Privacy Policy

1. The Short Version

The sections below are the complete policy; if anything in this summary and the full policy could be read differently, the full policy controls.

2. Information We Collect

Information you give us directly

• Account information: your name, email address, and sign-in credentials, when you create an account.
• Purchase information: your name, email, and billing details when you buy a course. Card numbers are submitted directly to our payment processor (Stripe); we never see or store full card numbers.
• Communications: anything you send us through the contact form, by email, or on social media, including appointment or service requests and any health-related details about you or your child you choose to include. We use these only to respond, schedule, and follow up.
• Newsletter signups: your name and email address, if you subscribe.

Information created as you use the Site

• Course activity: your enrollments, lesson progress, quiz results, practice activity (such as practice streaks and reward coins), badges, and certificates.
• Live program recordings: if you join a live cohort coaching program, video calls are recorded, and you (and anyone visible on your camera) may appear in those recordings. Recordings are available only to your cohort and are retained for approximately one year (see Section 8 and the Cohort Coaching Terms of Purchase).

Information collected automatically

• Server logs: our hosting and infrastructure providers automatically process limited technical data (such as your IP address, browser type, and pages requested) to deliver the Site securely, prevent fraud and abuse, and diagnose problems. We do not use this data to build advertising profiles or to track you across other websites.

This website is not the clinical practice’s records system. Karindy Ong also provides clinical services through her clinical practice (see the Services page). Information you submit through this Site, including contact-form messages, is not a medical record. If you or your child become patients of the practice, your clinical records are created and maintained separately, under the practice’s Notice of Privacy Practices and healthcare privacy laws (HIPAA and the Texas Medical Records Privacy Act), not under this Policy. Please do not send urgent clinical information, or detailed medical records, through the contact form.

3. What We Do Not Do

• We do not use third-party analytics or advertising trackers. There is no Google Analytics, no Facebook/Meta pixel, and no cross-site tracking technology on this Site.
• We do not sell, rent, or trade personal information, yours or your child’s.
• We do not show advertisements or share your data with ad networks.
• We do not create accounts for children or collect information directly from children (see Section 7).

4. How We Use Your Information

We use the information described above to:

• create and maintain your account and deliver the courses and programs you purchase;
• save your course progress, practice activity, and rewards so they are there when you come back;
• process payments and send purchase receipts and account emails;
• send you the newsletter and other marketing email only if you asked for it; every marketing email includes an unsubscribe link, and unsubscribing is immediate;
• respond when you contact us;
• keep the Site secure and prevent fraud and abuse;
• keep records we need for legal, tax, or accounting purposes, or to establish or defend legal claims.

5. Who We Share Information With

We share personal information only with the service providers that operate parts of the Site for us. Each receives only the data it needs to perform its function and processes it under its own privacy and security commitments:

• Clerk: account creation and sign-in (name, email address, sign-in credentials).
• Stripe: payment processing. Card details go directly to Stripe; we do not store full card numbers.
• Kit (ConvertKit): newsletter and email-list management (name and email address of subscribers).
• Resend: delivery of transactional email (receipts, account, and course messages).
• Bunny.net: hosting and delivery of course videos, files, images, and cohort call recordings.
• Supabase: secure database hosting for account and course data.
• Vercel: website hosting and content delivery.

Beyond these providers, we disclose personal information only: (a) if required by law, subpoena, or a valid legal process; (b) to protect the rights, safety, or property of the Company, our users, or others; or (c) as part of a sale, merger, or transfer of the business, in which case we will notify you if the transfer results in a material change to this Policy.

6. Cookies

We use only the cookies that are strictly necessary to operate the Site: our sign-in provider (Clerk) sets cookies to keep you securely logged in, and our payment provider (Stripe) sets cookies during checkout to process payments and prevent fraud. We do not use advertising cookies or cross-site tracking cookies, which is why the Site has no cookie consent banner: there is nothing optional to consent to. If you disable cookies in your browser, sign-in and checkout will not work. The Site does not respond to Do Not Track signals (there is no tracking to turn off).

