← Safety, Privacy & Trust

Aiden policy

Aiden Privacy Policy

Effective Date: October 27, 2026

Aiden, Aid in Autistic Adult Living, is operated by West Wind Storm LLC.

Aiden is designed to support independent autistic adults with communication, organization, sensory needs, routines, daily living, resources, and related tools.

This Privacy Policy explains what information may be collected when you use Aiden, why it may be collected, how it may be used, and the choices you have concerning your information.

Guest records are stored in this browser on this device. Guest entry also creates a temporary server-side acceptance receipt containing no health records or contact details. The receipt expires after 24 hours; expired receipts are removed during later guest-entry activity.

Introduction completion is saved as a preference in your signed-in Aiden account so the welcome introduction does not automatically repeat on another device. Guest completion uses this browser's local storage when it is available. Replaying the introduction does not reset that preference.

Signed-in changes stay in memory while saving. Some preferences and acknowledgments use browser storage. A revision conflict can create a private recovery copy of unsaved account data in browser storage. Recovery copies expire after seven days and are removed the next time Aiden checks them; Aiden cannot erase a browser that remains closed.

Sign-out attempts to clear Aiden private browser copies. When saving is pending or text is unfinished, you can stay, save added records before leaving, or explicitly leave without saving. Browser storage failures and offline connections can prevent saving or clearing, so use a private browser profile on shared devices and check the save status.

Firebase keeps email sign-in state in browser session storage where available, with an in-memory fallback. A secure, HttpOnly server cookie lasts no longer than the one-hour Firebase ID token and is refreshed while Aiden is open. Sign-out clears the Firebase browser session and Aiden server cookie. Closing a browser session may require signing in again; browser session restoration can preserve session storage.

A one-time connection for an earlier Aiden account stores only the Firebase user identifier, the existing Aiden ownership identifier, and the connection date in Cloudflare D1. No automatic email-based matching or merging occurs. The connection is removed on account deletion; content-free one-way deletion barriers remain.

A short-lived, secure, HttpOnly cookie lasting up to five minutes lets the account-deletion completion page verify a completed deletion after sign-out. It contains a one-way account identifier and account generation, with no saved account content.

Aiden uses Google Firebase Authentication for email-and-password sign-in, email verification, and password recovery. A ChatGPT account is not required for a new Aiden account. Passwords go directly to Firebase, not to Aiden’s app server or health-record database. Firebase processes the email address, authentication credentials, and technical sign-in information needed to provide this service.

ChatGPT Sites provides Aiden hosting, with Cloudflare Workers running the app and Cloudflare D1 storing signed-in account records. Saved health records, Care Team entries, My People contacts, reminders, settings, and the saved conversation history are part of the account data held there.

Voluntary feedback and tester-interest submissions are stored separately in Cloudflare D1 for West Wind Storm LLC to review. The forms send only the answers and contact information you enter; they do not automatically attach saved health records, contacts, or conversations and do not use AI.

A signed-in submission is connected to the account for deletion, without copying the account email into the form. Guest submissions are separate from accounts. You can remove a submission from its confirmation page before leaving, or contact West Wind Storm for help later. Account deletion removes connected submissions. Tester contact details are used for voluntary Aiden testing and related follow-up, not automatic marketing enrollment. Temporary, network-derived spam counters contain no raw IP address or answers; expired counters are removed when new submissions are processed.

Cloudflare and the hosting service also process technical request and security information to operate the service. Firebase Authentication is used for account access only; Aiden does not automatically send saved health records, messages, or contacts to Firebase. Aiden does not initialize Google Analytics, Gemini, Firestore, Firebase Storage, Google social sign-in, or Google Play services. Firebase and the hosting providers operate under their own processing and retention terms; no special residency or zero-retention arrangement is promised.

OpenAI also processes the messages you deliberately send through Talk with Me. The current feature sends the message and up to 20 recent conversation messages, along with instructions for the kind of help you selected. It does not automatically attach Health Log, Body Map, My Care Team, medications, or other saved records.

Saving someone in My Care Team or My People does not grant account access or automatically send that person your information.

The support address westwindstormco@gmail.com uses Gmail. Emailing that address sends the information you choose to include to that email service; do not include unnecessary sensitive information.

Your personal information is part of your life.

Aiden is designed to help you use that information for your benefit, not to exploit it.

West Wind Storm LLC seeks to collect only information reasonably necessary to operate Aiden and provide the features you choose to use.

We do not sell Aiden users' personal information.

We do not sell health-related information.

We do not provide health-related information to data brokers.

We do not use health-related information for targeted advertising.

The information Aiden receives depends on the features you choose to use.

This may include:

Account information, such as your name or chosen display name, email address, authentication information, settings, and preferences.

Optional feedback-survey answers and tester-interest details, such as a chosen name, contact email, device choices, and testing interests, when you deliberately submit those forms.

Daily living information, such as routines, tasks, reminders, water, movement, food, pantry information, appointments, bills, expenses, or other information you choose to record.

Health-related information, such as medications, symptoms, moods, emotional check-ins, sensory experiences, body-map information, or notes you create for yourself or a healthcare professional.

