Built with privacy and safety in mind

MyBullyBuddy is designed for young people talking about difficult experiences, so restraint is the default.

Need help right now?

If you or someone else is in immediate danger, contact your local emergency services. If you can, tell a trusted adult — a parent, caregiver, teacher, counsellor, or coach. They can act in ways a conversation cannot.

We collect as little as possible

MyBullyBuddy™ is designed with restraint. We do not build permanent conversation transcripts, we do not store voice recordings, and we never sell personal data. To use Buddy, we only require the minimum information needed to operate your account securely, such as a parent/guardian's verified contact email and sign-in credentials.

Optional information (opt-in only)

You and your child can choose whether to share optional background details. Participation is 100% voluntary. If you do not opt in, this information is never captured or stored, and access to Buddy is completely unaffected. This opt-in is not yet active; nothing listed here is collected until it is offered and you choose to share it.

If you opt in, we may collect: gender (Male / Female / Other / Prefer not to say); school type (Public School / Catholic School / Other); grade level; the first 3 characters of your postal code only (never a street address or exact location); how you are feeling right before signing in; and where the bullying or conflict happened (Online, At School, In a Public Space).

Why we ask: this information helps onsite professionals and educators who train young people tailor their anti-bullying workshops and programs to real-world patterns, such as whether issues happen more online or at school, or affect certain grades. It is used in aggregate for educational and trend analysis, never to profile or track an individual child. You can change or withdraw your opt-in consent at any time.

Optional parent-shared check-ins (Test rollout only)

Where separately enabled, the parent or guardian who created the child account may allow optional check-in sharing. The child is shown that parent's verified email and separately chooses Save and share answers. The six answers concern where, what, who, frequency, the child's own perception of why, and who helped. Skipped answers stay blank; no names or free text are requested. These identifiable answers are not anonymous research, and research opt-in does not authorize this sharing.

Only the latest explicitly shared check-in is stored. It expires after 30 days, is hidden immediately on expiry, and is removed from active storage by daily cleanup. Turning permission off deletes the saved answers; the child or authorized parent can also delete them. Child removal deletes associated check-ins. Provider backups may temporarily retain copies. For access or correction requests use the verified request process below. Sharing does not include mood, Buddy messages, voice, conversation history, or safety records, never gates access, and does not send emergency alerts. This feature is not enabled on Production pending separate rollout verification.

Conversations and voice

Buddy conversations are temporary. Audio is temporary.

MBB does not save ordinary Buddy conversations as permanent transcripts or provide conversation-history replay. Text is used for the current session and to generate replies. Start fresh clears the conversation; Exit, sign-out, a new page session or seven minutes of inactivity (with a warning at five minutes) ends the temporary session.

Microphone audio is used temporarily for speech-to-text. The resulting text follows the same temporary-conversation policy. Spoken replies are temporary playback. MBB does not build a voice recording or audio history. Avoid unnecessary names, addresses and identifying details when talking to Buddy.

What remains with your account

We retain the sign-in information needed to operate your account and the profile information you provide, such as your display name, Buddy name, trusted-helper label and onboarding choices. Country, region and any previously supplied postal information support location-appropriate resources and sponsor selection; we do not continuously track your location.

Ordinary mood discussions are not an account history. Necessary account activity, entitlement and authorization records support access and deletion.

For guardians, we retain a verified contact email, account link, verification timestamps and a minimal authority reference, plus authorization source, status, policy version, approval and withdrawal times. We use this for consent, account administration, deletion and any future necessary safety contact. Native sign-in and two-factor records protect the account; we do not request an identity-document upload here.

Approval and your privacy

Direct/public child accounts require verified guardian authorization before Buddy use. Confirming an email alone does not establish guardian authority. For an agreed school or authorized-organization deployment, that organization handles enrollment authority and MBB records its authorization state.

Guardian authority is for consent, account administration, deletion, and safety escalation — not surveillance of ordinary Buddy conversations.

Guardians cannot routinely read or export a child's ordinary messages, mood discussions, profile, voice/audio or conversation history through guardian controls. Guardians can sit with their child during the child's session. Child password resets and parent security, credential and export actions require two-factor verification. Removing a child requires a separate explicit confirmation.

How We Protect Your Information

MyBullyBuddy uses layers of security to protect accounts, conversations and personal information. These include secure account sign-in, controlled access to information, encryption where implemented, and security reviews that help identify issues to fix. Parents can manage their family accounts, but cannot routinely read their children's private Buddy conversations. We limit the information we keep and share, with exceptions where needed for safety or legal reasons.

Serious-safety escalation (future work)

S1-specific preservation and necessary safety disclosure are separate future safeguarding work, not enabled in this release. Do not rely on Buddy to notify a guardian or emergency service.

Account lifecycle and deletion

Our approved policy is suspension when payment/entitlement or school entitlement ends, followed by a 30-day grace period and deletion. Twelve months of account inactivity also leads to deletion. Ordinary profile information follows the account lifecycle. You may create a new account later.

A verified guardian may withdraw approval and request deletion without the normal inactivity waiting period. Withdrawal blocks further Buddy use before deletion is attempted. The appropriate signed-in account holder can also request deletion. A failed deletion remains pending; blocking access alone is not confirmation of deletion.

Timed deletion is not yet activated for this release. Contact us if you need deletion now. We confirm successful deletion from active MBB systems; provider backups may keep temporary copies until their backup-retention periods end. We do not promise instant erasure from every backup, provider or device. Copies you downloaded and legacy data on offline devices may need separate removal.

Service providers and analytics

Hosting and account services process information to run MBB, including Supabase for sign-in and account data. Buddy text is processed through the Lovable AI Gateway and its configured model provider (currently Google Gemini). Voice processing uses ElevenLabs when enabled with the required retention controls. These services receive the information needed for the requested feature; temporary at MBB does not mean the information stays only on your device.

Providers and their service partners may process information outside your country, including outside Canada, where different laws may apply. Provider processing and backup lifecycles are subject to their applicable arrangements and retention controls. Ask us about the applicable providers and handling; we do not promise Canada-only processing or instant deletion from their internal systems.

Google Analytics is off for the MVP. MBB does not sell ordinary Buddy conversations. Any future analytics will be aggregate and privacy-designed; no new conversation analytics are enabled here.

Access, correction and requests

Use Download my account data in your account controls for a copy of retained account data. You must sign in to your own account; guardian exports require two-factor verification and contain only the guardian's own data and linked authorization metadata, never private child exchanges. Downloads contain no conversation or audio history. Keep downloaded files private.

You can correct your profile in Me or Settings. Guardians use Guardian approval and account administration to refresh their verified contact, withdraw approval or request deletion. For access, correction, account recovery, withdrawal or deletion help, email info@mybullybuddy.com with the request type. We verify identity and applicable authority before providing or changing data.

Do not email passwords, authenticator codes, identity documents, recordings or Buddy conversations. We will explain the verification needed, the permitted scope and the result, including anything still pending. Email is not an emergency or crisis-support channel.

Responsible use

MyBullyBuddy uses AI to help young people talk through bullying situations and explore possible next steps. It is not a therapist, emergency service, or replacement for professional help. It does not diagnose, and it will encourage real-world support when that's what a situation needs.

Questions

If something here isn't clear, email info@mybullybuddy.com.