Children's Privacy & Consent

• No child sign-up, child login, or child-facing content.
• No advertising, ad targeting, behavioral profiling, or third-party trackers in the application.
• Student data is never sold or used for any purpose other than delivering the service to the organization.

Every student record carries a consent state: whether guardian consent has been obtained, who recorded it, the date it was obtained, and the method (written, electronic, or school-authorized). Staff are warned when they open or add data to a student without consent on file, and administrators can see every student missing consent from the organization settings screen.

A guardian may withdraw consent at any time by contacting the organization. When consent is withdrawn, the organization can archive and export the record and request deletion.

Where a school or district acts as the educational authority for a student's program, the organization can mark consent as school-authorized and record the authorizing role. The organization remains responsible for confirming it has the authority to enter that student's data and for meeting its own notice obligations to families.

Students can be represented by initials only. Full name, date of birth, and diagnosis are optional fields, and administrators can enable minimal-PHI mode to hide them entirely across the organization. Session data is limited to what a behavior program requires: goals, trials, prompt levels, behavior counts, durations, and notes.

Guardians should contact the clinic or school that serves their child. That organization can produce an export of the record, correct it, or request deletion. Contact routes for organizations are on the security and compliance page.