Legal
Privacy Policy
Last updated: May 23, 2026
1. Information We Collect
Account Information: When you create an account, we collect your email address, full name, and role (parent, caregiver, educator, researcher, or adult self-tracker).
Household Information: We store household identifiers to link authorized users and supported profiles within the same account or household.
Profile Information: For each child, dependent, adult self-tracker, or supported individual you add, we may store nickname, birth date or age band, diagnosis or support status if provided, communication profile, sensory profile, dietary notes, education or care setting, and support services.
Behavioral Observations: We store observations you submit about yourself or a supported individual, including raw text, environment context, voice notes if provided, AI-generated tags, summaries, and account-local pattern information.
Follow-up Responses: When you answer AI-generated follow-up questions, those responses are stored as part of your observation record.
Consent Records: We maintain a ledger of your consent choices, including research data use, anonymized sharing, report generation, voice storage, and platform analytics.
Technical Data: We automatically collect browser type, IP address, device information, and usage patterns to improve platform functionality.
2. How We Use Your Information
Platform Functionality: To provide observation logging, AI analysis, pattern detection, and report generation.
Research Contribution: If you consent to research data use, your anonymized observations contribute to behavioral intelligence insights that inform researchers, clinicians, and institutions.
Personalized Insights: We use your observation history to generate personalized weekly summaries, behavioral pattern visualizations, and environment frequency analysis.
Communication: To send you platform updates, weekly summaries (if enabled), and respond to support requests.
Legal Compliance: To comply with applicable laws and regulations.
3. Data Sharing and Disclosure
Anonymized Research Data: If you opt in to research data use (privacy level: "research_eligible"), your observations may be included in aggregated, anonymized datasets shared with researchers, institutions, and partners. All personally identifiable information is removed before sharing.
Service Providers: We share data with third-party service providers who assist in platform operations (e.g., cloud hosting, email delivery, payment processing). These providers are contractually obligated to protect your data.
Legal Requirements: We may disclose information if required by law or in response to valid legal requests (subpoenas, court orders, government requests).
Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction. Users will be notified via email and/or prominent platform notice.
NO SALE OF DATA: We do not sell, rent, or trade your personal information to third parties for commercial purposes.
4. Your Rights and Choices
Access: You can access all your data through the platform dashboard at any time.
Correction: You can edit or update your observations, supported profiles, and account information through the platform.
Deletion: You can delete individual observations or request complete account deletion by contacting support@thedataadapter.com.
Privacy Settings: You control the privacy level of each observation (private, anonymous, or research_eligible) and can change your research consent status in Settings.
Email Preferences: You can opt out of weekly summaries and promotional emails via Settings or unsubscribe links.
Data Export: You can generate full archive exports of all your data in PDF format through the Reports page.
5. Data Security
We implement industry-standard security measures to protect your information, including:
- Encryption of data in transit (HTTPS/TLS)
- Secure authentication and session management
- Regular security audits and vulnerability assessments
- Restricted employee access to personal data
- Secure cloud infrastructure with access controls
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
6. Data Retention
We retain your data for as long as your account is active or as needed to provide platform services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.
Anonymized data (stripped of all personally identifiable information) may be retained indefinitely for research and statistical purposes.
7. Children's Privacy
Our platform is designed for adults, parents, guardians, caregivers, educators, and authorized professionals to document observations about themselves or individuals they are legally or ethically permitted to support. We do not knowingly collect personal information directly from children under 13.
Parents, guardians, adult self-trackers, and authorized account holders control what information is entered, stored, exported, or shared, subject to applicable law.
8. International Data Transfers
Our platform operates globally. Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses and adequacy decisions where applicable.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes via email and/or prominent platform notice at least 30 days before the changes take effect.
Your continued use of the platform after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy, our data practices, or your privacy rights, please contact us at:
support@thedataadapter.com
We will respond to privacy inquiries within 30 days.
This Privacy Policy is intended to support compliance with applicable privacy and data protection laws, including GDPR, UK GDPR, CCPA/CPRA, COPPA where applicable, and other regional requirements. It is not a substitute for jurisdiction-specific legal review. If you believe we are not meeting our obligations, please contact us immediately.