Privacy
Version 0.3 (draft) · Last updated 31 October 2026
Draft — pending legal review — wording marked for the owner's lawyer to review before real-client use.
This standalone portal stores account emails, professional profiles, practice membership and scope permissions, practice-specific client intake details, goals, session records, observations, reports, protected files and audit events. It has separate accounts and data from the AttentiveKids family app and any schools platform; no shared child identity mapping is used.
Verified guardians see only permitted, explicitly shared items with live purpose-based consent. Messages are restricted to a verified guardian and assigned professional and are reviewed by that professional. Withdrawing consent stops future access; historical professional records remain subject to practice retention rules.
The child player uses a short-lived single-assignment token, without a child account, email, chat or AI. AI Copilot is professional-only, uses de-identified minimum context with consent, and stores drafts until an accountable professional approves them.
Contact requests store your name, email, organization and message for a response. Reminder preferences store days, local time, time zone and delivery choices. Email delivery is disabled until configured; messages sent by email omit client details. Account sessions and language preferences use local browser storage.
Client export and deletion requests are routed through practice admins and audited. Existing deletion processing removes access and de-identifies the intake record; it is not a promise that every historical record or backup has been erased. Retention, hosting locations, subprocessors, international transfers, contact responsibility and applicable rights require legal review before real-client use.
Access requests store your name, work email, role, organisation, country, optional message and the time you gave consent, so a platform administrator can approve or decline them.
Owner decisions pending legal review: applicable privacy laws and any sector-specific agreements in each market, local representatives, hosting locations, subprocessors and international transfers. No compliance status is claimed.
Privacy questions: write to the operator at the address below.