TERMS AND CONDITIONS

1. INTRODUCTION

TeenBack is a youth mental-health and addiction-prevention platform designed to reach teens through positive, timely messaging. We provide real-time text, email, and optional voice-based interventions to help students manage triggers related to betting, vaping, and drinking.

We understand that privacy and trust are essential — especially when working with minors. This policy explains what information we collect, how we use it, and how we protect every teen and parent who participates in the TeenBack program.

2. INFORMATION WE COLLECT

We collect only the information needed to deliver meaningful support.

Personal Information:

Name (first name only if preferred)
Mobile phone number (for texts and calls)
Email address (for message delivery and support follow-up)
Date of birth (to confirm eligibility and tailor messaging by age group)

Optional Information:

School or organization (if enrolled through a district program)
Time zone and notification preferences
Demographic data (if provided voluntarily for research purposes)

Automatically Collected Information:

Message engagement data (time of delivery, opened or not opened)
Non-identifiable technical information such as browser type or device ID

TeenBack does not collect or store payment details directly. Payments for school or enterprise accounts are handled securely by third-party processors compliant with PCI DSS standards.

3: HOW WE USE INFORMATION

We use the information we collect to:

Deliver hourly or scheduled prevention messages
Send optional email or voice alerts if selected by the user or parent
Personalize timing and frequency of messages
Measure overall engagement and effectiveness (in aggregate only)
Provide customer support or respond to help requests

TeenBack never sells, rents, or trades user information to advertisers or third parties.

4. HOW WE PROTECT INFORMATION

All data is encrypted in transit and at rest using industry-standard protocols.
Access to personal information is restricted to verified TeenBack personnel and partners who operate under strict confidentiality agreements.
All systems are hosted in SOC 2–compliant, U.S.-based data centers.
We conduct regular audits to maintain compliance and detect unauthorized access.

If a data breach ever occurs, affected users and relevant authorities will be notified within legally required timeframes.

5. CHILDREN'S PRIVACY &PARENTAL RIGHTS

TeenBack complies with all applicable child privacy laws, including the Children’s Online Privacy Protection Act (COPPA) in the U.S. and GDPR-K standards internationally.

For users under age 13 (U.S.) or under 16 (EU), parental or school consent is required.
Schools and districts enrolling students act as authorized consent agents under educational privacy guidelines (FERPA).
Parents or guardians may review, correct, or delete their teen’s data at any time by contacting privacy@TeenBack.com

6. AGE VERIFICATION AND CONCENT

TeenBack is designed for teens aged 13 and older. To comply with child privacy regulations, all users must provide their date of birth during signup. If a user’s birth date indicates they are under 16, TeenBack requires verifiable parental or school consent before sending any messages or collecting personal information. TeenBack relies on accurate, self-reported information to determine eligibility. We do not knowingly collect or store information from children under 13 years old. If we learn that a user has misrepresented their age or provided false information, we will delete their account and all related data immediately. Parental consent is verified through secure digital confirmation — such as a parent or guardian clicking an approval link, replying to an authorization text or email, or through authorized school participation under FERPA and COPPA provisions. Consent records are encrypted and retained solely for compliance purposes.

7. COMMUNICATION AND OPT-OUT OPTIONS

Users can opt out of texts or emails at any time.

Text STOP to immediately unsubscribe from messages.
Text PAUSE to temporarily suspend communications.
Email privacy@TeenBack.com to delete your account or request data removal.

Users can also adjust notification frequency within their account settings or through their school administrator.

8. THIRD-PARTY PROVIDERS

TeenBack uses secure, industry-trusted partners to deliver communication and support:

SMS and Voice Messaging: Twilio (or equivalent provider, SOC 2 Type II certified)
Email Delivery: SendGrid or equivalent provider (GDPR and CCPA compliant)
Hosting & Analytics: AWS or Google Cloud Platform

All partners are contractually required to maintain the same level of privacy protection outlined in this policy.

9. DATA RETENTION

Personal data is stored only as long as necessary to provide the service or as required by law.
Inactive or unsubscribed accounts are automatically deleted after 12 months of inactivity.
Aggregate and anonymized data may be retained for research, reporting, or program improvement.

10. YOUR RIGHTS

Depending on your location, you may have rights to:

Access the data we hold about you
Request correction or deletion of your data
Withdraw consent or restrict certain processing activities

To exercise these rights, contact privacy@TeenBack.com. We will respond within 30 days of receiving your request.

11. INTERNATIONAL USERS

TeenBack operates primarily in the United States but may serve global partners. All data is processed under U.S. privacy laws, with compliance adaptations for international frameworks such as GDPR, PIPEDA (Canada), and the UK Data Protection Act.

12. UPDATES TO THIS POLICY

TeenBack may update this policy periodically to reflect new laws or technology. The “Effective Date” at the top will always show the latest revision. Significant updates will be communicated through the TeenBack website and, where applicable, by email.

13. CONTACT US

If you have any questions, concerns, or privacy-related requests, please contact:

TeenBack Privacy Office
Email: privacy@TeenBack.com
Mail: TeenBack Privacy Department
New York, NY 10001, USA