This Privacy Policy describes how the Child-Centered AI Lab (“we”, “us”) handles user data for our internal and hosted applications (collectively, the “Services”) that authenticate users via Google OAuth.

Google API Services User Data Policy

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Information We Collect

When you sign in to our Services using your Google account, we request the following OAuth scopes:

  • openid - to identify you across sessions
  • email - your primary Google account email address
  • profile - your name and profile picture

We do not request access to your Gmail, Google Drive, Calendar, Contacts, or any other Google service data.

How We Use Your Information

The data we receive from Google is used solely to:

  • Provision and maintain your user account in our Services
  • Verify your identity at sign-in
  • Authorize your access permissions across our applications

Data Sharing

We do not sell, trade, rent, or share your Google account information with any third party. Your information is processed through our central identity provider and is used strictly for internal authentication and authorization across our applications.

Data Retention and Deletion

We retain your account information for as long as your account is active. To request deletion of your account and associated data, email us at the address below. We will process deletion requests within 30 days.

Security

We use industry-standard practices to protect your information, including encrypted transport (HTTPS), secure token-based authentication, and access controls limited to authorized lab personnel.

Changes to This Policy

We may update this policy from time to time. Changes will be reflected by updating the “Updated” date shown above.

Contact

Questions or requests related to this policy or your data can be sent to help@childcenteredai.org.