Your information stays yours.

Beyond Typical is a California nonprofit public benefit corporation. Our application for recognition as a 501(c)(3) organization is pending. EIN 43-2235528.

When this policy says "we" or "us," it means Beyond Typical. The site is beyondthetypical.org.

You can read the guides and the public pages without an account. We ask for information when it helps us run the community, keep you signed in, or reply to you.

Account

If you create an account, we collect your email address and a display name. If you sign up with a password, our sign-in provider stores that password as a protected credential. We do not see it. You can also choose “Continue with Google.” Google then shares the basic account details needed to sign you in, usually your name and email. We never receive your Google password.

We use this to create your account, let you back in, and send a password-reset email when you ask for one. Those account emails come from the sign-in provider.

Profile

After you join, you can tell us what to call you, a short intro, pronouns, and whether you are here as a parent, guardian, caregiver, or another role. You can add a city, state, and ZIP code, and an avatar (an emoji or a photo you upload). You can also share a child’s age range and, if you want, a first name and age. You can tell us why you joined and which topics you are navigating, such as school, therapy, or daily life.

We use that to show a member card, to suggest groups and guides, and to pre-fill your state on the resource finder when you are signed in. The card other members can see includes your display name, avatar, city, and state. Your ZIP code, intro, bio, pronouns, journey notes, and any child details you add stay on your account. They are not placed on that member card. People who operate the site can see account details they need to run the community and answer a request from you.

Community

If you join a group, post, reply, react, or report a post, we store that. Posts and replies are tied to your account and shown with your display name. A private group can ask you to request to join, and we store that request and any note you include. Moderators can see reports and membership so they can apply the community guidelines.

Notifications and saved resources

You can choose in-app alerts, and whether we email you when someone replies or reacts. Those emails are about your account. They are sent through our host’s email service from Beyond Typical. There is no newsletter signup on this site, and we do not keep a mailing list.

If you save a listing from the resource finder, we store that on your account so you can find it later.

When you write to us

There is no contact form. If you email renee@beyondthetypical.org, we keep the message so we can reply. If you mail a check, include your name and email so an acknowledgment can be prepared. The donate page does not charge a card or record a gift online.

What stays on your device

The guide quiz keeps your answers in the page while you use it. It does not send them to us. Guide checklists are saved only in this browser, under a name that starts with kindred:checklist. Resource searches live in the page address on your device. We do not keep a search history for visitors who are not signed in.

What this site does not collect yet

Meetup RSVP buttons, the sensory shop, and grant applications are not taking submissions through the site. Online donations are not open. We have not installed an analytics product, an advertising pixel, a map, or a video player.

Technical data

Delivering the site means our host and database receive ordinary connection data, such as an IP address, browser type, and the page you requested. We use that to run and protect the site. We do not use it to advertise to you.

We do not use advertising cookies, and we have not installed analytics. The sign-in session lives in this browser’s local storage so you can stay signed in. That storage is essential, and it is always allowed. Signing out clears it.

Guide checklist progress is also local storage, and it stays on your device. We do not receive it.

The banner at the bottom of the site stores your choice in local storage under bt-consent. It remembers whether you allowed optional analytics. Nothing analytics-related loads today. If we add a privacy-respecting analytics tool later, it will load only after you choose Accept all or turn optional analytics on. Rejecting non-essential storage leaves analytics off.

You can change this anytime with Cookie settings in the footer. You can also clear site data in your browser.

We do not sell personal information. We do not share it for cross-context behavioral advertising, and we do not rent a mailing list.

We share information only in these ways:

• With other members, when you post or show a member card in the community.
• With moderators and the people who operate Beyond Typical, so they can run the site and enforce the community guidelines.
• With the service providers named below, and only for the work we ask them to do.
• When the law requires it, or when we need to protect someone from serious harm.
• When you ask us to, for example so we can acknowledge a gift you mailed.

