Privacy Policy

1. What Data We Collect

EMOtyze collects only the data necessary to provide our autism psychoeducation and self-assessment services. Here's exactly what we store:

Data Type	What We Collect	Why We Need It
Account	Email address, encrypted password	To let you log in and secure your account
Profile	Display name, age, gender, diagnosis status	To personalize your experience and provide context for results
Test Sessions	Test type, start/end time, scores	To track your progress over time
Test Answers	Your responses to assessment questions	To calculate scores and show detailed insights

What We Don't Collect

• Location data
• Device identifiers or fingerprints
• Browsing history outside our site
• Third-party social media data
• Sensitive health records (we only store self-reported information)

2. How We Store Your Data

Your data is stored securely using Supabase, a trusted database platform built on PostgreSQL. All connections are encrypted using TLS/SSL, and passwords are hashed using industry-standard algorithms.

We do not store any data locally in your browser beyond your login session. If you use guest mode (no login), no data is stored at all.

3. Data Retention

We keep your data only as long as necessary:

Data Type	Retention Period
Profile Information	Until you delete your account
Test Sessions & Answers	90 days after completion, then automatically deleted
Account Data	Until you delete your account

If you delete your account, all your data is permanently removed immediately. This includes your profile, all test sessions, and all answers.

4. Data Sharing

We do not share, sell, or rent your personal data to anyone. Period.

The only exceptions are:

• Legal requirements: If required by law (e.g., court order), we may be compelled to disclose data
• Service providers: Supabase (our database host) processes your data on our behalf, under strict contractual obligations

5. Your Rights

Under GDPR and similar privacy laws, you have the following rights:

• Access: View all data we hold about you (via your Profile page)
• Rectification: Update or correct your profile information
• Erasure: Delete your account and all associated data
• Portability: Export your test results (coming soon)
• Withdraw consent: Stop using the service at any time

To exercise any of these rights, visit your Profile Settings or contact us directly.

6. Cookies & Tracking

EMOtyze uses only essential session cookies to keep you logged in. We do not use:

• Third-party cookies
• Analytics tracking (Google Analytics, etc.)
• Advertising cookies or pixels
• Social media tracking widgets

7. Security

We take security seriously:

• All data is transmitted over HTTPS (encrypted)
• Passwords are hashed using industry-standard algorithms
• Database access is restricted and logged
• We use rate limiting to prevent abuse
• CSRF protection on all forms

8. Children's Privacy

EMOtyze is designed for users aged 12 and older. We do not knowingly collect personal data from children under 12. If you believe a child under 12 has provided us with personal data, please contact us so we can remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you via email or a prominent notice on our website. The "Last updated" date at the top of this page indicates when the policy was last revised.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact: