Last updated 29 September 2026
MeltdownDecoder helps parents log their child's meltdowns and good days and share a clear picture with their care team. The information is sensitive, so this page says plainly what we collect, why, and what you can do about it.
Your account: your email address, your name if you add it, and your password (stored only as a secure hash by our authentication provider).
What you log about your child: the child's first name, and optionally age, date of birth and diagnosis notes; meltdown events (date, time, intensity, warning signs, triggers, location, duration, the calming strategy you tried and how well it worked, what helped, notes); nightly check-ins; good days; medications; weekly goals; and, only if you turn it on, cycle dates.
Share links: when you create a link for a clinician, the name and email you enter for them.
Payment: if you unlock the full app, payment is handled by Stripe and we never see your card number. We keep a record of the purchase: Stripe's payment and customer references, the amount, currency and status, and the email used at checkout.
Usage: Google Analytics records which pages are visited (their web addresses) and basic events such as signing in, using cookies. It is not loaded on shared report links, and it does not receive the entries you log about your child.
To run the app for you: show your timeline, trends and summaries, keep you signed in, and unlock paid features. Usage data helps us understand which parts of the app are used so we can improve them. We do not sell your data and we do not use what you log about your child for advertising.
Your account and everything you log is stored with Supabase (database and sign-in). Payments go through Stripe. Page analytics go to Google Analytics. Feedback you send is copied to GitHub (see below). Fonts are loaded from Google Fonts, which sees your IP address when it serves them. Each of them processes data only to provide their service to us.
If you use “Speak instead” to dictate a note, your browser's own speech recognition turns your voice into text (Chrome sends the audio to Google for this, Safari to Apple). We only receive the text you save; we never record or store audio.
When you use “Send feedback”, we store your message in our database, linked to your account. We also copy it into our private issue tracker on GitHub (GitHub, Inc., in the United States) so we can work on it. That copy includes your message, the page you were on, your browser and the app version, but not your name, email address or account id. Please don't include private details about your child in feedback.
If you choose “Chat with us on WhatsApp”, that conversation happens in WhatsApp (Meta), under WhatsApp's own privacy policy. We see your phone number and what you send us there, and use it only to help you.
Nothing is shared unless you create a share link. A share link gives anyone who has it read-only access to your child's timeline, limited by the access level you choose (all entries, the last 30 days, or school hours only). It shows entries as they are now, including ones you log after creating the link. Links set to 30 days stop working after 30 days; you can revoke any link at any time from the share window.
Cycle data is excluded from BCBA reports unless you include it. We record when a shared link is opened so we can let you know.
Exports and printed summaries are created in your browser and saved on your device.
We use a cookie to keep you signed in, and Google Analytics uses cookies to count visits. The app does not work without the sign-in cookie.
MeltdownDecoder is for parents and caregivers, not for children to use. The information about a child is entered by their parent or caregiver, who controls it.
We keep your data while your account exists. You can delete a child's profile and all of its entries yourself in Settings. To delete your whole account, or to ask for a copy of your data, email us and we will do it.
Questions or requests: hello@meltdowndecoder.com. If this policy changes, we'll update the date above.