Privacy

Who the pilot is for

The Founding Family Pilot is for five families, at $99 one time with no subscription. A parent or legal guardian uses their own invited account to request a Practical Evaluation Guide. Children do not use the account. Candice personally reviews every guide. This is educational support, not a diagnosis or a replacement for your evaluator, clinician or school.

Please upload through your account, not email

Please do not email evaluations or detailed findings. Invited parents receive a one-time link to choose their own password, then sign in to the pilot intake. Self-service signup is closed. Before uploading a PDF, you must confirm that you are the parent or legal guardian and authorize AI processing and Candice’s review.

We keep your account email, protected password information, invitation and password-reset records, and the consent recorded with your case. We do not ask you to enter your child’s name or date of birth separately. However, the original evaluation can contain names, dates of birth, addresses and other identifiers. Those details can remain in the stored original, extracted text and supporting passages. This is not complete anonymization.

What stays with your case

While your case exists, we store the original PDF, text extracted from its pages, supporting evidence and quotations, review records, drafts and the generated guide. We also keep the AI requests and responses and processing diagnostics inside the protected case so that its source checks and any failures can be reviewed.

The pilot does not automatically delete cases after a set period of inactivity. Your case stays until it is deleted; you can use the case deletion control described below or contact us for help.

AI processing and Candice’s review

Anthropic’s API receives evaluation text and the evidence or draft guide content needed to generate and check your guide. Text sent for processing can include identifiers present in the source. Rhemaia does not use your evaluation to train its own AI models and does not sell your data. We do not promise that Anthropic keeps no copies: its retention and data use depend on the applicable service terms and account settings.

Candice can view the original, extracted text, evidence and draft guide in the protected reviewer screen. You cannot view a guide until she has reviewed it and explicitly released it. Release does not automatically send an email. If Candice sends a guide-ready email, it will only ask you to sign in; it will contain no evaluation findings or guide attachment.

How access and storage are protected

The pilot encrypts the original and the derived case content before saving them in its PostgreSQL database, using authenticated AES-256 encryption. It requires a configured encryption key and refuses pilot storage without one. Signed-in parents can access only their own case; Candice’s designated reviewer account can access cases for review. Sensitive case responses are marked private and not to be cached.

The service needs hosting, database and email providers as well as Anthropic. Hosting and database infrastructure handle the application and stored records; invitation and password-reset email delivery uses Resend. Account email addresses and authentication links go to the email provider, not evaluation attachments. Ordinary application logs are designed to record operational information without evaluation content; detailed processing records remain inside the encrypted case. These protections do not mean that every account record, email or provider log is encrypted by the case encryption system.

Deleting a case and the limits of deletion

In your signed-in pilot account, open the case and select “Delete this case and its source, evidence and guide.” This removes the active case record, including its original PDF, extracted text, evidence, AI requests and responses, drafts, guide, consent and review records. The application checks that the record is gone and prevents stale processing from saving it again. If processing is running, deletion asks you to wait and retry; a failed attempt is not completed deletion.

Case deletion does not delete your account or its email and password-reset records. Contact us about those records or if you cannot sign in. It also cannot recall files you downloaded, printed or shared, your original evaluation, or emails already delivered. Our database provider, Neon, keeps a rolling record of recent changes. For up to 6 hours after you delete a case, it could still be restored from that record. After 6 hours, it can no longer be restored. Hosting logs, email copies and the email provider’s records remain under those services’ retention rules. Deleting a case does not send an erasure request to Anthropic or guarantee deletion from every external system. We will explain what we removed and what remains when helping with a deletion request.

Questions or help with deletion

Contact help@rhemaia.com. Please use your account email and a case reference, without attaching an evaluation or including your child’s detailed findings.