

16.8 Legal Retention Requirements

Certain information may be retained longer where required or permitted by:

• applicable law;
• court order;
• regulatory requirement;
• legal proceedings;
• investigations; or
• legitimate legal interests.

SECURITY SAFEGUARDS

17.1 Commitment to Security

The Company employs administrative, organizational, contractual, physical, and technical safeguards designed to protect information against:

• unauthorized access;
• unauthorized disclosure;
• unauthorized use;
• unauthorized modification;
• unauthorized destruction; and
• accidental loss.

17.2 Security Measures

Security measures may include:

• encryption of data in transit;
• encryption of data at rest where appropriate;
• cryptographic hashing of authentication credentials;
• access controls;
• role-based access restrictions;
• authentication safeguards;
• monitoring and logging systems;
• network-security controls;
• backup systems; and
• incident-response procedures.

17.3 Employee and Contractor Access

Access to information is restricted to personnel, contractors, consultants, and Service Providers who require access for authorized operational purposes.

Access rights are limited based on business necessity.

17.4 User Responsibilities

Users are responsible for:

• protecting account credentials;
• maintaining device security;
• safeguarding passwords and PINs;
• maintaining current software updates;
• reviewing account activity; and
• promptly reporting suspected unauthorized access.

17.5 No Absolute Security Guarantee

While the Company employs safeguards designed to protect information, no system can be guaranteed to be completely secure.

Accordingly, the Company cannot guarantee that:

• unauthorized access will never occur;
• cybersecurity incidents will never occur;
• information will never be intercepted;
• information will never be altered; or
• information will never be disclosed improperly.

17.6 Security Incident Response

Where the Company becomes aware of a security incident affecting personal information, the Company may take actions including:

• investigating the incident;
• containing the incident;
• mitigating harm;
• notifying affected users where required by law; and
• cooperating with applicable authorities.

PARENT RIGHTS

18.1 Parent Control

Parent Account holders maintain primary control over Child Profiles created within the App.

Subject to applicable law and identity-verification procedures, Parent Account holders may exercise rights concerning information associated with their Child Profiles.

18.2 Access Rights

Parents may request access to information associated with:

• Child Profiles;
• rewards;
• allowances;
• activity information;
• monitoring information;
• analytics; and
• account information.

18.3 Correction Rights

Parents may request correction of information that is inaccurate, incomplete, outdated, or misleading.

The Company may require reasonable verification before making corrections.

18.4 Deletion Rights

Parents may request deletion of Child Profile information.

Deletion requests may result in:

• loss of functionality;
• removal of historical information;
• termination of Child Profiles; and
• closure of related services.

Certain information may be retained where required by law or reasonably necessary for legitimate operational purposes.

18.5 Consent Management

Parents may:

• provide consent;
• withdraw consent;
• modify permissions;
• remove Child Profiles; and
• discontinue participation in optional features.

Withdrawal of consent may affect the availability of App functionality.

18.6 Verification Requirements

Before responding to requests relating to a Child Profile, the Company may require reasonable verification of:

• identity;
• account ownership;
• parental authority; and
• legal authority to act on behalf of the child.

18.7 Limitations

Parent rights are subject to:

• applicable law;
• legal obligations;
• security requirements;
• fraud-prevention requirements;
• protection of third-party rights; and
• operational limitations.

CHILD PRIVACY RIGHTS

19.1 Protection of Children’s Information

The Company recognizes that information relating to children warrants enhanced protection.

The Company seeks to limit collection of child information to that reasonably necessary for operation of the App.

19.2 Parent Exercise of Rights

Because Child Profiles are administered through Parent Accounts, privacy rights relating to Child Profiles are generally exercised by the Parent Account holder.

19.3 Review of Child Information

Subject to verification procedures, Parent Account holders may request review of information associated with a Child Profile.

19.4 Correction of Child Information

Parents may request correction of information associated with a Child Profile where such information is inaccurate or incomplete.

19.5 Deletion of Child Information

Parents may request deletion of information associated with a Child Profile.

Following a verified deletion request, the Company may:

• delete information;
• anonymize information;
• de-identify information; or
• restrict processing of information,

subject to applicable legal and operational requirements.

19.6 Limitation on Direct Child Requests

The Company may require requests concerning Child Profiles to be submitted through the Parent Account holder or another individual possessing legal authority to act on behalf of the child.

19.7 Commitment to Child Privacy

The Company does not knowingly:

• sell Child Profile information;
• use Child Profile information for behavioural advertising;
• create advertising profiles relating to children; or
• knowingly permit independent child registration.

