Notice to Parents

Introduction for Parents

OneBella™ is committed to protecting the privacy of children under 13. This notice explains how we comply with the Children's Online Privacy Protection Act (COPPA) and what information we collect from your child.

What Information We Collect from Children

When your child creates an OneBella™ account, we collect:

Essential Account Information

• Username (no email required for child accounts)
• Password (encrypted)
• Date of birth (to verify age and provide age-appropriate features)
• First name (for personalization)

Health Information (Diabetes Management)

• Glucose readings (blood sugar levels logged manually or via Dexcom CGM)
• Food logs (meals logged manually or via photo analysis)
• Activity data (optional, if Garmin device connected)
• Medication information (optional, insulin doses)

Gamification Data

• Stickers earned (rewards for healthy behaviors)
• Points and levels (progress tracking)
• Streaks (consecutive days of glucose logging or in-range readings)

Location Information (Optional)

• City/state (if child enables T1 Nearby™ map feature)
• GPS coordinates (only when map is active, not stored permanently)

Parent-Child Linking

• Parent email address (to link your account to your child's account)
• Verification codes (to confirm your consent)

How We Use Your Child's Information

We use your child's information only to:

1. Provide diabetes management tools:

• Display glucose trends and patterns
• Suggest healthy food choices
• Track medication schedules
• Sync data across devices

2. Gamification rewards:

• Award stickers for logging glucose or staying in-range
• Celebrate streaks and achievements
• Display progress on home screen

3. Parent Dashboard:

• Show you your child's glucose data
• Display activity logs (logins, logs submitted)
• Alert you to friend requests or messages

4. Improve the App:

• Fix bugs and technical issues
• Understand feature usage to make improvements
• Ensure age-appropriate content and safety

What Information We Share

We DO NOT share your child's information except:

1. With service providers (only as necessary to operate the App):

• Firebase (Google) - Account authentication
• Neon Database - Secure health data storage
• OpenAI - AI food analysis (photo is analyzed and discarded, not stored)

2. With you (the parent):

• Through the Parent Dashboard, you can view all your child's data

3. With law enforcement (if legally required):

• Court orders, subpoenas, or legal investigations

Your Rights as a Parent

Under COPPA, you have the right to:

1. Review Your Child's Information

Access all data collected from your child through the Parent Dashboard or by contacting us at parents@onebella.org.

2. Delete Your Child's Information

Request deletion of your child's account and all associated data:

• In-App: Parent Dashboard → Manage Child Account → Delete Account
• Email: parents@onebella.org

Deletion Timeline:

• Immediate access revocation
• 30 days to remove from active systems
• 90 days for complete deletion from backups

3. Refuse Further Collection

You can disable specific features (e.g., location, device integrations) in your child's Settings or revoke consent entirely by deleting the account.

4. Update or Correct Information

Update your child's profile information through the Parent Dashboard.

How We Protect Your Child's Data

Security Measures

• Encryption: All data encrypted in transit (HTTPS) and at rest (AES-256)
• Secure authentication: Firebase industry-standard login
• Access controls: Only authorized personnel can access systems
• Regular audits: Security reviews and penetration testing
• Automatic logouts: Sessions expire after inactivity

Age-Adaptive Features

Children under 13 receive a restricted experience:

• No public profile visibility
• No access to Community/Messaging tabs
• No friend requests to/from adults
• Gamification features only (stickers, streaks)
• Parental oversight via Parent Dashboard

Parental Consent Process

How You Provide Consent

1. Create your own OneBella™ account (parent/caregiver account)
2. Navigate to Parent Dashboard → "Link Child Account"
3. Enter your child's information (username, birthdate, name)
4. Receive 6-digit verification code via email
5. Your child enters the code during their account setup
6. Account activated with parental approval

Ongoing Oversight

After approval, you can:

• View your child's glucose logs and food entries
• Monitor gamification progress (stickers, streaks, points)
• See daily activity summary (logins, logs submitted)
• Review friend requests (if child turns 13 later)
• Adjust privacy settings
• Delete account at any time

When Your Child Turns 13

When your child turns 13, we will:

1. Notify you via email
2. Offer to upgrade the account to teen status (13-17)
3. Unlock Community features (if you approve)
4. Maintain Parent Dashboard access (if you choose)

You can choose to:

• Keep parental oversight enabled
• Grant your teen more independence

• Delete the account

Third-Party Services

OneBella™ uses the following COPPA-compliant services:

Firebase (Google LLC)

• Purpose: Account authentication
• Data Collected: Email (parent), username (child), encrypted password
• Privacy Policy: https://firebase.google.com/support/privacy

OpenAI, Inc.

• Purpose: AI food analysis from photos
• Data Collected: Food photo (analyzed and immediately discarded)
• Privacy Policy: https://openai.com/privacy

Neon Database

• Purpose: Secure health data storage
• Data Collected: Glucose logs, food logs, gamification data
• Privacy Policy: https://neon.tech/privacy

OpenStreetMap Foundation

• Purpose: Map data for location features
• Data Collected: None (public map tiles only)
• Privacy Policy: https://wiki.osmfoundation.org/wiki/Privacy_Policy

Research and Data Sharing (Optional)

We may ask for your consent to use de-identified data for diabetes research. This is entirely optional and you can opt-out at any time.

If you consent to research:

• Your child's glucose trends may be used for population studies
• All personally identifiable information is removed
• Data is aggregated with thousands of other users
• You can withdraw consent anytime

You will be asked separately for research consent. It is not required to use OneBella™.

Questions or Concerns?

If you have questions about your child's privacy or our COPPA practices:

Parent Support Email: parents@onebella.org
Privacy Inquiries: privacy@onebella.org
Phone: (207) 974-6027
Mail: OneBella™ Parent Privacy Team, 1018 Moosehead Trail, Dixmont, Maine 04932

We will respond within 3 business days.

Changes to This Notice

We will notify you of material changes to this COPPA notice by:

• Email to the parent email address on file
• In-app notification in Parent Dashboard
• Requiring re-consent if changes affect children's data collection

Federal Trade Commission (FTC) Contact

If you believe we are not complying with COPPA, you can contact the FTC:

Federal Trade Commission
Consumer Response Center
600 Pennsylvania Avenue, NW
Washington, DC 20580
Website: https://www.ftc.gov
Phone: 1-877-FTC-HELP (1-877-382-4357)

Acknowledgment

By approving your child's OneBella™ account, you confirm:

• You are the child's parent or legal guardian
• You have read and understood this COPPA notice
• You consent to the collection, use, and disclosure of your child's information as described
• You understand your rights to review, delete, or refuse further collection