Privacy Policy

Last Updated: December 22, 2024

Hidden Way is built on a privacy-first, child-respecting architecture.
We collect the minimum data required to function and never sell personal data.

1. What Data We Collect

A. Personal Data (Encrypted & Controlled)

Names of parents and children
Email addresses (parents only)
Ages of children
Family relationships
Teacher-student class assignments (school mode)

B. Journey Data (Anonymous by Design)

Question responses (no "right" or "wrong" answers)
Trait vectors and archetype results
Coherence and pattern scores
Journey completion timestamps

C. Aggregated Data (Fully Anonymous)

Class-level archetype distributions
School-level learning patterns
Regional statistics (k-anonymized, minimum 15 students)

2. How Data Is Stored

Encryption at rest: All personal data is encrypted in storage
TLS in transit: All data transfers use secure HTTPS connections
Role-based access: Only authorized users can access relevant data
Audit logging: All access to individual data is logged

Platform administrators cannot see names or identities. They can only access anonymized aggregate statistics.

3. Who Can See What

Role	Can See
Parent	Their own children only
Teacher	Their class (aggregates + individuals in their class)
Counselor	Individual students only with parental consent
School Admin	Aggregates only (no individual students)
Platform Admin	Anonymized statistics only (no names, no individuals)

4. Consent Model

Parents must approve before any escalation of access
Teachers must request access through formal channels
Escalation is opt-in, time-limited (default 30 days), and fully logged
Parents can revoke access instantly at any time

5. Children's Privacy (COPPA & FERPA Alignment)

Hidden Way is designed to comply with children's privacy laws:

No targeted advertising to children

No selling of any personal data

No third-party tracking or analytics on children

No profiling for marketing purposes

Parental consent required for all child accounts

6. Data Retention & Deletion

Parents can delete their family's data at any time
Schools can request full data purge upon pilot completion
Inactive accounts are notified after 12 months; deleted after 24 months if no response
Anonymized aggregates may be retained for research (no identifying information)

7. Your Rights

You have the right to:

Access: See all data we hold about you and your children
Correction: Update or correct any inaccurate information
Deletion: Request permanent removal of all personal data
Revocation: Withdraw consent at any time
Portability: Export your data in a standard format

8. Cookie Policy

Hidden Way uses minimal cookies:

Session cookies: Required for login and navigation (deleted when you close browser)
Preference cookies: Remember your settings (optional, you can disable)

We do not use tracking cookies, advertising cookies, or third-party analytics that follow users across sites.

9. Security & Incident Response

In the unlikely event of a data breach:

Affected users will be notified within 72 hours
We will provide clear information about what data was affected
We will take immediate steps to contain and remediate the issue
Relevant authorities will be notified as required by law

10. Contact Us

Privacy questions or data requests? Visit our About page to learn more about how we protect your data.