ACCESS, CORRECTION, PORTABILITY, DELETION, AND PRIVACY REQUESTS

20.1 Privacy Requests

Users may submit requests relating to:

• access;
• correction;
• deletion;
• portability;
• consent withdrawal;
• privacy complaints; and
• information-management practices.

Requests may be submitted using the contact information provided in this Privacy Policy.

20.2 Access Requests

Subject to applicable law, users may request access to personal information under the Company’s control.

The Company may require identity verification before responding.

20.3 Correction Requests

Users may request correction of information that is inaccurate, incomplete, or outdated.

Where appropriate, the Company may update records following verification.

20.4 Portability Requests

Where applicable law provides portability rights, users may request a copy of certain information in a structured and commonly used format.

The Company may impose reasonable verification requirements before fulfilling such requests.

20.5 Deletion Requests

Users may request deletion of personal information.

Deletion may result in:

• account closure;
• loss of historical information;
• loss of rewards information;
• loss of analytics information; and
• termination of services.

Certain information may continue to be retained where required by law or reasonably necessary for legitimate business purposes.

20.6 Response Timeframes

The Company will use commercially reasonable efforts to respond to verified privacy requests within a reasonable period, subject to:

• request complexity;
• verification requirements;
• legal obligations; and
• operational considerations.

20.7 Refusal of Requests

The Company may refuse, limit, or defer a request where permitted by law, including where:

• identity cannot be verified;
• legal obligations prevent compliance;
• third-party rights may be affected;
• security concerns exist; or
• the request is manifestly excessive or abusive.

20.8 Privacy Complaints

Individuals who believe their privacy rights have been violated may submit a complaint to the Company’s Privacy Officer.

The Company will investigate complaints in accordance with its internal privacy procedures and applicable law.

LEGAL REQUESTS, REGULATORY COMPLIANCE, AND PROTECTION OF RIGHTS

21.1 Compliance with Law

The Company may collect, use, retain, disclose, preserve, or otherwise process information where reasonably necessary to:

• comply with applicable law;
• comply with legal obligations;
• satisfy regulatory requirements;
• respond to lawful requests;
• enforce legal rights; or
• protect users, children, and the public.

21.2 Legal Requests

The Company may disclose information in response to:

• court orders;
• subpoenas;
• warrants;
• production orders;
• regulatory demands;
• governmental requests;
• law-enforcement requests; or
• other legal processes.

The Company may, where legally permitted, notify affected users before responding to a request.

21.3 Preservation of Information

The Company may preserve information where reasonably necessary to:

• comply with legal obligations;
• investigate suspected misconduct;
• preserve evidence;
• respond to legal proceedings;
• enforce agreements; or
• protect legal rights.

21.4 Regulatory Cooperation

The Company may cooperate with:

• privacy regulators;
• consumer-protection authorities;
• child-protection authorities;
• law-enforcement agencies;
• courts; and
• governmental entities

where such cooperation is required or permitted by law.

21.5 Protection of Rights and Safety

The Company may disclose information where reasonably necessary to:

• protect the safety of a child;
• protect users;
• protect Company personnel;
• prevent fraud;
• investigate abuse of the App;
• protect intellectual property;
• enforce contractual rights; or
• prevent unlawful conduct.

21.6 Emergency Circumstances

Where the Company reasonably believes that disclosure is necessary to prevent imminent harm to an individual or the public, the Company may disclose information to appropriate authorities to the extent permitted by law.

BUSINESS TRANSACTIONS AND CORPORATE CHANGES

22.1 Corporate Transactions

Information may be transferred, disclosed, reviewed, or otherwise processed in connection with:

• mergers;
• acquisitions;
• financings;
• investments;
• restructurings;
• reorganizations;
• asset sales;
• insolvency proceedings; or
• similar corporate transactions.

22.2 Due Diligence Activities

During a contemplated transaction, prospective investors, lenders, purchasers, advisors, auditors, accountants, consultants, and legal counsel may review certain information as part of due-diligence activities.

Where reasonably appropriate, such parties may be subject to confidentiality obligations.

22.3 Continuity of Services

Information may be transferred as part of a transaction to ensure continuity of services and operation of the App.

22.4 Notice of Material Changes

Where required by applicable law, users may be provided notice of a transaction affecting the handling of personal information.

22.5 Successor Organizations

Any successor organization receiving information may continue to process such information in accordance with:

• this Privacy Policy;
• successor privacy policies;
• applicable law; and
• contractual obligations applicable to the transaction.