7. Children’s Privacy

Our Site and services are designed for and offered to adults. Accounts may only be created by adults, and we do not create accounts for children or ask children for any personal information: no name, no email address, no profile.

Some course features (such as practice activities and practice rewards) are designed to be used by your child together with you, under your account and your supervision. We may collect and use information about a person under the age of 18 that is provided by that person’s parent or legal guardian through the parent’s own use of the Site. Specifically, that information is: practice activity in the parent’s account (practice streaks, reward coins, which exercises were practiced and when), stored as part of the parent’s account data, not as a child’s profile; and, in live cohort programs, a child’s possible appearance on the parent’s camera in call recordings (see Section 2). We never ask for a child’s name, age, or any other child-specific detail, and no feature of the Site collects information directly from a child.

There are no third-party advertising or analytics trackers on the practice features (or anywhere else on the Site), and we never sell any personal data.

Outside of this parent-supervised, parent-account context, we do not knowingly collect personal information from children under 13 (per the Children’s Online Privacy Protection Act). If you believe a child has provided us personal information directly, contact us at info@myohackerslp.com and we will delete it. Deleting your account deletes all associated practice data (see Section 9).

8. How Long We Keep Information

• Account and course data is kept for as long as your account exists. Deleting your account erases it (Section 9).
• Cohort call recordings are retained for approximately one year after the cohort ends, then deleted, except for any instructor teaching segments retained under the Cohort Coaching Terms of Purchase.
• Newsletter data is kept until you unsubscribe or ask us to remove you.
• Payment and tax records are retained by us and our payment processor for as long as the law requires, even after account deletion.
• Records of your acceptance of legal terms (which document, which version, when, and how you accepted) are retained in pseudonymized form (a masked and hashed email, never your address or name) even after account deletion, so that we can establish what was agreed if a legal question ever arises.
• Contact-form messages and email correspondence are kept as long as reasonably needed to handle the matter and for our business records.

When information no longer serves the purpose it was collected for and no legal retention duty applies, we delete it or dispose of it securely.

9. Deleting Your Account

If you have an account, you can permanently delete it yourself at any time from your account settings (Manage Account → Security → Delete Account). Deleting your account erases your profile, enrollments, course progress, and all practice data (including any child-related practice activity) from our systems, and unsubscribes your email from our list. This is a true erasure, not a deactivation. What remains is limited and pseudonymized: payment and tax records held where the law requires (such as by our payment processor), a masked note that a deletion occurred, and the pseudonymized records of your legal-terms acceptances described in Section 8. None of these records contain your name or full email address. If you do not have an account, or need help, email info@myohackerslp.com and we will process your request.

10. Your Choices and Rights

• Access, correction, deletion: you can see and manage most of your information from your account, and you can ask us at any time to access, correct, or delete personal information we hold about you by emailing info@myohackerslp.com. We will respond to every request; depending on where you live, some of these may also be legal rights.
• Marketing: every marketing email has an unsubscribe link; you can also email us to be removed.
• Recordings: in live cohort programs you may keep your camera off, stay muted, and participate by chat if you prefer not to appear in recordings (see the Cohort Coaching Terms of Purchase).

11. Security

We take reasonable technical and organizational measures to protect personal information: access to personal data is limited to the people and service providers who need it, credentials are managed in secure password managers, and our providers maintain their own security programs. No online service can guarantee perfect security. If a breach of personal data occurs, we will assess its scope and notify affected users and authorities where the law requires it.

12. International Visitors

We are based in the United States and our service providers are located primarily in the United States. If you access the Site from outside the United States, your information will be transferred to, stored, and processed in the United States, where privacy laws may differ from those in your country.

13. Changes to This Policy

When we update this Policy, we will post the revised version on this page and update the “Updated” date below. If a change is material (for example, a change to what we collect or who we share it with), we will notify you before it takes effect, by email to the address on your account and/or a prominent notice on the Site, and where the law requires it we will ask for your consent. We will never apply a material change retroactively to information collected under an earlier version without notice.

14. Contact

This Site is owned and operated by MyohackerSLP, PLLC.

Questions or requests about this Policy: info@myohackerslp.com