Privacy Policy

1. Information We Collect

We collect information reasonably necessary to provide, secure, and improve the service. This can include your email address, authentication-provider information, account identifiers, saved plans, generated content, edited content, plan inputs, free-tier or lesson-usage counts, subscription status, and limited operational records.

If you use guest-mode features without signing in, some content may be stored locally in your browser or on your device instead of in our hosted database.

2. How We Use Information

We use information to authenticate users, generate plans, save and retrieve content, process subscriptions, enforce free-tier and anti-abuse rules, provide support, investigate misuse, protect the service, and comply with legal obligations.

We do not sell personal information. We do not share personal information with third-party advertisers or data brokers for targeted advertising.

3. Service Providers and AI Providers

We use Google Firebase and related Google Cloud services to authenticate users, store plans, host the site, and run backend functions. We use Stripe to process paid subscriptions and billing events. We use Google's Gemini Developer API to help generate certain AI-assisted planning outputs.

We are not currently using third-party advertising pixels such as Meta Pixel, nor are we using third-party behavioral analytics tools such as Google Analytics, Mixpanel, or similar ad-tracking scripts in the live app.

4. Cookies, Local Storage, and Device Data

We use only the technical storage reasonably necessary for the app to function, such as browser storage for guest plans, terms acceptance, and app behavior. We do not currently use ad cookies or cross-site tracking pixels in the live product.

5. Data Retention and Deletion

Signed-in saved plans and profile information remain in our hosted Firebase environment until you delete them, delete your account, or we no longer need them for the purposes described in this Policy. Guest-mode plans remain in browser storage until you clear them or delete them from the device.

Operational AI output logs in the generated_plans collection are now covered by an active Firestore TTL policy and are configured for automatic deletion based on the ttl field, which our system currently sets for 90 days. Blocked-prompt review records in the blocked_prompts collection are also covered by an active Firestore TTL policy and are configured for automatic deletion based on the ttl field, which our system currently sets for 30 days.

You can request immediate self-service deletion of your account from the Account page by selecting Delete My Account. That workflow is designed to remove your Firebase Authentication account, saved plans, profile, usage record, and rate-limit record. If the account has an active paid Stripe subscription, the app attempts to cancel that billing before completing deletion. Certain billing, accounting, dispute, fraud-prevention, or legal recordkeeping data may still be retained where required or reasonably necessary.

Firestore TTL-based deletion is asynchronous. Even after a document has passed its expiration time, actual removal can take additional time as Google processes background cleanup.

6. Children's Privacy

The Behave-iator is designed for adults, including educators, administrators, and specialists. We do not knowingly collect information directly from children through user accounts.

7. Your Rights and Choices

You can review subscription status and billing-management links from the Account page. You can delete saved plans from the app interface. You can also use the Delete My Account control on the Account page to request full account deletion. Before using that control, you may want to copy your user ID from the Account page for support or verification purposes.

If account deletion succeeds, the app is designed to remove the Firebase Authentication user, the top-level users/{uid} document, the user's saved plans, profile, usage record, and the matching rate_limits/{uid} record. If the account has active paid billing, the app attempts to cancel that Stripe subscription before account deletion completes.

If you need help with deletion, privacy questions, or data-handling concerns, you can contact us directly instead of using the in-app workflow.

8. Contact

Questions about privacy, data handling, or deletion requests can be sent to jggorman91@gmail.com.