Privacy Policy

Last updated: March 15, 2026

At Spectrayan, we take the privacy and security of your personal, clinical, and technical information seriously. This Privacy Policy explains how we collect, use, store, and protect information across spectrayan.com, Spectrayan Care Hub, Bloom Companion, ebbmem cloud services, and related offerings.

Local-First Software Note: Carefold and open-source Spector deployments run locally on hardware you control. Household records imported into Carefold remain on your local machine and are not transmitted to Spectrayan servers.

By using Spectrayan websites or hosted services, you agree to the practices described in this policy. If you do not agree, please discontinue use of our hosted services.

1. Information We Collect

We collect the following types of information to provide and improve our services:

Account Information: Name, email address, phone number, professional credentials, and role (provider, client, or administrator) provided during registration.

Client and Clinical Data: Information entered by providers or clients related to treatment plans, session notes, behavioral assessments, intake forms, goals, and progress tracking.

AI Interaction Data: Conversations and queries submitted to our AI assistants (ABA Support, CBT, Speech Therapy, and Occupational Therapy models). This data is used solely to generate responses during your session.

Usage Data: Browser type, device information, IP address, pages visited, and interaction patterns collected automatically to improve platform performance.

2. How We Use Your Information

We use your information to:

  • Provide and maintain the Spectrayan platform and its features
  • Facilitate communication between providers and clients
  • Generate AI-powered responses and recommendations during active sessions
  • Support treatment planning, scheduling, and progress tracking
  • Send service-related notifications and updates
  • Improve platform functionality, security, and user experience
  • Comply with applicable legal and regulatory requirements

3. AI Models and Your Data

Spectrayan offers specialized AI assistants for ABA, CBT, speech therapy, and occupational therapy. We want to be clear about how your data interacts with these models:

  • No PII is used for training or fine-tuning. Your personally identifiable information and clinical data are never used to train, retrain, or fine-tune any of our AI models.
  • Session-only processing. AI interactions are processed in real time to generate responses. Conversation data is not retained beyond what is necessary to deliver the service.
  • No third-party model training. Your data is not shared with any third-party AI providers for the purpose of model improvement or training.

4. Data Security

We implement industry-standard security measures to protect your information:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Role-based access controls ensuring only authorized users can access specific data
  • Secure authentication with session management
  • Regular security audits and vulnerability assessments
  • Multi-tenant architecture with strict data isolation between organizations

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data only in the following circumstances:

  • With your consent: When you explicitly authorize sharing with a specific party
  • Service providers: Trusted third-party services (e.g., cloud hosting, authentication) that help us operate the platform, bound by strict confidentiality agreements
  • Legal requirements: When required by law, regulation, or valid legal process
  • Safety: To protect the rights, safety, or property of Spectrayan, our users, or the public

6. Data Retention

We retain your personal and clinical data for as long as your account is active or as needed to provide services. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., audit trails).

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate data
  • Request deletion of your personal data
  • Withdraw consent for data processing
  • Export your data in a portable format
  • Object to certain types of data processing

To exercise any of these rights, contact us at privacy@spectrayan.com.

8. Cookies & Browser Storage

Spectrayan uses minimal browser storage and strictly necessary cookies to operate and secure our websites and hosted applications. We do not use advertising cookies or cross-site tracking pixels.

Types of storage we use

  • Essential security & session storage: Required for core functionality such as authentication, tenant session management, and automated abuse prevention (including Firebase App Check verification when submitting forms).
  • Display preferences: Stores user-initiated interface settings such as your light or dark color-scheme preference in browser localStorage so your choice persists across visits.
  • Operational diagnostics: Aggregated, non-identifying service telemetry used to monitor uptime, detect errors, and maintain platform reliability.

Third-party advertising cookies

We do not use advertising or behavioral tracking cookies, and we do not permit third parties to place ad-targeting cookies on your device across Spectrayan properties.

Managing browser storage

You can clear or block cookies and site data at any time through your browser settings. Please note that blocking strictly necessary security or session storage may prevent authenticated portals or contact forms from functioning properly.

9. Children's Privacy

Spectrayan may process information about minors as part of clinical care managed by authorized providers and guardians. We do not knowingly collect personal information directly from children under 13 without parental or guardian consent. All minor-related data is managed through authorized adult accounts.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email or through a notice on the platform. The latest version will always be available on this page.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at privacy@spectrayan.com.