COOKIES, LOCAL STORAGE, AND SIMILAR TECHNOLOGIES

23.1 Use of Technical Technologies

The App and related services may utilize technologies including:

• cookies;
• local storage;
• session tokens;
• authentication tokens;
• software development kits (SDKs);
• device identifiers;
• application storage mechanisms; and
• similar technologies.

23.2 Purposes

Such technologies may be used to:

• authenticate users;
• maintain sessions;
• preserve settings;
• maintain security;
• operate functionality;
• improve reliability;
• support notifications;
• diagnose technical issues; and
• improve user experience.

23.3 Essential Technologies

Certain technologies are essential to operation of the App and cannot reasonably be disabled without impairing functionality.

23.4 Third-Party Technologies

Third-party Service Providers may utilize technical technologies necessary to provide services to the Company.

Such providers may operate under their own privacy practices and contractual obligations.

23.5 Browser Controls

Where applicable, users may control certain technologies through browser, device, or operating-system settings.

Disabling certain technologies may affect App functionality.

MARKETING COMMUNICATIONS AND COMMERCIAL ELECTRONIC MESSAGES

24.1 Service Communications

The Company may send communications relating to:

• account administration;
• security;
• support;
• legal notices;
• subscription information;
• service updates; and
• operational matters.

Such communications are considered service-related communications and may be sent regardless of marketing preferences where permitted by law.

24.2 Marketing Communications

The Company may send marketing communications concerning:

• new features;
• promotions;
• premium services;
• rewards programs;
• educational content; and
• other offerings.

Marketing communications will be provided in accordance with applicable law.

24.3 Consent

Where required by law, marketing communications will be sent only with appropriate consent.

24.4 Withdrawal of Consent

Users may withdraw consent to receive marketing communications at any time by:

• following unsubscribe instructions;
• adjusting account settings; or
• contacting the Company.

Withdrawal of consent does not affect service-related communications.

24.5 Children’s Information

The Company does not knowingly use information associated with Child Profiles for direct marketing purposes.

The Company does not knowingly direct marketing communications to children through Child Profiles.

24.6 Compliance with Anti-Spam Laws

The Company intends to comply with applicable commercial electronic messaging and anti-spam legislation, including Canada’s Anti-Spam Legislation (CASL).

GOOGLE PLAY FAMILIES, APPLE APP STORE, AND CHILD PRIVACY COMPLIANCE

25.1 Commitment to Child Privacy

The Company recognizes that applications directed toward families and children require enhanced privacy protections.

The Company seeks to design the App in a manner consistent with applicable child privacy principles and marketplace requirements.

25.2 Google Play Families Compliance

Where applicable, the Company seeks to operate the App in a manner consistent with:

• Google Play Families policies;
• Google Play Developer Program Policies;
• Google Play Data Safety requirements; and
• related marketplace requirements.

25.3 Apple App Store Compliance

Where applicable, the Company seeks to operate the App in a manner consistent with:

• Apple App Store Review Guidelines;
• App Store privacy requirements;
• App Tracking Transparency requirements; and
• related Apple marketplace policies.

25.4 Child Data Protections

The Company does not knowingly:

• sell Child Profile information;
• engage in behavioural advertising directed at children;
• use Child Profile information for cross-context advertising;
• create advertising profiles relating to children; or
• knowingly permit independent child registration.

25.5 Parent-Controlled Environment

The App is designed so that Child Profiles are created, managed, supervised, and controlled by Parent Account holders.

25.6 Data Minimization

The Company seeks to limit collection of information relating to children to information reasonably necessary for operation of the App.

25.7 Accessibility Service Disclosure

Certain App functionality may rely upon Android Accessibility Service permissions and related permissions.

Such permissions are used solely to support authorized functionality described in this Privacy Policy and the Terms of Service.

The Company does not use Accessibility Services to collect information beyond what is reasonably necessary to provide authorized App functionality.

25.8 Usage Access Disclosure

Certain App functionality may rely upon Android Usage Access permissions.

Usage Access information is used solely for operation of monitoring and reporting functionality authorized by the Parent Account holder.

25.9 Activity Recognition Disclosure

Where Active Boost is enabled, the App may utilize Activity Recognition permissions to obtain activity-related information for reward and incentive functionality.

25.10 Future Compliance Measures

The Company reserves the right to modify App functionality, permissions, privacy practices, consent mechanisms, and compliance measures in order to comply with:

• legal requirements;
• regulatory requirements;
• marketplace requirements; and
• evolving privacy standards.

