Privacy
V1 follows data minimization. Families can browse and use Discovery and Advisor without an account; the invite-only Operator workspace requires an authorized account. The site does not provide payment or booking.
Families and Advisor
Advisor processes family-provided constraints and preferences in the current session to produce explainable Program directions. Child profiles and family preferences are not written to the operational database or attached to Operator accounts; browser-session or explicitly chosen device storage remains on that device. Do not enter names, dates of birth, schools, diagnoses, precise addresses or contact details.
Invite-only Operator accounts
The Operator pilot is limited to invited members. For authentication, organization authorization and accountability, the system stores the login email, organization membership, organization and platform roles, and necessary audit records that exclude document bodies and private evidence contents. Account data does not enter public Program pages, Advisor, search or machine exports.
Search and Ask
Search terms and questions are used to return results. V1 does not persist question history in the application database; basic server logs may still be handled by hosting infrastructure under its retention policies. Do not submit names, health details or other sensitive information.
Field Notes
Child and family material is anonymized by default. Private notes are excluded from public pages, search indexes, sitemaps and machine exports.
Analytics
No third-party analytics is enabled in V1. Any future adapter must avoid sensitive personal information and receive a separate privacy review.
Updated: 26 August 2026