• Supabase, through Lovable Cloud, stores accounts, profiles, community posts, and avatar photos, and it sends account emails such as password resets.
• Google is involved only if you choose Continue with Google. Google’s own privacy policy applies to that sign-in.
• Lovable email sends community notification emails when you leave that setting on. These are messages about activity on your account, not a newsletter.
• Fonts — Work Sans, Instrument Serif, and JetBrains Mono — are part of the site. We do not load them from a third-party font service.
• Facebook and Instagram appear as links. We do not embed their buttons or tracking pixels. If you follow a link, you are on their site, under their policy.
• Payments, later. Online giving is not open. When it is, a third-party payment processor will handle the payment under that company’s privacy policy. The sensory shop is not open. When it is, a third-party shop will process the order under that company’s policy. We do not store full card numbers on this site.
• Error reports. If a page fails, our host may receive an error report with the page address and a description of the error, so we can fix it. That is not a visitor-analytics product, and we have not added one.

We keep account and profile information while your account is open. Community posts stay until you delete them, or until a moderator removes them under the guidelines. Notification records stay so that feature can work.

If you ask us to delete your account, we will delete the account and profile and remove or detach your posts and comments. We may keep a limited record when we have to, such as an acknowledgment for a mailed gift, or a moderation note about a safety issue.

A sign-in session lasts until you sign out or it expires. Checklist progress and your cookie choice stay in your browser until you change them or clear site data. Hosting logs stay for as long as our host keeps operational logs. We do not keep an analytics archive, because we do not run analytics.

There is no delete button in the account page yet. Email renee@beyondthetypical.org and we will handle the request.

The site is served over HTTPS. Sign-in is handled by our account provider, and member discussions require an account. No website can promise perfect security. Please keep a child’s full name, school, address, and medical records out of the community.

You can update your profile from your account page, turn notification emails off from the notifications page, delete your own posts, sign out, and reopen cookie settings from the footer.

California residents (CCPA / CPRA)

If you live in California, you can ask us to:

• Tell you the categories and specific pieces of personal information we have collected about you
• Correct information that is inaccurate
• Delete personal information, with the exceptions the law allows
• Opt out of the sale or sharing of personal information
• Limit the use of sensitive personal information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We will not discriminate against you for asking.

Email renee@beyondthetypical.org with the subject "Privacy request." We will confirm we are writing with the account holder. An authorized agent may ask for you if they have written permission and we can verify you. We aim to respond within 45 days.

Depending on what you choose to give us, the categories are identifiers (name, email, account id), the city, state, or ZIP you type (not GPS), a profile photo, community activity such as posts, memberships, and saved resources, and family or diagnosis details you volunteer. We collect these to run the site, as described above, and we keep them for the periods in the retention section. We do not use sensitive information to make automated decisions about you.

CalOPPA

This policy says what we collect, which third parties process it, and how you can review it or ask for a change: your account page when you are signed in, or an email to us. The effective date is at the top of this page.

Do Not Track and Global Privacy Control

Some browsers send a Do Not Track signal or a Global Privacy Control signal. We treat either signal as a request to keep non-essential analytics off, and the banner starts with that choice off. We do not sell or share personal information, so there is no sale for the signal to stop. If you later press Accept all, or turn optional analytics on and save, we store that choice on your device. Until you do, we will not load optional analytics.

This site is for parents and caregivers. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. The Children's Online Privacy Protection Act (COPPA) covers sites directed to children. This one is aimed at the adults who care for them.

A parent may choose to mention a child’s first name or age in a profile, or to talk about a child in the community. That is the parent sharing it. Please keep children from creating an account.

If you believe a child under 13 has given us personal information, email renee@beyondthetypical.org and we will delete it.

Families sometimes share health and diagnosis details, because that is why they came. Share only what you are comfortable having other members read. The community guidelines ask everyone to skip a child’s full name, school, identifying photos, and medical records.

What you post in a group is visible to other members of that group and to moderators. It is stored with the rest of the community data. We do not use it for advertising, and we do not sell it. You can delete your own posts. You can ask us to delete your account.

If we change this policy, we will update the effective date at the top. If a change meaningfully affects your account, we will also say so on this page. The current version is always at beyondthetypical.org/privacy.

Privacy questions and requests go to renee@beyondthetypical.org.

Effective October 8, 2026.