CHANGES TO THIS PRIVACY POLICY

26.1 Right to Modify

The Company reserves the right to amend, revise, supplement, replace, or otherwise modify this Privacy Policy at any time.

Changes may be made to reflect:

• changes in applicable law;
• changes in regulatory requirements;
• changes in marketplace requirements;
• changes in App functionality;
• changes in Service Providers;
• operational changes;
• security requirements; or
• business developments.

26.2 Notification of Changes

Where the Company determines that a change is material, the Company may provide notice through one or more of the following methods:

• in-App notifications;
• email communications;
• website notices;
• account notifications; or
• other reasonable means.

26.3 Effective Date of Changes

Unless otherwise stated, amendments to this Privacy Policy become effective on the date identified in the revised Privacy Policy.

26.4 Continued Use

Subject to applicable law, continued use of the App following implementation of a revised Privacy Policy constitutes acknowledgement of the revised Privacy Policy.

26.5 Prior Versions

The Company may retain prior versions of this Privacy Policy for legal, regulatory, operational, and historical purposes.

PRIVACY OFFICER AND CONTACT INFORMATION

27.1 Privacy Officer

The Company has designated a Privacy Officer responsible for oversight of privacy matters, privacy compliance, privacy requests, and privacy complaints.

27.2 Privacy Inquiries

Questions regarding this Privacy Policy or the Company’s privacy practices may be directed to:

Privacy Officer

2422019 Ontario Inc. (o/a BuckTime!)

Email: privacy@chachingapp.ca

27.3 General Support

General support inquiries may be directed to:

Email: support@chachingapp.ca

27.4 Legal Inquiries

Legal notices, regulatory communications, intellectual property complaints, and other legal inquiries may be directed to:

Email: legal@chachingapp.ca

27.5 Future Contact Information

The Company reserves the right to update contact information from time to time.

Current contact information may be made available through:

• the App;
• the Company’s website; or
• updated versions of this Privacy Policy.

PRIVACY COMPLAINTS AND DISPUTE RESOLUTION

28.1 Privacy Complaints

Individuals who believe that the Company has failed to comply with this Privacy Policy or applicable privacy legislation may submit a privacy complaint to the Privacy Officer.

28.2 Complaint Information

Privacy complaints should include:

• the complainant’s name;
• contact information;
• a description of the concern;
• relevant dates;
• supporting information; and
• the relief sought.

28.3 Investigation Process

The Company will use commercially reasonable efforts to:

• review complaints;
• investigate concerns;
• obtain relevant information;
• assess compliance obligations; and
• respond to the complainant.

28.4 Response Time

Response times may vary depending upon:

• the complexity of the complaint;
• verification requirements;
• legal obligations;
• availability of information; and
• operational considerations.

28.5 Regulatory Rights

Nothing in this Privacy Policy restricts an individual’s right to submit a complaint to:

• applicable privacy regulators;
• consumer-protection authorities;
• governmental agencies; or
• other authorities having jurisdiction.

28.6 Alternative Resolution

The Company may, but is not obligated to, attempt to resolve privacy concerns through informal discussions, mediation, or other voluntary dispute-resolution processes.

INTERPRETATION, SEVERABILITY, AND GOVERNING PRIVACY PRINCIPLES

29.1 Interpretation

This Privacy Policy shall be interpreted in a manner consistent with:

• applicable privacy legislation;
• consumer-protection legislation;
• child privacy principles;
• marketplace requirements; and
• applicable legal obligations.

29.2 Severability

If any provision of this Privacy Policy is determined to be:

• invalid;
• illegal;
• unenforceable; or
• contrary to applicable law,

that provision shall be interpreted, modified, limited, or severed to the minimum extent necessary to preserve validity and enforceability.

The remainder of this Privacy Policy shall remain in full force and effect.

29.3 No Waiver

Failure by the Company to enforce any provision of this Privacy Policy shall not constitute:

• a waiver;
• an election;
• an estoppel; or
• a relinquishment of rights.

29.4 Consistency with Applicable Law

Where applicable law grants privacy rights that cannot be waived, restricted, or excluded, such rights shall prevail to the extent required by law.

29.5 Privacy Principles

The Company seeks to administer this Privacy Policy in accordance with principles including:

• accountability;
• transparency;
• consent;
• data minimization;
• security safeguards;
• limited use and disclosure;
• openness;
• individual access; and
• responsible information management.

