Legal Compliance & Requirements

Last Updated: December 14, 2025
Review Status: Updated for December 2025 USA Lite Expansion

✅ Currently Implemented

Our comprehensive legal framework includes:

Core Legal Documents

Document	Version	Last Updated	Status
Terms of Service	v4.2	Dec 14, 2025	✅ Complete
Privacy Policy	v3.2	Dec 14, 2025	✅ Complete
Data Ownership Statement	v2.1	Dec 14, 2025	✅ Complete
All Disclaimers	v3.1	Dec 14, 2025	✅ Complete
Community Guidelines	v2.0	Nov 23, 2025	✅ Complete

9-Step Acceptance Flow — Mandatory on first app open
DisclaimerBanner Component — On all major screens including Master Tracker Hub, Appeal Command Center
Version Tracking — Users must re-accept when terms update

🆕 December 2025 USA Lite Expansion

USA Lite legal coverage added for 13 US jurisdictions:

Category	Coverage
Federal	Federal disability rights, ADA, FMLA
States	CA, NY, TX, FL, IL, MI, WA, OH, PA, TN, GA, MS
Topics	Workers’ compensation, civil rights frameworks, disability programs

Same Disclaimer Framework Applies:

All US legal information is educational only, not legal advice
Laws vary significantly by state
Terms & disclaimers updated to explicitly cover US-specific legal information

🔐 Privacy & Data Protection Compliance

Requirement	Status	Implementation
Data minimization	✅	Local-first architecture
User control	✅	Full export, deletion rights
Explicit consent	✅	Opt-in for all data collection
Right to access	✅	Data export in JSON format
Right to erasure	✅	Complete data deletion
Data portability	✅	Export to any format
Legal basis documentation	✅	Contract, consent, legitimate interest

CCPA/CPRA (California) ✅

Requirement	Status	Implementation
Data not sold	✅	We never sell user data
User rights disclosure	✅	Clear rights in Privacy Policy
“Do Not Sell” link	✅	Not needed (we don’t sell)
Right to know	✅	Transparent data practices
Right to delete	✅	Full account deletion

PIPEDA (Canada) ✅

Requirement	Status	Implementation
Consent	✅	Explicit opt-in
Privacy-by-design	✅	Local-first architecture
User ownership	✅	100% user data ownership
Transparency	✅	Open development process

👶 Children’s Privacy (COPPA)

Age Requirement: Users must be 18+ or have guardian consent.

Protection	Status
Age verification on signup	✅ Implemented
No data collection from under 13	✅ Policy in place
Clear age statement in Terms	✅ Section 3
Parental consent disclosure	✅ In Privacy Policy

🔒 Security Measures

Technical Safeguards ✅

Measure	Implementation
Encryption	AES-256-GCM (military-grade)
Key Storage	Hardware-backed secure enclave
Network Security	TLS 1.3 with certificate pinning
Input Validation	XSS and SQL injection prevention
Tamper Detection	Real-time integrity monitoring
Authentication	Optional biometric authentication

Operational Safeguards ✅

Measure	Status
Access controls	✅ Implemented
Security monitoring	✅ Automated threat detection
Regular testing	✅ OWASP Mobile Top 10 compliant
Incident response	✅ Procedures in place

♿ Accessibility Compliance

WCAG 2.1 Level AAA ✅

Category	Status
Screen reader optimization	✅ Full support
Keyboard navigation	✅ Complete
Color contrast	✅ AAA compliant
Text resize	✅ Up to 200%
Focus indicators	✅ Clear visible focus
Alternative text	✅ All images

Accessibility Features

High contrast mode
Dyslexia-friendly fonts (OpenDyslexic)
Motor disability accommodations
Voice navigation
Cognitive accessibility simplification
Indigenous language support
Complexity Mode (Simple/Standard/Power User)
Bad Day Mode for reduced cognitive load

See full Accessibility Statement →

🌍 Third-Party Service Disclosures

Service	Purpose	Data Shared	Privacy Policy
Firebase/Google Cloud	Authentication, optional cloud	Email, user ID (if signed in)	Google Privacy
YouTube API	Video content	Public video metadata only	YouTube Terms
Expo Push Notifications	Push notifications (opt-in)	Device token only	Expo Privacy
Sentry	Error tracking (opt-in)	Crash logs, device info	Sentry Privacy

Note: In BYOC Strict Mode, Firebase is completely disabled. You can use any cloud provider you choose.

📋 Intellectual Property

Our Content

3mpwr App™ and logos are our trademarks

Your Content

User-generated content remains 100% yours
You grant us license only to display/store within the app
Export your content anytime in standard formats

Open Source

We use open-source components with proper attribution
Full license information available in the app

📧 Contact for Legal Matters

Email: [email protected]
Subject: Include “Legal” for legal inquiries
Response Time: 24-48 hours
Location: Toronto, ON, Canada

Specific Inquiries

Topic	Subject Line
Privacy questions	“Privacy”
Data requests	“Data Request”
Accessibility issues	“Accessibility”
Legal concerns	“Legal”
Security concerns	“Security”

Terms of Service — Complete terms and conditions
Privacy Policy — How we handle your data
Data Ownership Statement — Your 100% data sovereignty
All Disclaimers — Medical, legal, financial, AI disclaimers
Community Guidelines — Community standards
Accessibility — Our accessibility features and compliance
Privacy Controls — Manage your privacy settings

Review Schedule: Quarterly or upon legal changes
Last Review: December 14, 2025
Next Review: March 2026