Privacy Policy
Last updated: August 31, 2026
What we collect
Account information: your email address and name.
Information you enter about your child: name, date of birth, behavioral log entries, IEP documents and goals, insurance claim details, provider contact information, and emergency profile information (medical conditions, medications, allergies, and emergency contacts) — only what you choose to enter.
Files you upload: IEP documents, insurance-related documents, and any other files you attach to a record.
Payment information: handled entirely by Stripe. We never see or store your card number — we only receive your subscription status and billing dates from Stripe.
Usage information: basic technical logs (like sign-in times) used for security and troubleshooting.
How we use it
We use your information solely to provide the service to you: storing your records, generating the pattern observations and PDF exports you request, sending you the emails you'd expect (trial reminders, appeal-deadline reminders you've turned on, account confirmations), and keeping the service secure.
We do not sell your data. We do not use your or your child's information to train AI models. We do not share your data with third parties except the service providers below, who process it only on our behalf.
Who we share it with
- Supabase — hosts our database, authentication, and file storage
- Stripe — processes payments
- Resend — sends transactional emails
- Vercel — hosts the application
Each of these providers only processes data on our instructions and under their own data protection agreements.
Where your data is stored
Your data is stored on servers located in [REGION — confirm this matches your actual Supabase project region, e.g. "the United States (Virginia)"].
Children's privacy
Autism Anchor is a tool for parents and legal guardians. It is not directed at children, and children do not create their own accounts or interact with the service directly — all information is entered by the parent or guardian about their child.
Your rights
You can access, export, and delete all of your data at any time from your account settings, described in the Terms of Service above.
Security
We use industry-standard security practices, including encryption in transit, database-level access controls that ensure your data is only ever visible to you, and restricted access to production systems.
Changes to this policy
We'll notify you by email of material changes to this policy before they take effect.
Contact
Questions about this policy or your data: hello@autismanchor.com