EFFECTIVE DATE

30.1 Effective Date

This Privacy Policy is effective as of: March 6, 2026

30.2 Last Updated

30.3 Acknowledgement

By creating a Parent Account, establishing a Child Profile, accessing the App, or otherwise using the App, users acknowledge that they have reviewed and understood this Privacy Policy.

30.4 Official Version

This Privacy Policy constitutes the official privacy policy governing the collection, use, disclosure, storage, retention, transfer, and protection of information associated with the App.

30.5 Survival

The provisions of this Privacy Policy that by their nature are intended to survive account deletion, service termination, or discontinuance of the App shall survive to the extent reasonably necessary to:

• comply with legal obligations;
• resolve disputes;
• protect rights;
• maintain records;
• enforce agreements; and
• complete lawful operational activities.

SCHEDULE "A"

CURRENT SERVICE PROVIDERS AND INFRASTRUCTURE PROVIDERS

This Schedule forms part of the BuckTime! Privacy Policy.

The Company may update this Schedule from time to time without amending the substantive provisions of the Privacy Policy, provided that any changes remain consistent with the Privacy Policy.

The providers identified below assist the Company in operating, maintaining, securing, and supporting the App.

A.1 Google Sign-In

Provider: Google LLC

Purpose:

Authentication and account sign-in services.

Information Potentially Processed:

• name;
• email address;
• Google account identifier; and
• profile image reference information.

Purpose of Processing:

• account creation;
• account authentication;
• account security;
• account recovery; and
• fraud prevention.

Users who elect to authenticate through Google Sign-In remain subject to Google’s privacy practices and terms of service.

A.2 Firebase Cloud Messaging (FCM)

Provider: Google LLC

Purpose:

Push-notification delivery.

Information Potentially Processed:

• device tokens;
• notification identifiers;
• account identifiers;
• notification preferences; and
• related technical information.

Purpose of Processing:

• Focus Window notifications;
• reward notifications;
• security notifications;
• administrative communications; and
• service announcements.

The Company does not control Google’s independent processing activities associated with Firebase Cloud Messaging.

A.3 Expo Push Services

Provider: Expo

Purpose:

Push-notification infrastructure and delivery services.

Information Potentially Processed:

• push-notification identifiers;
• device identifiers;
• notification payload information; and
• related technical information.

Purpose of Processing:

• delivery of App notifications;
• service communications;
• account notifications; and
• operational messaging.

A.4 MongoDB Atlas

Provider: MongoDB, Inc.

Purpose:

Database hosting and storage services.

Information Potentially Processed:

• Parent Account information;
• Child Profile information;
• Family Group information;
• rewards information;
• activity information;
• monitoring information;
• analytics information;
• account settings; and
• operational data.

Primary Data Region:

Canada (subject to provider infrastructure, backup systems, support access, and future service changes).

Purpose of Processing:

• database storage;
• application operations;
• backup and recovery;
• security monitoring; and
• system administration.

A.5 Fly.io

Provider: Fly.io

Purpose:

Application hosting and infrastructure services.

Information Potentially Processed:

• technical information;
• application logs;
• diagnostic information;
• account identifiers;
• security information; and
• operational data.

Purpose of Processing:

• application hosting;
• service delivery;
• infrastructure management;
• system reliability;
• performance monitoring; and
• operational support.

A.6 Future Service Providers

The Company may introduce additional Service Providers from time to time, including:

• payment processors;
• subscription-management providers;
• customer-support platforms;
• analytics providers;
• cybersecurity providers;
• fraud-prevention providers;
• communications providers;
• cloud-hosting providers;
• artificial-intelligence service providers; and
• other operational vendors.

Where required by applicable law, the Company will update this Schedule, the Privacy Policy, or related disclosures to reflect material changes.

A.7 Service Provider Selection

The Company seeks to engage reputable Service Providers that implement security, confidentiality, and privacy safeguards appropriate to the nature of the services provided.

However, each Service Provider operates independently and remains responsible for its own privacy, security, and operational practices.

Users should review the privacy policies of applicable Service Providers for additional information.

A.8 Changes to this Schedule

The Company reserves the right to:

• add Service Providers;
• remove Service Providers;
• replace Service Providers;
• change hosting providers;
• change infrastructure providers;
• change notification providers; and
• modify technical architecture

at any time.

Updated versions of this Schedule may be published through:

• the App;
• the Company’s website; or
• updated versions of the Privacy Policy.

The most current version of this Schedule shall govern.