The policy behind the principles.

What we collect here: almost nothing.

thinkathena.ai is a static site. No ad trackers, no behavioral analytics, no cookies set by us. If you subscribe to the newsletter, we receive the email address you typed, we use it to send you the newsletter, and you can unsubscribe with one click in any issue. If you email us, we have your email because you sent it. That is the complete list.

How the suite treats your family's data.

• One parent account, no child logins.The account belongs to the parent. Kids use profiles under it, with no email address, no password, and no direct relationship with us: a deliberate design for COPPA-era childhoods. A parent PIN gates the grown-up controls.
• Children's data is never sold. Ever.Not to advertisers, not to brokers, not "anonymized and aggregated," not at acquisition time. This is a hard rule of the company, not a preference.
• No AI training on your child's data without separate, explicit consent.Model providers we use are contractually barred from training on the data we send them, and we do not train models on children's content unless a parent opts in, separately and specifically, to a clearly described program.
• Sensitive data stays close.The most sensitive things a child produces (journal entries, communication logs) are stored with the minimum footprint the feature allows, on the device where possible, encrypted in transit and at rest when they must sync.
• Delete means delete.A parent can request a full export of their family's data or complete account deletion at any time by emailing richa@thinkathena.ai, and we complete it within 30 days: deletion removes the data from our systems, not just from view. Journal and Islands also offer their own in-app exports today, and full in-app export and deletion are on the roadmap.
• No dark patterns around any of this.Privacy settings default to the protective option. We will never make the private choice the tedious one.

What we use under the hood.

The suite runs on Google Firebase (authentication and database) and Cloudflare (hosting and delivery); both act as processors for the data described above and neither is permitted to use it for their own purposes. Payments, when they begin, will be handled by a dedicated payment processor and card numbers will never touch our servers. AI features call model providers under agreements that prohibit training on your data.

This policy will grow as the products do, and every substantive change will be dated and announced in the newsletter before it takes effect. Questions, concerns, or a request we haven't anticipated: richa@thinkathena.ai. You will get an answer from the founder, because there is nobody else here to hand it to.