Privacy Policy

• Parent or guardian email address — used to prevent duplicate profiles and to link the results to your family.
• Location — the city and country you enter, used for aggregated, non-identifying statistics.
• Child's given name — recorded on the parental consent statement and used by the child to open their calendar. A first name only; we never ask for a surname, birth date, address or photo of the child.
• Child's password — chosen by the parent, stored only as a salted PBKDF2 hash and never in readable form.
• Initial profile — the picture choices, the time taken per choice and the resulting Explorer / Thinker / Performer scores.
• Daily check-ins — for each day: the picture pairs shown, the choices made, the time per choice, a consistency score and the total and average response time.

Before the test starts, the adult confirms that they are the parent or legal guardian of the named child and agree to that child taking the test. We record the date and time of that consent. Without it, no data is collected.

The parent email, location, child's given name, picture choices and timings are encrypted at rest with AES-256-GCM. Encryption keys are held server-side only. The email and the child's given name are also stored as keyed one-way hashes so we can check for duplicates and sign a child in without reading the plain values.

The database is closed to public keys: results can be read only by our trusted server-side code, either through the private result link or through the child sign-in.

A child can sign in with their given name and the password their parent chose. This gives read-only access to their Mind & Mood calendar and their profile type. It never reveals the parent's email, the location, or the private results link, and it cannot be used to change or delete anything.

• We do not sell or rent personal data.
• We do not run advertising or third-party tracking on children.
• We do not ask children for any personal information beyond a first name.

Data is kept for as long as the family uses the diary. A parent or guardian can ask for a copy of their data or for it to be deleted permanently by emailing fred@aquaduq.com. We action deletion requests within 30 days, and deletion removes the initial profile and every daily check-in.

Depending on where you live, you may have the right to access, correct, export or erase the data, to withdraw consent at any time, and to complain to your data protection authority. Withdrawing consent stops all further collection.

Questions about this policy: fred@aquaduq.com