Privacy Policy

Effective date: October 31, 2026
Last updated: October 31, 2026

This Privacy Policy explains how Aurevia Ventures LLC (formerly BuilderBoard Technologies LLC), which operates GAMIFAI at gamifai.app ("GAMIFAI," "we," "us"), collects, uses and shares personal information when you use our website and service (the "Service"). It is written to meet California's privacy laws, including the California Online Privacy Protection Act (CalOPPA), the California Consumer Privacy Act as amended (CCPA), and the Student Online Personal Information Protection Act (SOPIPA).

In short:

• We collect what we need to run the Service: account details, the material creators upload, and learners' progress.
• We use an AI provider to build courses from uploaded material. We never put learners' names, emails or account details into AI prompts. If a trainer turns on Simulation (AI roleplay practice), what a learner types in the roleplay goes to the AI so it can respond and coach them, with contact details removed and no name attached.
• We do not sell or share personal information, show ads, or use advertising trackers.
• When a school, company or teacher invites learners, that organization controls the learners' information, and we handle it on their behalf.

1. Who is responsible for your information

• Creators, account holders and website visitors: we decide how your information is used and are responsible for it.
• Learners invited by an organization: when a company, school or teacher ("your Organization") invites you to a course, your Organization decides what is collected about you and how it is used. We process that information on your Organization's behalf, as its service provider. For questions or requests about it, please contact your Organization first; we will help them respond.

2. Information we collect

2.1 Information you give us

2.2 Information created when learners play

• Answers submitted and whether they were correct (graded on our servers)
• XP, levels and mastery for each learning objective
• Game saves, achievements and progress
• When you played and which game mode and visual style you used

If a creator turns on a leaderboard for a course, other learners in that course see a shortened version of your name (for example, "Sam R."), your XP and your team. Leaderboards are off unless the creator turns them on.

2.3 Information collected automatically

• Technical logs: IP address, browser and device type, pages requested, times and error messages, used to run and secure the Service.
• Cookies and device storage: we use cookies that are needed to keep you signed in and to make the Service work. We store a few preferences on your device, such as whether read-aloud is on. We do not use advertising cookies, analytics trackers or third-party tracking.
• Read-aloud: if you turn on read-aloud, text is spoken by your device's built-in voice. No audio is recorded or sent to us.
• Microphone (voice practice only): used only during a Simulation voice call you start, after you accept the call notice. We don't record or store audio.

2.4 Information we ask you not to give us

Please do not upload documents containing other people's personal information (such as names, contact details, ID numbers, or health or financial information about real people), and do not upload sensitive personal information. Creators are responsible for removing it from source documents before upload.

3. How we use information

We use personal information to:

1. Provide the Service: create and manage accounts, build and host courses, let learners join and play, grade answers, track progress, run leaderboards a creator turns on, and show creators their learners' results (including CSV export);
2. Draft course content with AI from uploaded material (Section 4);
3. Process payments and manage subscriptions, including renewal reminders;
4. Send service emails, such as account verification, sign-in codes, receipts, renewal reminders and important notices. We do not send marketing emails to learners. If we send product news to creators, every message will include a way to unsubscribe;
5. Keep the Service secure, prevent fraud and abuse, and fix errors;
6. Improve the Service using aggregated or de-identified information about how features are used; and
7. Comply with the law and enforce our Terms.

We do not:

• sell personal information or share it for cross-context behavioral advertising;
• show advertising in the Service;
• build advertising profiles of anyone, including learners; or
• use your content or learners' information to train AI models.

4. AI processing

GAMIFAI uses a third-party AI model through its API, currently Anthropic (Claude).

• What we send: the text extracted from documents creators upload, and course content (objectives, lessons, questions) when a creator asks the AI to draft or edit material.
• What we never send: learners' names, email addresses or account details, or their scores. Answers to questions are graded and stored by our own systems.
• Simulation (optional AI practice): in a roleplay, what the learner types (or says, in a voice call) is sent to an AI provider so it can play the character and then coach the learner. Voice calls go directly from the learner's browser to OpenAI's real-time voice service; before every call the learner sees and accepts a notice that the call is with an AI and is transcribed for coaching. We keep only the text transcript long enough to produce feedback and do not record or store audio. We remove obvious contact details (emails and phone numbers) first and never attach a name or account. Learners are asked not to type personal details. Simulation is not available on school plans.
• Personal information inside uploads: if a creator uploads a document containing personal information, that text may be sent to the AI provider as part of the document. That is why we ask creators to remove it first.
• Training: under our AI provider's commercial terms, information sent through its API is not used to train its models.

If we add an AI provider or a new kind of AI feature that uses personal information differently, we will update this policy first.

5. How we share information

We share personal information only as described here. We have not sold or shared personal information for cross-context behavioral advertising in the past 12 months.

