Privacy Policy

This Privacy Policy explains what information Toka Learning LLC ("Toka", "we", "us") collects through tokalearning.com and our mobile apps (the "Service"), why we collect it, and the choices you have. It should be read together with our Terms of Service and our Cookie Policy.

Account and family information. When you create an account, we collect your email address, name, role (parent, teacher, or admin), and the locale, country, and region you select for your family.

Browsing and activity data. We track browsing activity for every visitor, including anonymous ones, to power recommendations and site analytics. Each page view, resource view, and click-through to a seller's site is recorded with the page path, the resource or publisher involved (if any), and the locale/country/region associated with the visit. We retain this activity to compute view counts over rolling 2-, 7-, 15-, 30-, 60-, 90-, and 365-day windows. Authenticated users' resource views also populate a personal browsing history used to drive the "Inspired by your browsing" recommendations on resource pages.

Location. For visitors who are not signed in, we infer an approximate country from your IP address — from a header our network provider adds at its edge, falling back to an offline IP-to-country database we host ourselves — so that recommendations and currency/seller defaults can be localized without asking you to enter your location manually. We do not infer anything narrower than a country this way.

Content you submit. Reviews, ratings, submitted resources, profile information (including any avatar you upload), and any other content you post. Uploaded images are automatically scanned for explicit or prohibited content before being stored — see Section 6.

• To operate the Service — show resource pages, reviews, and the price panel.
• To personalize browsing recommendations and the home page based on your activity or, for anonymous visitors, your inferred location.
• To moderate submitted resources and reviews.
• If you submit a course you wrote so that people outside your family can be invited, Toka's moderators read it before it is approved.
• To send transactional email (e.g. account verification, price alerts you request).
• To measure outbound traffic to seller sites for our own analytics and affiliate reporting.

Toka is designed for use by parents and teachers on behalf of a family, and handles information about children in two different ways depending on their age.

Children under 13 — child profiles. A child under 13 does not have a Toka account and does not provide information to us directly. Their child profile is entered and controlled entirely by the Parent on the account, and we keep it to the minimum the planner and courses need: a nickname, an age range rather than a date of birth, and their planner and course activity — including which course quiz and practice questions they got wrong, so those questions can come back for review and a Parent can see what is still in review, and their best score on each knowledge check, which the course's author and the parents in their family can see. We delete the record of a missed question once they get it right in three reviews in a row. A Parent can request that any child profile data be deleted at any time by contacting [email protected].

Teens aged 13 to 17 — invited teen accounts. A teen account exists only because a Parent on the family invited the teen to hold their own login, and that invitation is the parental consent for it. Because the teen signs up themselves, we collect some information directly from them: their email address, their name, and their planner, catalog and course activity — including which course quiz and practice questions they got wrong, so those questions can come back for review and a Parent can see what is still in review, and their best score on each knowledge check, which the course's author and the parents in their family can see. We delete the record of a missed question once they get it right in three reviews in a row. The account stays part of the Parent's family, and a Parent can request that a teen's account and its profile data be deleted at any time by contacting [email protected].

We do not knowingly collect personal information directly from anyone under 13. If we learn that we have collected personal information directly from a child under 13, we will delete it.

Toka participates in affiliate programs with booksellers, publishers, and curriculum retailers. When you click certain links to a seller's site and make a purchase, Toka may earn a commission, at no additional cost to you. This applies to the seller links shown in our price panel and on resource pages. As an Amazon Associate I earn from qualifying purchases.

We do not sell your personal information. We share information with:

• Akamai (Linode) — hosting for our servers and database, and the object storage that holds images you upload.
• Cloudflare — the network every request to the Service passes through, and our edge cache. It sees your IP address, and the approximate country described in section 2 comes from it.
• Resend and Amazon SES — sending transactional email (sign-in codes, password resets, and the account notices described in section 4).
• Sentry — automated error reporting from our servers and from your browser, so we can find and fix faults. We strip credentials, cookies and authorization headers from these reports before they are sent.
• Affiliate networks and seller sites (e.g. Amazon Associates, eBay Partner Network, and the publisher/used-market affiliate programs listed in our seller directory) — to attribute purchases made after you click through from Toka.
• eBay's Finding API — used-market price lookups shown in the price panel.
• Google Cloud Vision — automated screening of images you upload (avatars and resource images) for explicit content and embedded offensive text, before the image is stored.
• Service providers who help us run the Service (e.g. our hosting and object storage providers), under contracts that limit their use of your data to providing that service.

Depending on where you live, you may have some or all of the following rights:

• United States (CCPA/CPRA): the right to know what personal information we hold about you, to request deletion, and to opt out of the sale or sharing of your personal information. We do not sell personal information.
• United Kingdom and European Union (UK/EU GDPR): the right to access, correct, delete, or export your data, and to object to or restrict certain processing. Our legal basis for processing is generally your consent, our contract with you, or our legitimate interest in operating and improving the Service.
• South Africa (POPIA): the right to access and correct your personal information and to object to its processing.
• Brazil (LGPD): the right to confirm, access, correct, and request deletion of your personal information.

To exercise any of these rights, contact us at [email protected].

We retain account information for as long as your account is active. Activity/browsing data is retained long enough to compute the rolling view-count windows described in Section 2 (up to 365 days), after which older raw events are aggregated or deleted.

Toka is operated from the State of Georgia, in the United States.

We use a small number of cookies to keep you signed in and to remember your cookie preferences. See our Cookie Policy for the full list of cookies we set and why.

Questions about this Privacy Policy can be sent to [email protected].