Privacy Policy

1. About Prismz

Prismz supports AAC communication, daily routines and emotional check-ins for autistic people, caregivers and therapists. We respect every user’s privacy and control over their personal data.

2. Data We Collect

• Account information: Email address, display name, username, profile image and account role.
• Personal support data: AAC cards, daily routine records and emotion check-in records.
• Age and guardian information: Date of birth and guardian consent confirmation when the user is under 16.

4. Data Security

Passwords are protected with BCrypt hashing. Refresh tokens are hashed before storage. Data access is restricted by account, role and CareLink connections approved by the user.

5. Account and Data Deletion

You may permanently delete your account and personal data at any time from Settings > Delete account in Prismz. Account relationships and associated data are removed when deletion is completed.

6. Data Retention

Account information and user-created data are retained while the Prismz account remains active so the app can provide its features.

After an in-app deletion is confirmed or a verified support request is processed, account data is removed from the active production system. Residual copies may remain in restricted disaster-recovery backups for up to 30 days. Backup data is not used for another purpose and is permanently removed when the retention period expires.

Limited records may be retained longer only when required by law or necessary to prevent fraud or abuse, resolve disputes or enforce legal agreements. Access is restricted and only the minimum necessary information is retained.

See the deletion instructions and data scope on the Account and Data Deletion page.