Privacy Policy

1. Who We Are

BrytThrive is a family screen-time and mission platform designed to help parents and children build healthier digital habits together. Our registered office is located in Canada. All personal data is stored and processed in Canada unless otherwise disclosed in this policy.

2. Information We Collect

We collect only what is necessary to provide and improve the BrytThrive service:

• Account information: Parent email address and password (hashed) used to create and authenticate your account.
• Child profiles: First name, age range, and optional PIN set by the parent. We do not collect a child’s email address or any government-issued identifier.
• Mission and activity data: Missions assigned, completion status, BrytCoins earned, mood check-ins, and streak information.
• Usage data: Pages visited, features used, and session timing, collected to improve the product and diagnose issues.
• Device information: Browser type, operating system, and approximate time zone, collected automatically when you access the service.

We do not collect payment card details directly — payments are handled by our third-party payment processor, which maintains its own PCI-DSS compliance.

3. How We Use Your Information

• To create and manage your family account and child profiles.
• To generate personalised daily mission packs based on each child’s mood, goals, and activity history.
• To track progress, award BrytCoins, and maintain streaks.
• To send transactional emails (account verification, password reset). We will only send marketing emails if you opt in.
• To analyse aggregate, anonymised usage patterns and improve the platform.
• To comply with legal obligations and enforce our Terms of Service.

4. Children’s Privacy

BrytThrive takes children’s privacy seriously and complies with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws, as well as the Children’s Online Privacy Protection Act (COPPA) where applicable.

• Child profiles are created and controlled exclusively by the parent or legal guardian.
• We do not require children to provide any personal contact information.
• We do not display advertising to children.
• We do not sell, share, or disclose children’s personal data to third parties for marketing purposes.
• Parents may review, modify, or delete their child’s profile at any time from the parent dashboard.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data only in the following limited circumstances:

• Service providers: Trusted third-party vendors (e.g., cloud hosting, email delivery, analytics) who process data on our behalf under strict data processing agreements.
• Legal requirements: If required by law, court order, or governmental authority.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to the same privacy protections.
• Safety: To protect the rights, property, or safety of BrytThrive, our users, or the public.

6. Data Storage and Residency

All personal data is stored on servers located in Canada. We use Supabase (with Canadian data residency configured) as our primary database and authentication provider. Backups and disaster-recovery copies remain within Canadian jurisdiction. If your data must ever be transferred outside Canada, we will notify you and ensure appropriate safeguards are in place.

7. Data Retention

We retain your account data for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes. Aggregated, non-identifiable analytics data may be retained indefinitely.

8. Security

We implement industry-standard technical and organisational measures to protect your data, including TLS encryption in transit, bcrypt-hashed passwords, row-level security policies on our database, and regular security reviews. No method of transmission or storage is 100% secure; however, we are committed to maintaining appropriate safeguards.

9. Your Rights

Under PIPEDA and applicable provincial privacy laws, you have the right to:

• Access the personal information we hold about you or your child.
• Correct inaccurate or incomplete information.
• Request deletion of your account and associated data.
• Withdraw consent for non-essential data processing at any time.
• Lodge a complaint with the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, please contact us at privacy@brytthrive.com. We will respond within 30 days.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page and, for material changes, notify you by email or in-app notification. Your continued use of BrytThrive after the effective date of any changes constitutes your acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact: