Privacy Policy

Introduction

Vitasphere, Inc. (DBA HeroMe) ("we," "us," or "our") is committed to protecting the privacy of children and their families. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our therapeutic storytelling platform designed for children ages 3-12.

We comply with the Children's Online Privacy Protection Act (COPPA), the General Data Protection Regulation (GDPR), and other applicable privacy laws. We take special care to protect children's personal information.

Information We Collect

Information Provided by Parents/Guardians

• Account Information: Email address, password (encrypted), and optional phone number
• Child Profile Information: Child's first name, age/date of birth, and behavioral challenges the parent wishes to address
• Story Preferences: Comfort objects, interests, and therapeutic goals
• Feedback: Ratings and comments on generated stories

Information We Do NOT Collect from Children

• We do not collect information directly from children
• We do not allow children to create accounts
• We do not collect photos, videos, or audio recordings of children
• We do not collect precise geolocation data
• We do not use persistent identifiers to track children across websites

Automatically Collected Information

• Usage Data: Pages visited, features used, and reading progress
• Device Information: Browser type, operating system, and device type (for compatibility)
• Cookies: Essential cookies for authentication and preferences (see Cookie Policy)

How We Use Information

We use collected information to:

• Generate personalized therapeutic stories tailored to each child's needs
• Provide parent guidance and behavioral insights
• Improve our AI-powered story generation
• Send notifications about new chapters (with consent)
• Respond to support requests
• Ensure platform security and prevent abuse

We never use children's information for advertising or marketing purposes.

Information Sharing

We do not sell, rent, or trade personal information. We may share information only in these limited circumstances:

• Service Providers: Cloud hosting (Vercel, Supabase), AI services (Groq for text generation, Replicate for image generation) - all bound by strict data processing agreements
• Legal Requirements: When required by law or to protect safety
• Business Transfers: In the event of a merger or acquisition (with notice)

Data Security

We implement robust security measures:

• All data encrypted in transit (TLS 1.3) and at rest (AES-256)
• Passwords hashed using industry-standard algorithms
• Regular security audits and penetration testing
• Access controls limiting employee access to personal data
• Automatic session timeouts

Data Retention

• Active accounts: Data retained while account is active
• Closed accounts: Data deleted within 30 days, unless legally required to retain
• Generated stories: Retained for the duration of the subscription
• Analytics data: Anonymized after 12 months

Parental Rights

Parents and guardians have the right to:

• Access: Review all personal information we hold about their child
• Correction: Request corrections to inaccurate information
• Deletion: Request deletion of their child's information
• Portability: Receive a copy of data in a portable format
• Withdraw Consent: Revoke consent at any time

To exercise these rights, contact us at privacy@herome.ai or use the "Close Account" feature in Settings.

International Data Transfers

Our services are hosted in the United States. If you access our services from outside the US, your information may be transferred to and processed in the US. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses for EU residents.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email and/or a prominent notice on our platform. Continued use after changes constitutes acceptance.

Contact Us

For privacy-related questions or concerns: