Privacy Policy

Neuronest Explore ("we," "us," or "our") is committed to protecting the privacy of children with ADHD and autism who use our platform, and the parents, carers, therapists, and educators who support them. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application.

We comply with applicable privacy laws including the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), the EU General Data Protection Regulation (GDPR), the UK GDPR, the US Children's Online Privacy Protection Act (COPPA), and the California Consumer Privacy Act (CCPA).

By using Neuronest Explore, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our services.

For users in the European Economic Area (EEA) and UK, we process personal data under the following lawful bases:

• •Contractual Necessity: To provide the services you signed up for
• •Legitimate Interests: To improve our platform, detect fraud, and ensure security
• •Legal Obligation: To comply with applicable laws
• •Consent: For optional features such as marketing communications (you may withdraw consent at any time)
• •Vital Interests: To protect the safety of children using our platform

• •Service Delivery: Provide personalised learning experiences and adaptive content tailored to each child
• •Progress Tracking: Generate insights and reports for parents, therapists, and educators
• •AI Features: Generate personalised stories, activity suggestions, and learning recommendations (anonymised where possible)
• •Communication: Send important service updates, account notices, and (with consent) product news
• •Safety & Security: Enforce parental controls, detect misuse, and protect children's wellbeing
• •Platform Improvement: Analyse anonymised usage patterns to enhance features and fix issues
• •Legal Compliance: Meet our obligations under applicable laws

We DO NOT sell, rent, or trade your child's personal information to third parties — ever.

Neuronest Explore is designed for children and requires verifiable parental consent before any child data is collected. We comply fully with the US Children's Online Privacy Protection Act (COPPA):

• •We collect only the minimum information necessary for educational and therapeutic purposes
• •We require a parent or guardian to create the account and consent on behalf of the child
• •We do not require children to disclose more personal information than is reasonably necessary
• •We do not display targeted advertising to children
• •We do not allow children to make their profiles public
• •Parents can review, correct, or delete their child's data at any time
• •Parents can refuse further data collection by deleting the account (Settings → Danger Zone)
• •We will not condition a child's participation on providing more information than necessary

For Australian users, we comply with the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs):

• •APP 1: We are open and transparent about how we manage personal information (this policy)
• •APP 3: We only collect personal information that is reasonably necessary for our functions
• •APP 5: We notify individuals about the collection of their personal information
• •APP 6: We only use or disclose personal information for the primary purpose of collection, or with consent
• •APP 11: We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access
• •APP 12: Individuals may request access to their personal information by contacting us
• •APP 13: We will correct personal information that is inaccurate, out-of-date, or incomplete upon request
• •To make a privacy complaint, contact us at privacy@neuronest.com. We will respond within 30 days. Unresolved complaints may be referred to the Office of the Australian Information Commissioner (OAIC).

Depending on your location, you may have the following rights regarding your personal data:

Parents and guardians have full control over their child's data:

• •Access: View all data collected about your child via the Parent Dashboard
• •Update: Modify profile information, preferences, and communication settings at any time
• •Delete: Request complete account and data deletion via Settings → Danger Zone (processed within 30 days)
• •Export: Download progress reports and data summaries
• •Parental Controls: Set daily screen time limits, restrict specific features, configure content filters
• •Withdraw Consent: Stop data collection by deleting the account — this will not affect data already lawfully collected
• •To exercise any right, contact us at privacy@neuronest.com

We implement industry-standard technical and organisational security measures:

• •SSL/TLS encryption for all data in transit
• •AES-256 encrypted database storage at rest
• •Regular security audits and vulnerability assessments
• •Strict access controls — staff access is role-based and logged
• •Secure payment processing via Stripe (PCI-DSS Level 1 compliant)
• •Incident response plan — in the event of a data breach, we will notify affected users and relevant authorities within 72 hours as required by GDPR and applicable law
• •We cannot guarantee 100% security of data transmitted over the internet, but we take all reasonable precautions

• •Active Accounts: Personal data is retained while your account remains active
• •Deleted Accounts: All personal data is permanently and securely deleted within 30 days of account deletion
• •Backup Systems: Encrypted backups are purged within 90 days of account deletion
• •Anonymised Analytics: Aggregated, non-identifiable analytics data may be retained indefinitely for research and platform improvement
• •Legal Hold: In some cases, we may be required by law to retain certain data for longer periods

We use the following types of cookies:

• •Essential Cookies: Required for authentication, session management, and security. Cannot be disabled.
• •Preference Cookies: Remember your settings and preferences (e.g. language, sensory settings).
• •Analytics Cookies: Google Analytics — anonymised usage data. No personally identifiable information is collected.

You can manage or disable non-essential cookies through your browser settings. Disabling essential cookies may affect your ability to use the platform.

Neuronest Explore is operated from Australia. Your data may be processed and stored in Australia and the United States (via Supabase and other service providers).

For EEA/UK users: Transfers outside the EEA/UK are made under appropriate safeguards including Standard Contractual Clauses (SCCs) or adequacy decisions where applicable.

By using Neuronest Explore, you acknowledge that your data may be transferred to and processed in countries with different data protection laws than your own.

We may update this Privacy Policy from time to time. When we make material changes, we will:

• •Update the "Last Updated" date at the top of this policy
• •Notify you by email (if you have provided one) at least 14 days before changes take effect
• •Display a prominent notice in the app

Continued use of Neuronest Explore after the effective date of changes constitutes acceptance of the updated policy.