1. Roles and responsibilities
The organization determines the purpose of processing school or care records and its staff access. Feel Journey operates and protects the platform under the configured service. Independent family accounts remain separate unless an explicit link and consent are created.
2. Data categories
- Account, organization, role, and audit information.
- Basic child and class details, plus parent contact details when provided.
- Responses, scores, signals, notes, support plans, and consents.
- Limited technical logs for security, reliability, and abuse prevention.
3. Purposes of use
Data is used to operate journeys, present reports, enable authorized follow-up and communication, secure accounts, and improve service reliability. We do not sell children’s data or use it for behavioral advertising.
4. AI and service providers
Only the minimum practical content is sent to an enabled provider when generation or analysis is requested. Direct identifiers are excluded where possible, and outputs remain drafts requiring human review. Hosting, email, storage, and payment providers may process limited data under contracts and access controls.
5. Isolation, security, and retention
Organization records are logically isolated and role-restricted; secrets are encrypted and sensitive actions audited. Each organization sets a retention period, after which data is deleted or de-identified subject to its obligations and backup lifecycle.
6. Individual rights and requests
Access, correction, export, restriction, or deletion may be requested through the responsible organization or Feel Journey support. Identity and authority may be verified, and limited records may be retained where law or safety obligations require it.
7. Incidents and contact
We investigate security incidents, contain their impact, and notify affected organizations or authorities where required. Submit privacy questions through the platform’s approved support channel.