Privacy Policy

This Privacy Policy explains what information YDABlocks (a Young's Digital Atelier LLC product) collects, why, and how you can control it.

1. Information we collect

• Account information: your name, email address, and a securely hashed password (we never see or store your password in plain text).
• Guardian information (under-13 accounts): a parent/guardian's email address, used to obtain and record consent, plus optional weekly-activity-summary opt-in.
• Content you create: saved builds, training pairs, and chat product settings — stored so the app can show them back to you.
• Billing information: handled directly by Stripe; we receive your subscription status and plan, never your full card number.
• Support & contact messages: anything you send us via the Contact page or in-app support form.
• Technical data: standard server logs (IP address, timestamps) kept for security and abuse prevention.

2. How we use it

To provide the Service (authenticate you, save and load your builds, run your fine-tune blend and chat tests, process billing), to send account-related email (verification codes, guardian consent requests, billing receipts via Stripe), to respond to support requests, and to keep the Service secure. We do not sell your personal information, and we do not use your training pairs or builds to train any model outside your own account.

3. Children's privacy (COPPA)

Accounts for children under 13 are only created after a parent or guardian completes a consent flow: we email the guardian first, they set the account password themselves, and the account does not exist until they approve. We collect the guardian's email — not the child's — as the account contact. Guardians can review, update, or request deletion of the account at any time. This design follows COPPA-aware practices; it has not yet been reviewed by outside counsel for full legal compliance at scale, and we treat that review as an open item, not a resolved one.

4. Who we share information with

We use a small set of processors to run the Service: Stripe (payments), Resend (transactional email delivery — verification codes, guardian consent, support notices), and our own self-hosted backend infrastructure. We don't share your information with data brokers or advertisers, and we don't run third-party ad tracking on YDABlocks.

5. Data security

Passwords are hashed, not stored in plain text. Two-factor authentication (authenticator app) and one-time recovery codes are available in Settings. Application secrets (API keys, signing secrets) are stored in an encrypted vault and never committed to source control or exposed in application code.

6. Your rights

You can update your account details and notification preferences, generate or revoke MFA/recovery codes, and permanently delete your account and all saved builds at any time from Settings. Guardians can do the same on behalf of a minor's account.

7. Cookies

See our Cookie Policy for details on the cookies we use to keep you signed in.

8. Changes

We may update this policy as the product evolves; material changes will be noted here.

9. Contact

Questions or requests about your data: support@ydablocks.com.