Private Beta Privacy Notice
Version R2-draft-2026-10-24
Draft for review — not yet the approved text. Placeholders in [brackets] are filled in before the Private Beta opens.
1. Who operates the Beta
MyKudosWallet's invitation-only private Beta is operated by CAEtech International Inc., doing business as CAEtech Ventures [LEGAL ENTITY AND PUBLIC CONTACT DETAILS TO CONFIRM]. Privacy questions: privacy@mykudoswallet.com.
2. Who can participate
The Beta is limited to adults aged 18 or older whom we have individually authorized, including selected testers in the United States, India, and Canada. Adults may manage profiles about children; children may not create their own accounts.
3. Information handled
Account and invitation information (such as name and email); Vault membership and permissions; uploaded photos and videos, stories and captions; child-profile details entered by guardians; feedback and support requests; and technical logs.
Sign-in and security records: the IP address and browser or device type of each sign-in session; the names of devices you choose to remember (for example “Firefox on Windows”), kept for up to 30 days; and your two-step sign-in method. A record of account and security activity, such as sign-ins, identity checks, sharing, privacy changes and deletions. Your confirmation of age and acceptance of the Beta documents, with the date and document version.
Information embedded in uploaded files, such as the date and the location where a photo was taken: original files are stored unchanged; viewing and shared copies have the location removed. Email delivery records held by our email provider. For private viewing links: the items shared, the expiry, how often the link was opened and when it was last opened.
4. Why we process it
To provide and secure Beta access, store and show Vault content to authorized participants, test features, fix problems, answer requests, and prepare for Production. We do not sell personal information. MyKudosWallet contains no advertising or analytics services and no AI features, and we do not use your content to train AI models. During development and testing we do not send participants' content or personal information to AI tools. [VERIFY vendor terms]
5. Who can see content
Who can see an item depends on your role in the Vault and the item's privacy setting. Items marked “Only me” are visible only to the person who added them, not even to the Vault Owner. New uploads, events, albums and Memory Shows start as “Everyone in your household”, and you can change this before saving. People can download original files only where their role or the sharing settings allow it.
Our operator tools show counts and statuses only, not photos, file names, captions or stories. Your information is encrypted while it travels over the internet and is stored by our providers with encryption at rest [VERIFY]. It is not end-to-end encrypted, so the people who administer our infrastructure [NAMES OR ROLES] could technically access it. They will do so only to keep the service secure and working, to respond to your request, or where the law requires.
Participants can share a single photo or video, or an Event, with people outside the Beta through private viewing links: these require a passcode, let the recipient view but not download (enforced by our servers), last at most 7 days, and stop working when the Beta closes, when the participant who made them leaves the Beta, or when they turn them off. A link can't prevent screenshots, and turning it off doesn't remove anything a recipient has already viewed or saved. We don't send emails to people outside the Beta, such as badge approval requests.
6. Service providers and locations
Your information is stored and processed in the United States: Vercel (hosting, [REGION — VERIFY]), Neon (database, AWS US East – Ohio), Cloudflare R2 (file storage, [LOCATION — VERIFY]) and Resend (email). If you take part from India, Canada or another country, your information is transferred to and stored in the United States.
7. Beta end and retention
Beta access closes on [DATE, TIME, TIME ZONE]. Beta accounts and content will not move to Production.
Active Beta environment: we aim to delete the active Beta environment — its database, file storage and backup storage — within 7 days after closing.
Residual provider copies: our service providers may keep residual copies for a limited time under their own retention policies: database restore history (Neon), hosting logs (Vercel) and email delivery records (Resend). [Insert each period only after it has been confirmed.] Messages you send to our support addresses are kept for [N].
8. Security and privacy requests
Sign-up is by individual authorization only. Passwords are stored only in hashed form. Vault Owners and Administrators must use two-step sign-in, and sensitive actions require you to confirm your identity again. Files are kept in private storage and shown through short-lived links after a permission check. Sign-in attempts are rate-limited, and account and security activity is recorded. No system is risk-free.
You can ask about access, correction, deletion or privacy rights at privacy@mykudoswallet.com. If you ask to leave the Beta early, we will end your access promptly; your content is then deleted together with the Beta environment.