5.1 Within your Organization

If you are a learner, the creators and owners of the Organization that invited you can see your name, progress, answers, XP and mastery, and can export them. Creators see only learners in their own Organization's courses.

5.2 Service providers

These providers help us run the Service. They may use personal information only to provide services to us.

We will update this list before adding a provider that handles personal information.

5.3 Other cases

• Legal requirements: when required by law, subpoena or court order, or to protect the rights, safety or property of our users, the public or GAMIFAI. Where the law allows, we will tell the affected Organization first.
• Business transfers: if we are part of a merger, acquisition or sale of assets, personal information may transfer to the new owner, who must continue to honor this policy for information collected under it. Student information stays subject to SOPIPA and any school agreement.
• With your direction: when you ask us to share.

6. How long we keep information

We may keep aggregated or de-identified information that can no longer identify anyone.

7. Security

We protect personal information with reasonable safeguards, including:

• database access controls that keep each Organization's information separate;
• encryption in transit (HTTPS) and at rest through our hosting and database providers;
• grading on our servers, so answer keys are never sent to browsers;
• passwords stored only as hashes; and
• limiting staff access to those who need it.

No system is perfectly secure. If a security breach affects your personal information, we will notify you or your Organization as California and other applicable laws require, without unreasonable delay.

8. Your choices and rights

8.1 Everyone

You can:

• see and update your account information in the Service;
• ask for a copy of your personal information, or ask us to correct or delete it, by emailing hello@gamifai.app; and
• delete your account yourself under Account → Delete account, or by emailing hello@gamifai.app from your account email.

If you are a learner invited by an Organization, we may refer your request to your Organization, which controls that information.

8.2 California residents

We give California residents the rights below whether or not the CCPA's business thresholds apply to us. You have the right to:

• Know what personal information we collect, use and disclose, and get a copy of it;
• Delete personal information we collected from you, subject to legal exceptions;
• Correct inaccurate personal information;
• Opt out of the sale or sharing of personal information. We do not sell or share personal information, so there is nothing to opt out of;
• Limit the use of sensitive personal information. The only sensitive personal information we collect is account login credentials, which we use only to sign you in and keep your account secure; and
• Not be discriminated against for using these rights.

Categories we collected in the past 12 months: identifiers (name, email, IP address); customer records (billing information through Stripe); commercial information (plan and purchase history); internet activity (technical logs and activity in the Service); education information (course progress and scores, for learners); and account login credentials. Sources: you, your Organization, and your device. Purposes and recipients: see Sections 3 and 5. Retention: see Section 6.

How to make a request: email hello@gamifai.app with the subject "California Privacy Request," or write to us at PO Box 51301, Palo Alto, CA 94303. We will verify your request by confirming you control the email on your account. You may use an authorized agent, who must provide your signed permission. We will confirm receipt within 10 business days and respond within 45 days.

Global Privacy Control and Do Not Track: we do not track you across other websites or allow third parties to do so. We treat a Global Privacy Control signal as a valid request to opt out of sale and sharing, which we already do not do. Because we do not track across sites, browser "Do Not Track" signals do not change how the Service works.

Shine the Light (California Civil Code section 1798.83): we do not share personal information with third parties for their own direct marketing.

8.3 Other U.S. states

Residents of other states may have similar rights under their state laws. You can make requests the same way. If we decline a request, you may appeal by replying to our decision.

9. Children and students

The Service is not directed to children under 13, and children under 13 may not create an account on their own.

Children under 13 may use the Service only through a school that has a signed data privacy agreement with us. In that case the school authorizes the collection of the student's information for the school's educational purposes only, as COPPA allows, and we use it only to provide the Service to the school.

For K-12 students, we follow California's Student Online Personal Information Protection Act. We do not:

• show targeted advertising to students, on our Service or anywhere else, based on information from the Service;
• build profiles of students except for school purposes;
• sell student information; or
• disclose student information except to provide the Service to the school, to comply with the law, or to protect safety and security.

We protect student information with reasonable security and delete a student's information when the school asks. Parents and former students 18 or older can request deletion through the school or by emailing hello@gamifai.app; we will verify the request with the school.

If you are a parent or guardian and believe a child under 13 gave us personal information without proper authorization, email hello@gamifai.app and we will delete it.

10. Users outside the United States

GAMIFAI is operated from the United States for users in the United States, and our providers store information in the United States. If you use the Service from elsewhere, your information will be transferred to and processed in the United States.

11. Changes to this policy

We may update this policy. The "Last updated" date at the top shows when it last changed. If we make a material change, we will tell you by email or in the Service before it takes effect. We will not use personal information in a materially different way from what we described when we collected it without telling you first and, where required, asking for your consent.

12. Contact us

Aurevia Ventures LLC, operator of GAMIFAI
PO Box 51301, Palo Alto, CA 94303
Privacy questions and requests: hello@gamifai.app