Privacy Policy

1. Who we are

DoodleBeez (doodlebeez.com) is operated by Alphabets Business Innovation Ltd., a corporation incorporated under the laws of Canada and extraprovincially registered in British Columbia, operating as ABIEdu Kids, 1-6533 121 Street, Surrey, BC V3W 1M5, Canada ("we", "us"). We are responsible for personal information under our control and have named a Privacy Officer, who you can reach at info@abiedu.com.

We handle personal information in line with British Columbia's Personal Information Protection Act (PIPA) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Because some families visit from the United States, we also design the site around the Children's Online Privacy Protection Act (COPPA). Where it applies to visitors from the European Union or United Kingdom, we respect the GDPR. Our wider company policies are on our ABIEdu compliance page.

2. Children

DoodleBeez is made for children aged 3 to 14, used with a parent, guardian or teacher.

• A parent, guardian or teacher creates the account. Children never create accounts, and there are no comments, chat, messaging or public profiles anywhere on the site. Only a parent or guardian can save or upload drawings to our servers, with consent, as described below.
• When signing up, a parent may choose to add a child's first name. It is stored with the parent's account and shown on the account page. It is optional.
• On Family Premium, a parent may tell us about their child in a story or advisor request, for example the child's age, interests or how they learn. We use this only to reply and to write for that child. Please share only what you are comfortable sharing.
• Game stars, badges, chosen languages and any name typed into the Bee Passport are saved only in the browser on your device and are never sent to us.
• Doodle Pad: when a child taps Save, the drawing is saved only on that device (as a picture file and in the browser's own storage). Nothing a child draws is sent to us automatically, and no strokes or drawings are sent while drawing.
• Our drawings (only with a parent's verified consent): nothing a child draws is saved by us until a parent completes four steps: (1) reads a notice of what we keep, why, who sees it and how long, ticks each consent point including these terms, and types their full name as a signature; (2) confirms by a link sent to the account email; (3) downloads a consent form filled with their details, signs it and uploads a photo, scan or PDF of it; and (4) our team checks the signed form against the account and approves it. A second email a day later confirms consent and explains how to withdraw it. After that, only a parent, behind a grown up check, can add a drawing from the device, or upload a photo of a paper drawing (Family Premium). We keep the drawing, the date and time it was drawn, the child profile nickname and any story answers, and remove photo location data. Family Premium can turn a drawing into a coloring page and a short story; this is done on DoodleBeez's own server, and drawings are never sent to another company, shared or used to train any AI. We keep the signed form and a history of each consent step while the account is open, as a record that consent was given, and delete them when the account is closed. Parents can delete any drawing, all of one child's drawings or everything, download everything, or withdraw consent at any time.
• When a parent is logged in, we save a simple activity history with the parent's account so the family can see it on any device: the days DoodleBeez was opened (attendance stars), login times, and which stories, drawing guides and activities were finished, with dates. It does not include anything a child types, and it includes drawings only if a parent has turned on Our drawings.
• We do not knowingly collect personal information directly from children. Our forms ask the person filling them in to confirm they are an adult.

If you believe a child has given us personal information, email info@abiedu.com and we will delete it promptly.

3. What we collect, from adults

• Parent account: your name, email address, password (stored in scrambled form, we cannot read it), the plan and billing period you choose, the date you joined and, if you add it, your child's first name.
• Payments: card payments for Premium Digital and Family Premium are handled by Stripe. Stripe collects your card details; we never see or store full card numbers. We receive your Stripe customer and subscription reference and whether payments succeed.
• Family Premium requests: what you write in a story or advisor request, your child's age if you give it, and the best time to reach you.
• Our drawings: only after a parent gives consent, the drawings the family saves, the date and time of each, the child profile name, story answers such as the character's name, and the date and time consent was given.
• Contact form: your name, email address and message.
• Activity history: for logged in accounts, the days the site was used, login times, and which stories, drawings and activities were finished. You see it on the Progress page.
• Technical data: like any website, our host's servers record basic logs such as IP address, browser type and pages requested, used to keep the site secure and working.

