Privacy Policy

This Privacy Policy explains what information Toka Learning LLC ("Toka", "we", "us") collects through tokalearning.com and our mobile apps (the "Service"), why we collect it, and the choices you have. It should be read together with our Terms of Service and our Cookie Policy.

Account and family information. When you create an account, we collect your email address, name, role (parent, teacher, or admin), and the locale, country, and region you select for your family.

Browsing and activity data. We track browsing activity for every visitor, including anonymous ones, to power recommendations and site analytics. Each page view, resource view, and click-through to a seller's site is recorded with the page path, the resource or publisher involved (if any), and the locale/country/region associated with the visit. We retain this activity to compute view counts over rolling 2-, 7-, 15-, 30-, 60-, 90-, and 365-day windows. Authenticated users' resource views also populate a personal browsing history used to drive the "Inspired by your browsing" recommendations on resource pages.

Location. For visitors who are not signed in, we infer an approximate country from your IP address (via our hosting provider's edge network) so that recommendations and currency/seller defaults can be localized without asking you to enter your location manually.

Content you submit. Reviews, ratings, submitted resources, profile information (including any avatar you upload), and any other content you post. Uploaded images are automatically scanned for explicit or prohibited content before being stored — see Section 6.

• To operate the Service — show resource pages, reviews, and the price panel.
• To personalize browsing recommendations and the home page based on your activity or, for anonymous visitors, your inferred location.
• To moderate submitted resources and reviews.
• To send transactional email (e.g. account verification, price alerts you request).
• To measure outbound traffic to seller sites for our own analytics and affiliate reporting.

Toka is designed for use by parents and teachers on behalf of a family. We do not knowingly collect personal information directly from children. Child profile information (name, age range, planner activity) is entered and controlled entirely by the Parent on the account, and a Parent can request that any child profile data be deleted at any time by contacting [email protected].

If we become aware that a child has submitted personal information to us directly without parental involvement, we will delete it.

Toka participates in affiliate programs with booksellers, publishers, and curriculum retailers. When you click certain links to a seller's site and make a purchase, Toka may earn a commission, at no additional cost to you. This applies to the seller links shown in our price panel and on resource pages.

We do not sell your personal information. We share information with:

• Supabase — authentication and database hosting.
• Amazon SES — sending transactional email.
• Affiliate networks and seller sites (e.g. Amazon Associates, eBay Partner Network, and the publisher/used-market affiliate programs listed in our seller directory) — to attribute purchases made after you click through from Toka.
• eBay's Finding API — used-market price lookups shown in the price panel.
• Google Cloud Vision — automated screening of images you upload (avatars and resource images) for explicit content and embedded offensive text, before the image is stored.
• Service providers who help us run the Service (e.g. our hosting and object storage providers), under contracts that limit their use of your data to providing that service.

Depending on where you live, you may have some or all of the following rights:

• United States (CCPA/CPRA): the right to know what personal information we hold about you, to request deletion, and to opt out of the sale or sharing of your personal information. We do not sell personal information.
• United Kingdom and European Union (UK/EU GDPR): the right to access, correct, delete, or export your data, and to object to or restrict certain processing. Our legal basis for processing is generally your consent, our contract with you, or our legitimate interest in operating and improving the Service.
• South Africa (POPIA): the right to access and correct your personal information and to object to its processing.
• Brazil (LGPD): the right to confirm, access, correct, and request deletion of your personal information.

To exercise any of these rights, contact us at [email protected].

We retain account information for as long as your account is active. Activity/browsing data is retained long enough to compute the rolling view-count windows described in Section 2 (up to 365 days), after which older raw events are aggregated or deleted.

Toka is operated from the State of Georgia, in the United States.

We use a small number of cookies to keep you signed in and to remember your cookie preferences. See our Cookie Policy for the full list of cookies we set and why.

Questions about this Privacy Policy can be sent to [email protected].