Communication information, such as text, selections, or messages you create using Aiden communication tools.

Helping Hands information, such as requests for assistance or information you intentionally choose to share with another person.

Working Differently information, such as skills, interests, workplace preferences, sensory needs, scheduling preferences, workplace barriers, and other information you choose to enter.

You should only enter information you are comfortable storing in Aiden.

Aiden and the services used to operate it may process limited technical information necessary to provide, secure, maintain, and troubleshoot the service.

Depending on the technology being used, this may include information such as:

Device or browser type.

Internet Protocol address.

Authentication or login events.

Security logs.

Error or diagnostic information.

Basic usage information necessary to maintain the service.

West Wind Storm LLC seeks to avoid collecting technical information that is not reasonably necessary for operating or securing Aiden.

Information may be used to:

Provide features you request.

Maintain your account.

Save information associated with your account.

Maintain settings and preferences.

Process actions you request.

Maintain security.

Prevent fraud or misuse.

Identify and correct technical problems.

Improve usability and accessibility.

Respond to support requests.

Comply with applicable legal obligations.

Some Aiden features allow you to enter information that may relate to your physical or mental health.

Health-related information can be sensitive.

Aiden is a consumer support tool and should not be assumed to provide the same legal protections as a medical provider's electronic health record.

West Wind Storm LLC will seek to handle sensitive information responsibly and comply with privacy, security, and breach-notification requirements that apply to Aiden.

Additional information is available through Aiden's Health Data & Privacy page.

Talk with Me currently uses OpenAI to generate AI-assisted replies.

When an AI-powered feature is used, information submitted to that feature may need to be processed by an AI service provider in order to generate the requested response.

Where sensitive information is involved, Aiden should provide appropriate notice before that information is submitted for AI processing.

AI-generated responses can be incomplete, inaccurate, or wrong.

Additional information is available through Aiden's AI & Your Data page.

Certain Aiden features may allow you to deliberately share information with another person.

This may include a support person, family member, friend, doctor, therapist, or another recipient you choose.

Creating information inside Aiden does not by itself mean you have chosen to share it.

Where reasonably possible, Aiden should show you what information is about to be shared and with whom before it is sent.

West Wind Storm LLC may use third-party service providers necessary to operate Aiden.

Depending on Aiden's current technical configuration, these services may include hosting, cloud storage, authentication, security, email delivery, infrastructure, or artificial intelligence processing.

These providers may process information as necessary to provide their services to West Wind Storm LLC.

West Wind Storm LLC seeks to limit provider access to information reasonably necessary for providing those services.

Information may be disclosed when reasonably necessary to comply with applicable law, valid legal process, security investigations, fraud prevention, or protection of the rights and safety of West Wind Storm LLC, Aiden users, or others.

Information may be retained for as long as reasonably necessary to maintain your account, provide features you use, maintain security, resolve disputes, or meet legitimate legal obligations.

West Wind Storm LLC does not intend to keep sensitive information indefinitely simply because it can.

You can delete your Aiden account in Settings → Your Data or at /delete-account. Active saved account content, AI usage records, and agreement records are removed. A minimal content-free security record remains to block old sessions from restoring deleted information.

Some limited information may need to remain temporarily in backups, security records, or legally required records after a deletion request.

Depending on the feature and applicable law, you may be able to review, correct, delete, export, or control sharing of information associated with your Aiden account.

The availability of individual controls depends on the feature and current technical configuration.

If a control is not yet available inside Aiden, you may contact West Wind Storm LLC concerning your personal information.

We may need to verify that a request comes from the account owner before providing, changing, or deleting account information.

Privacy requests may be sent to:

westwindstormco@gmail.com

West Wind Storm LLC uses reasonable measures designed to protect information against unauthorized access, alteration, disclosure, or destruction.

No internet-connected service can guarantee perfect security.

You can help protect your account by using a strong password, protecting your login information, and signing out of shared devices.

Please report suspected unauthorized account access or security concerns to:

westwindstormco@gmail.com

If West Wind Storm LLC discovers a security incident involving user information, we will investigate the incident and take reasonable action appropriate to the circumstances.

Where applicable law requires notification of affected users, regulators, or others, West Wind Storm LLC will provide those notifications as required.

Aiden is designed for adults age 18 and older.

Aiden is not intended as a service for children.

If West Wind Storm LLC learns that an account belonging to a person who is not legally permitted to use Aiden has provided personal information, appropriate steps may be taken to close the account and address the information.

Aiden may provide links to websites, organizations, government programs, healthcare providers, community services, employment resources, or other third parties.

West Wind Storm LLC does not control the privacy practices of independent third parties.

When you leave Aiden and use another service, that organization's privacy policy and terms may apply.

Aiden will continue to develop.

This Privacy Policy may be updated when Aiden's features, technology, legal requirements, or data practices change.

If a change materially affects how personal information is collected, used, or shared, West Wind Storm LLC will provide appropriate notice where required.

The effective date at the beginning of this policy identifies the current version.

Questions concerning privacy, personal information, security, or this Privacy Policy may be directed to:

West Wind Storm LLC
westwindstormco@gmail.com