Privacy Policy

1. Introduction

Digital Detox Engine ("DDE," "we," "us," or "our") is committed to protecting the privacy of our users, especially minors. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at digitaldetoxengine.com and any associated services.

2. COPPA Compliance

We comply with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13 without verifiable parental consent. Teen users (ages 13–17) may use our platform with parental awareness and consent through our family linking system.

3. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, role (teen/parent), and age range during registration.
• Assessment Data: Responses to the Dopamine Audit and daily check-ins, used to personalize your experience.
• Usage Data: Interaction with features such as the AI Coach, education modules, and reset plans.
• Payment Data: Processed securely through Stripe. We do not store credit card numbers on our servers.

4. How We Use Your Information

• To provide and personalize the Digital Detox Engine experience
• To generate AI coaching responses tailored to your needs
• To create personalized Digital Reset Plans
• To track progress, streaks, and badge achievements
• To send transactional emails (verification, weekly reports)
• To detect crisis situations and surface appropriate resources (988 Lifeline)
• To provide parents with aggregated progress insights (not surveillance data)

5. Data Sharing

We do not sell, rent, or trade your personal information. We share data only with:

• Supabase: Our database and authentication provider.
• Stripe: For secure payment processing.
• Resend: For transactional email delivery.
• AI Providers: Anonymized conversation data sent to LLM providers for coaching responses. No personally identifiable information is included in AI prompts.

6. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS), Row Level Security (RLS) on all database tables, encrypted API keys, and secure authentication via Supabase Auth. LLM API keys are encrypted at rest using AES-256.

7. Parent & Teen Data

Parents can view aggregated progress data for linked teen accounts. Parents cannot read individual AI coaching conversations or daily journal entries. This design respects teen privacy while keeping parents informed about overall progress.

8. Data Retention & Deletion

You may request deletion of your account and associated data at any time by contacting support@digitaldetoxengine.com. Upon account deletion, we remove all personal data within 30 days, except where retention is required by law.

9. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. No third-party analytics trackers are embedded on our platform.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:
support@digitaldetoxengine.com