4. How we use it

We use personal information to create and run your account, open the right plan for your family, take payments and handle cancellations, reply to your messages and Family Premium requests, keep the site secure, and meet legal and tax obligations. The emails we send today are about your account only: a welcome email, emails about your plan and free month, and replies to you. Stripe may also email you payment receipts. We do not send newsletters or marketing emails at the moment. If we start, we will ask for your consent first, as Canada's Anti Spam Legislation (CASL) requires, and every such email will have a working unsubscribe link. We will ask for your consent before using personal information for any new purpose. We never sell or rent personal information.

5. Who we share it with

We share information only with service providers who help us run DoodleBeez, and only what they need:

• SiteGround, our web host, which stores the website and its data and sends the site's emails. Its servers may be outside Canada.
• Stripe, which processes card payments and subscriptions under PCI DSS standards.
• Our business email provider, which receives copies of new account notices, contact messages and Family Premium requests in our team inbox at info@abiedu.com.
• Google: pages load fonts from Google Fonts, which means your browser contacts Google's servers and shares your IP address. Buzzby videos are embedded from YouTube in privacy enhanced mode (youtube-nocookie.com). When a video is shown or played, YouTube may collect information under Google's privacy policy.

Because some providers are outside Canada, your information may be stored or processed in other countries and may be accessible to authorities there under their laws. We may also disclose information if the law requires it.

Children's drawings in particular: we never sell them, show them to advertisers, use them for advertising or marketing, put them in a public gallery, or let any person or tool profile, score or make decisions about a child from them. We do not run them through AI tools of any kind. Our team only opens a family's drawings if the parent asks us to for support, and opens signed consent forms only to check them.

If DoodleBeez is sold or merged: children's drawings and consent records would only pass to a new owner who agrees to protect them exactly as this policy does. We would email parents first, and parents could download and delete everything before any transfer.

6. Cookies and device storage

We use essential cookies that make the site work and keep it secure, and login cookies so you stay signed in. Stripe sets its own cookies on its secure checkout page. We do not use analytics or advertising cookies, and we do not show ads. The Kids Zone saves progress such as game stars, badges, chosen languages, sound settings and the Bee Passport name in your browser's own storage on your device; attendance stars and finished activities for logged in accounts are saved with the account, as described above. You can clear it at any time by clearing this site's data in your browser.

7. Storage, retention and deletion

The site uses HTTPS encryption, and access to personal information is limited to people who need it. Saved drawings and consent forms sit in a private folder that cannot be opened from the web, under random file names, and are shown only to the account they belong to. No system is perfectly secure, so please keep your password private and tell us straight away if you think someone else has used your account. We keep your account and its activity history while it is open. You can ask us to delete your account and everything linked to it at any time by emailing info@abiedu.com. Saved drawings are kept only to provide the family's private drawing collection. They are kept until the parent deletes them, and are deleted automatically 24 months after the parent last signed in with their password or used Our drawings (a child using the site in a signed in session does not count) (we email 30 and 7 days before so the family can sign in or download everything), when consent is withdrawn, or when the account is closed. Deleted drawings and their coloring pages are removed from our live server straight away and from our host's backups within 30 days. We make no other copies or thumbnails, and no other service provider receives them. The consent record is kept for as long as the account is open, to show consent was given. We keep contact messages and Family Premium requests for up to 24 months, and payment and tax records for as long as Canadian tax law requires (Stripe also keeps its own payment records). If a breach creates a real risk of significant harm, we will notify affected people and the appropriate privacy regulator as required by law.

8. Your rights

You can ask to see the personal information we hold about you, correct it, withdraw your consent, unsubscribe, or have it deleted, by emailing info@abiedu.com. Parents can also see, download and delete their children's saved drawings themselves on the Our drawings page, see their consent history there, and ask us for a copy of their signed consent form. To protect your family, we check that a request comes from the account holder (for example by replying to the account email) before we share or delete anything. We will reply within 30 days. If you are not satisfied with our answer, you can contact the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca) or the Office of the Privacy Commissioner of Canada (priv.gc.ca). Visitors from the EU or UK may also contact their local data protection authority.

9. Contact and changes

Privacy Officer, Alphabets Business Innovation Ltd., 1-6533 121 Street, Surrey, BC V3W 1M5, Canada. Email info@abiedu.com, phone +1 604 498 6666. This policy is subject to change. If we change it, we will update the date at the top of this page and email account holders about any important change. If a change affects what we collect from or about children, or how we use it, we will ask parents for consent again before it applies, and nothing new happens until they agree.