This Privacy Policy explains how DP4 Autism AI, Inc. (“DP4,” “we,” “us,” or “our”) collects, uses, stores, and shares information when you access or use the DP4 website, application, beta experience, or related services (collectively, the “Services”).
This policy applies to users of the DP4 Services, including parents, guardians, caregivers, providers, therapists, educators, and other authorized adults who create, manage, or access DP4 accounts.
DP4 is intended for adult-controlled use. Children do not create independent accounts directly through DP4.
We collect information necessary to provide, protect, personalize, and improve the Services. This may include:
We use information to:
We do not sell personal information.
We share information only as reasonably necessary to operate the Services, protect users, comply with law, and support our business. We may share limited information with:
We do not sell personal information, and we do not permit third parties to use personal information from DP4 for their own unrelated advertising or marketing purposes.
We use third-party service providers to help us operate the Services. This may include providers for application hosting, database hosting, authentication, infrastructure, monitoring, email, payment processing, and technical operations.
DP4 uses Vercel and Supabase as part of our technical infrastructure. We have configured our infrastructure and vendor relationships to support HIPAA-aligned safeguards where applicable, including the use of HIPAA-eligible services and Business Associate Agreements (“BAAs”) where appropriate.
These providers process information on our behalf only as needed to provide services to us and are required to handle information subject to appropriate contractual, confidentiality, privacy, and security obligations.
DP4 is designed to support families, caregivers, therapists, providers, and organizations that may work with sensitive developmental, behavioral, educational, or healthcare-related information.
When DP4 is used by or on behalf of a Covered Entity or Business Associate under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), and when DP4 is acting as a Business Associate, we handle Protected Health Information (“PHI”) in accordance with applicable HIPAA requirements and our contractual obligations.
Our infrastructure and security practices are designed to support HIPAA safeguards where applicable, including encryption, access controls, audit logging, secure authentication, vendor controls, and secure cloud infrastructure.
DP4 uses artificial intelligence to generate personalized social stories, visual supports, and related content based on information provided by authorized users.
We do not sell child data. We do not use child personal information or Protected Health Information to train public foundation AI models.
Information entered into DP4 is used to provide and improve the DP4 Services, maintain safety and reliability, troubleshoot technical issues, and support the user experience.
We keep information for as long as reasonably necessary to provide the Services, maintain security, resolve disputes, comply with legal obligations, and support legitimate business, operational, and compliance needs.
We take the security of your information seriously and use administrative, technical, and organizational safeguards designed to protect personal information and, where applicable, Protected Health Information.
Our security measures may include:
No system is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and notifying us promptly of any suspected unauthorized access.
DP4 is designed for parent-, guardian-, provider-, or authorized adult-controlled use. Children do not create accounts directly through DP4.
Parents, guardians, providers, or authorized adults may choose to provide information about a child in order to personalize the experience. This may include developmental goals, therapy-related preferences, behavioral information, communication preferences, sensory needs, interests, diagnoses provided by the user, and other information necessary to generate personalized content.
We do not knowingly collect personal information directly from children through independent child accounts. If you believe information about a child has been submitted without appropriate authorization, please contact us and we will review and take appropriate action.
Parents or guardians may request access to, correction of, or deletion of information they have provided, subject to applicable law, verification procedures, contractual obligations, security needs, and legal retention requirements.
Depending on where you live, you may have rights to request access to, correction of, deletion of, or information about personal data we hold about you. You may also have the right to withdraw consent where processing is based on consent.
To make a privacy-related request, contact us using the information below. We may need to verify your identity before fulfilling your request.
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. If we make material changes, we may provide additional notice where appropriate.
If you have questions about this Privacy Policy or would like to make a privacy request, contact:
DP4 Autism AI, Inc.
Email: hello@dp4autism.ai
