Privacy Policy

Calm Pathways (“Calm Pathways,” “we,” “our,” or “us”) respects your privacy and is committed to protecting the information you share with us.

This Privacy Policy explains how we collect, use, process, disclose, and safeguard information when you access or use the Calm Pathways website, mobile application, services, features, content, and related technologies (collectively, the “Service”).

By using the Service, you consent to the practices described in this Privacy Policy.

Calm Pathways is a consumer wellness, educational, and organizational platform intended for use by parents, guardians, and caregivers navigating complex neuroimmune-related experiences and wellness tracking.

The Service is not a healthcare provider, medical practice, emergency service, or clinical treatment platform.

Unless explicitly stated otherwise in a separate written agreement, Calm Pathways may not be subject to HIPAA in all circumstances.

Children do not independently create accounts or directly operate the Service.

We may collect the following categories of information:

We may automatically collect technical information, including:

• device type,
• operating system,
• browser type,
• app version,
• general geographic region,
• IP address,
• diagnostic information,
• crash reports,
• feature usage information,
• and session activity.

This information helps us:

• maintain app functionality,
• improve user experience,
• diagnose technical issues,
• and support security and operational integrity.

We may use analytics, crash reporting, and diagnostic tools to better understand:

• app performance,
• feature usage,
• reliability,
• and user interactions.

These tools may collect limited technical information necessary to support operation and improvement of the Service.

We make reasonable efforts to minimize unnecessary collection of personal information through analytics services.

Certain features within Calm Pathways may utilize artificial intelligence (“AI”) technologies.

When AI-related features are used:

• prompts, questions, and related contextual information may be transmitted to third-party AI service providers for processing;
• AI-generated outputs are automated and may not always be accurate, complete, or appropriate;
• information entered into AI features may include child-related wellness or tracking information voluntarily submitted by parents or caregivers.

We may utilize configurations designed to reduce retention or model training where available, but we cannot guarantee third-party processing practices beyond our reasonable control.

Users should avoid submitting highly sensitive identifying information through AI features unless necessary for their intended use of the Service.

We may use collected information to:

• provide and maintain the Service;
• process subscriptions and payments;
• generate organizational summaries, trends, and correlations;
• improve app functionality and user experience;
• provide customer support;
• communicate account or service-related information;
• send optional educational or marketing communications where permitted;
• detect fraud, abuse, or security concerns;
• comply with legal obligations;
• and improve system performance and safety.

We do not sell personal or child-related information to advertisers or data brokers.

We may create and use de-identified, anonymized, or aggregated information for:

• analytics,
• research,
• service improvement,
• product development,
• system monitoring,
• statistical analysis,
• and operational optimization.

Such information is designed not to reasonably identify individual users or children.

If the Service includes community forums, discussions, or peer-support features:

• information voluntarily shared by users may be visible to other users;
• users are responsible for the content they choose to share publicly;
• we encourage users not to post highly sensitive or identifying child-related information publicly.

Community content is user-generated and may not be reviewed for medical accuracy.

We are not responsible for how other users may use, interpret, or share publicly disclosed information.

Subscription payments may be processed through third-party payment processors.

We do not store full payment card information on our systems.

Payment processors may collect and process billing information according to their own privacy policies and security practices.

We may use trusted third-party service providers, including:

• cloud hosting providers,
• payment processors,
• AI service providers,
• analytics providers,
• customer support platforms,
• weather or environmental data providers,
• app store platforms,
• and infrastructure providers.

These providers may process information on our behalf solely to support operation of the Service.

We make reasonable efforts to work with reputable vendors that maintain commercially reasonable security and privacy practices.

However, we cannot guarantee the practices, security, availability, or performance of third-party services.

At this time, Calm Pathways does not use collected iOS user data for cross-app advertising tracking purposes.

We currently utilize essential technologies for:

• authentication,
• session maintenance,
• subscription verification,
• app functionality,
• and user preferences.

Practices may evolve as features develop, and users will be notified of material changes through updates to this Privacy Policy.

We implement commercially reasonable administrative, technical, and organizational safeguards designed to help protect information, including:

• encryption in transit using TLS/SSL,
• secure authentication practices,
• password hashing,
• access controls,
• security monitoring,
• software updates,
• and secure cloud infrastructure practices.

However, no method of internet transmission, electronic storage, or security system can be guaranteed completely secure.

Accordingly, we cannot guarantee absolute security of information.

We retain information for as long as reasonably necessary to:

• provide the Service,
• maintain operational functionality,
• comply with legal obligations,
• resolve disputes,
• enforce agreements,
• prevent fraud or abuse,
• and maintain system integrity.

Certain information may remain in backups, logs, archives, or security systems for a commercially reasonable period following deletion requests.

Users may:

• access information associated with their account;
• export certain data;
• request correction of inaccurate information;
• or request account deletion.

Upon verified deletion requests, we will delete or de-identify personal information within a commercially reasonable timeframe, except where retention is necessary for:

• legal obligations,
• fraud prevention,
• security purposes,
• operational backups,
• or enforcement of agreements.

To request account deletion or privacy-related assistance, contact:

Calm Pathways is intended for use by parents, guardians, and caregivers only.

Children under 18 should not independently create accounts or directly use the Service.

Parents and caregivers may voluntarily enter child-related wellness or tracking information into the Service.

We do not knowingly collect personal information directly from children through independent child accounts.

If we become aware that a child has independently submitted information in violation of this Policy, we may remove such information and terminate associated accounts.

The Service is operated primarily within the United States.

By using the Service, you understand and agree that information may be transferred to, processed, and stored in the United States or other jurisdictions where our service providers operate.

Privacy laws in these jurisdictions may differ from those in your country of residence.

Depending on your jurisdiction, you may have rights to:

• access personal information;
• correct inaccurate information;
• request deletion;
• request data portability;
• withdraw consent where applicable;
• and opt out of certain communications.

We may require verification of identity before processing certain requests.

You may opt out of promotional or marketing communications at any time using unsubscribe links or by contacting us directly.

We may still send non-promotional communications related to:

• account management,
• billing,
• security,
• legal notices,
• and service functionality.

In the event of a security incident involving personal information, we may notify affected users electronically, through the Service, by email, or by other methods as required by applicable law.

We may update this Privacy Policy periodically.

Material changes may be communicated through:

• app notifications,
• email communications,
• website notices,
• or updated posting dates.

Continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.

If you have questions regarding this Privacy Policy or our privacy practices, please contact: