MyTeenCare Privacy Policy

Who we are

MyTeenCare is operated by NorthNeuron Technologies Private Limited, a company registered in India. We are the data fiduciary for the personal data described here. You can reach us at Contact@northneuron.com.

MyTeenCare is for young people aged 13 to 18. A parent or guardian creates the family account, gives consent, and invites their teenager. A teenager cannot create an account on their own.

What we collect

From the parent. Name, email address, phone number, city, relationship to the child, and the details entered while setting up the family, including each child’s name, date of birth and the context a parent chooses to provide.

From the teenager. Messages exchanged with the companion, journal entries and any photos attached to them, check-in selections and private notes, Homework Help questions and photos, companion preferences, and progress activity.

Generated by the service. Wellbeing signals derived from the above, recurring words and topics, parent-safe summaries, safety cases where a risk is detected, progress scores, and records of who accessed what.

Technical. Sign-in and session records, device type, and security and access logs.

The teen privacy boundary

This is the part most worth reading carefully, because it is the part most products are vague about.

Parents do not see raw teen content. Not chat messages, not journal entries, not check-in notes, not photos, not homework conversations. There is no feature that reveals them.

Parents see derived signals. Themes, recurring words and topics, engagement counts, and suggested ways to start a conversation. Those signals are also evidence-gated: a mild theme must appear at least three times across two separate days before a parent sees it, and a moderate theme at least twice.

Serious risk is the exception. Where the service detects a serious or immediate risk of harm, it raises a safety case and tells the parent that something needs attention, including a small number of reviewed phrases from the original source so the alert is grounded rather than a guess. It does not disclose the surrounding message, journal entry or note.

Restricted internal review. In a safety case, specifically authorised staff can request access to the underlying content. That requires a case reference, a stated reason, an approval, and it is written to an audit record that the person accessing it cannot remove.

The teenager is told this in the product, in their own words, at the point it matters: before they type, the chat screen says that messages stay private and that recurring words may appear in a parent’s insights.

Why we are allowed to process this

For most of the service we rely on the consent a parent gives during onboarding, on behalf of their child. A parent can withdraw that consent by closing the account.

Safety records are different, deliberately. We do not rely on consent to keep a record of a detected risk of harm. We rely on the need to establish or defend a legal claim and to comply with the law. That means withdrawing consent, including by deleting the account, does not erase a safety record. We explain why below, and we say it here as well because a parent should never discover it at the moment they press delete.

Artificial intelligence

Companion replies and Homework Help are generated by a large language model. Your child’s message content is sent to a third-party AI service provider we use under contract to produce a reply.

The service also uses automated analysis to derive wellbeing signals and to detect possible risk. Those detections influence what a parent is shown. A model classification on its own cannot raise a serious safety alert to a parent; the alert must be grounded in the original source.

We do not use teen content to train third-party models, and we do not use it for advertising. We do not sell personal data.

The request to the model is made with storage switched off, so the AI provider keeps no copy of the exchange for later retrieval, and nothing your family writes is used to train any model — ours or anyone else’s.

There is one exception we would rather state than leave out. The AI provider keeps a copy of what is sent to it for up to 30 days so that misuse of the service can be detected. It is never used to train anything, and it can be seen only by the provider’s own authorised personnel, only where an automated check has flagged something. If we are able to shorten or remove that window, we will say so here.

The model that answers your teenager processes their message within India. What they write is not sent out of the country to be answered.

Who else sees it

We do not sell your information. We do not share it with anyone for advertising. There are no advertisements in MyTeenCare. There are no advertising SDKs, no third-party analytics, and no tracking pixels in the app or on this site. Nobody buys access to your family’s information, because it is not for sale and never will be.

What we would rather say plainly than leave implied: we do use suppliers to run the service — hosting, the database, sign-in, email delivery, and the AI service that generates a reply — each under contract, and only to provide MyTeenCare to you. They act on our instructions and are not permitted to use your information for their own purposes. That is a different thing from sharing your data, and we are not going to describe ourselves as using nobody when we use them.

Push notifications to a parent’s device — including a safety alert about a child — are delivered through a third-party push notification provider we use under contract. What reaches that provider to do this is a device identifier and a short, generic notification such as “something needs your attention”. Your child’s actual words are never built into that notification and never pass through it.

Where you pay through an app store, the store handles the payment and tells us only whether the plan is active. Your card and UPI details never reach us and are never stored on our systems.

Beyond that: authorities, where the law requires disclosure, or where there is a serious risk to someone’s safety. Nobody else.

How long we keep things

While the account is open, we keep information for as long as the service needs it.

After a parent deletes the account, chats, journals, check-ins, homework, companion preferences, progress records, and the wellbeing signals and summaries derived from them are erased within 30 days. Account and registration details are erased on the same schedule. Sign-in sessions are ended immediately.

Safety records are kept until the young person’s 21st birthday. A claim relating to something that happened while a person was a minor can be brought until they are 21, and a record of a detected risk of harm may be needed to answer it. What is kept is a structured record: what was detected, when, how serious, the reviewed phrases that triggered it, what was done, and by whom. The surrounding conversation, journal entry or note is not kept.

Security and access logs are kept for one year, as required of us.

Audit records of who accessed restricted content are kept and are not removable by the person they describe.

Internal work queues are cleared on a fixed schedule. When something has to happen in the background — sending a notification, updating a summary — it is written to a queue first so it is not lost if a step fails, and those entries can contain identifiers. Once the work has been done the entry is removed within 30 days. Entries that failed, and are kept so we can find out why, are removed within 90.

Backups are encrypted and cycle out within 35 days of the data being erased from the live service.

Deleting the account

The parent who owns the family account can delete it, from within the app under account settings, or from myteencare.ai/delete-account, which works whether or not the app is installed.

We will ask you to confirm it is you, and we will show you what is about to happen. After that the deletion proceeds and cannot be undone. This is a deletion, not a pause or a deactivation.

Your teenager keeps read-only access to their own writing for the 30 days before it is erased, so a private space they trusted is not taken away without notice. They are told that the account is closing and when. They do not control the decision.

If you are the teenager and you want your account deleted, ask the parent who set it up — it is their account, and only they can close it. If asking them is not something you can do, write to us at Contact@northneuron.com and we will help. We will not close a family account on a teenager’s request alone, but we will always answer you.

Everything listed above as erased is erased. Safety records, audit records, and the record that consent was given are kept, for the periods and reasons stated above.

Where a safety case is open at the moment of deletion, the erasure of product data still proceeds, but the safety record is reviewed by a named person rather than closed automatically.

Location

MyTeenCare does not track where your child is. There is no background location, no location history, and no stored “last known position” anywhere in the product. We do not know where anyone is, and we have not built the means to find out.

We are building a narrow exception for one situation only — where a risk of immediate harm is detected and a parent has separately agreed in advance, so that they can reach their child. It is not available yet. Nothing in the app asks for location today, and no location is collected. When it is ready we will describe it here, in advance, before it can be switched on.

If a plan is not renewed

A plan belongs to one child. If it is not renewed — because it was cancelled, or because a payment failed — that child keeps read-only access to their own writing for 30 days, and their data is then erased exactly as described above.

Only that child is affected. If you have other children on the account whose plans are still paid, nothing of theirs is touched: not their writing, not their profile, not their access. One child’s billing failure is never allowed to reach a sibling.

We will tell you when the 30 days start, again part-way through, and again shortly before they end. We will not erase a child’s data for non-payment without having told you first.

Safety records are not withdrawn by a lapsed plan. A concern already raised about a young person is kept until their 21st birthday, for the reasons given above. Not paying is a billing event; it does not retract a safeguarding record.

Your rights

You can ask us for a copy of the personal data we hold, ask us to correct it, ask us to erase it, and withdraw consent. A parent exercises these on behalf of their child. Write to Contact@northneuron.com.

If you are not satisfied with how we handle a request, you can complain to our Grievance Officer, and after that to the Data Protection Board of India. We aim to respond to a grievance within 30 days and will not exceed 90.

Grievance Officer
NorthNeuron Technologies Private Limited
Bengaluru, Karnataka, India
contact@northneuron.com

Security

Access to the service requires signing in through a dedicated identity provider we use under contract. On phones, the credential that keeps you signed in is held in the device’s secure hardware storage, and sign-in happens in the system browser rather than inside the app, so the app never handles your password. Content is encrypted in transit and at rest. Access to restricted content by staff requires approval and is audited.

No service can promise perfect security. If a breach affects your personal data we will notify you and the Data Protection Board as required.

Changes

If we change this policy in a way that materially affects you, we will tell you in the product before it takes effect. The date at the top shows when the substance last changed.