Privacy Policy

1. Introduction

PoweredADHD ("we," "us," or "our") operates the PoweredADHD platform, providing educational courses and productivity tools designed for people with ADHD. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

We are committed to protecting your privacy. We collect only the minimum data necessary to provide our services and never sell your personal information.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

Email address - Used for account identification and login
Password - Stored securely using bcrypt hashing (we never store plaintext passwords)
Display name - Optional, used for personalization

2.2 Course Progress Data

When you use our courses, we track:

Which lessons you have completed
Your scroll position within lessons (for resume functionality)
Checklist completion states
Notes you create on premium course exercises

2.3 Tool Usage Data

Our productivity tools store data you create:

Energy Tracker: Energy levels, time periods, and optional context notes
Daily Framework: Your morning, afternoon, and evening task structures
Doable (Premium): Tasks, descriptions, notes, steps, and completion status
Reader tools: Documents you paste or upload, highlights, and takeaways
Timer tools: Session history and duration data

2.4 AI Feature Data

Some premium features use AI processing:

Smart Digest: Text you submit is sent to OpenAI for transformation into ADHD-friendly formats
Doable Task Decomposition: Task descriptions are sent to OpenAI to generate actionable steps
Doable Title Generation: Task descriptions are sent to OpenAI to suggest concise titles

Important: We do not store your text content on OpenAI's servers beyond their standard API processing. OpenAI retains API data for up to 30 days for abuse monitoring purposes only. OpenAI does not use API data to train their models. See OpenAI's API Data Usage Policy for details.

3. How We Use Your Information

We use collected information to:

Provide, operate, and maintain our services
Save your course progress so you can resume where you left off
Sync your tool data across devices when logged in
Process AI-powered features (text transformation, task decomposition)
Manage your account and subscription status
Send account-related emails (password reset, subscription updates)
Respond to your support inquiries

4. Third-Party Services

We use the following third-party services to operate PoweredADHD:

4.1 OpenAI (AI Processing)

We use OpenAI's API (specifically the gpt-4o-mini model) to power our AI features. When you use Smart Digest or Doable's decomposition features, your text is sent to OpenAI for processing. OpenAI processes this data according to their API data usage policies and does not use it for model training.

4.2 Stripe (Payment Processing) - Coming Soon

When payment processing is enabled, we will use Stripe to handle subscriptions. Stripe will collect and process your payment information directly. We do not store your credit card numbers on our servers. We only store a Stripe customer identifier to manage your subscription.

4.3 Hosting Infrastructure

Our application is hosted on secure cloud infrastructure. Server logs may temporarily contain IP addresses and request information for security and debugging purposes. These logs are automatically rotated and deleted.

5. Cookies and Session Data

We use only essential cookies required for the site to function:

Session Cookie: A secure, HTTP-only JWT token that keeps you logged in. This cookie expires after 30 days of inactivity.

What we do NOT use: We do not use advertising cookies, tracking pixels, or third-party analytics services like Google Analytics. We do not track you across other websites.

6. Data Storage and Security

We implement appropriate security measures to protect your data:

Passwords are hashed using bcrypt before storage
All data transmission uses HTTPS encryption
Session tokens are signed and verified server-side
Database access is restricted and authenticated

While we implement industry-standard security practices, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your information to the best of our ability.

7. Data Retention

We retain your data as follows:

Account data: Retained while your account is active
Course progress: Retained while your account is active
Tool data: Retained while your account is active
AI processing: We do not retain text sent to OpenAI; OpenAI retains API data for up to 30 days
Deleted accounts: All data is permanently deleted when you delete your account

8. Your Rights

You have the following rights regarding your data:

Access: You can view your account information in your Settings page
Correction: You can update your profile information at any time
Deletion: You can delete your account, which permanently removes all your data
Export: You can request a copy of your data by contacting us

To exercise any of these rights, visit your account Settings or contact us using the information below.

9. Children's Privacy

PoweredADHD is intended for users who are 18 years of age or older. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately so we can delete that information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Effective Date" at the top of this page. We encourage you to review this policy periodically. Your continued use of PoweredADHD after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us: