Privacy Policy

This Privacy Policy explains how The Assessment Library (operated by Taylor Media Group LLC, a California limited liability company, "we," "us," or "our") collects, uses, shares, and protects information when you use our website and applications (the "Service"). The Service provides story-based DISC personality assessments for adults and children. By using the Service, you agree to the practices described here.

1. Who this policy applies to

This policy applies to everyone who uses the Service: adults who create accounts, parents and guardians who manage child profiles, professional or family "observers" (such as teachers, tutors, coaches, grandparents), and people who are invited to answer questions about someone else. It also covers children whose profiles are created and managed by a parent or guardian — see Section 8 (Children's Privacy).

2. Information we collect

Information you provide

• Account information — name, email address, and a password (stored only in encrypted/hashed form). Observers may also provide an organization or school name.
• Child profiles — when a parent or guardian enables our kids experience, they may create profiles for their children, including a display name, an optional character name, and a kids-mode PIN.
• Assessment responses and results — the answers you select while taking an assessment and the resulting DISC profile (Dominance, Influence, Steadiness, Conscientiousness) and related insights.
• Payment information — when you purchase credits, a subscription, or a report, payment is processed by our payment provider (Stripe). We do not store full card numbers; we retain limited records such as a transaction reference, plan, amount, and status.
• Communications — messages you send through our contact form or by email.

Information collected automatically

• Usage and device data — pages viewed, actions taken, approximate timing, browser/device type, and similar diagnostic information.
• Cookies and local storage — small files and browser storage used to keep you signed in, protect forms, remember preferences (such as kids mode), and measure usage. See Section 7.
• Push notification tokens — if you opt in to notifications, we store the technical subscription needed to deliver them.

3. How we use information

• To create and operate your account and child profiles.
• To deliver assessments and generate your DISC results, narrative story content, and reports.
• To process payments, subscriptions, and credits, and to prevent fraud.
• To enable the observer feature — letting a parent share a child's (or their own) progress with an observer they choose, and letting observers view that progress, set goals, and award in-app rewards.
• To send service messages and, where you opt in, notifications about progress and goals.
• To maintain security, debug problems, and improve the Service.
• To comply with legal obligations and enforce our Terms.

4. How AI is used

Some narrative content (story chapters, assessment scenarios, and certain reports) is generated with the help of third-party artificial-intelligence providers, such as Anthropic and OpenAI. To produce this content, limited inputs — which may include assessment context and a child's display or character name — are sent to these providers' processing systems. We do not use these providers to make automated decisions that produce legal or similarly significant effects about you. We do not sell your information, and we do not permit these providers to use your information to train their general models except as governed by our agreements with them.

5. How we share information

We do not sell personal information. We share information only as described below:

• With observers you authorize — when a parent (or an adult, for their own account) enters an observer's connection key, that observer can see the shared progress and results. Observers cannot see raw answers, payment data, or account credentials, and access can be revoked at any time.
• Service providers (processors) who help us run the Service, including: Stripe (payments), Anthropic and OpenAI (AI content generation), Backblaze B2 (image storage), Google (analytics via Google Tag Manager and reCAPTCHA on forms), MongoDB Atlas (database), and our hosting provider (Heroku). These providers may process information only on our instructions.
• Legal and safety — when required by law, to enforce our Terms, or to protect the rights, safety, and property of our users or others.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

6. Legal bases for processing (EEA/UK users)

Where the EU/UK General Data Protection Regulation applies, we rely on:

• Contract — to provide the Service you request.
• Consent — for optional features such as push notifications, certain analytics, and a parent's consent to process a child's information.
• Legitimate interests — to secure, maintain, and improve the Service, where not overridden by your rights.
• Legal obligation — to meet our legal and regulatory duties.

See our GDPR & Compliance page for more detail and your rights.

7. Cookies & local storage

We use strictly necessary cookies and browser storage to keep you signed in (authentication tokens), protect forms against cross-site request forgery, and remember preferences such as whether kids mode is active. We also use analytics tools (via Google Tag Manager) to understand how the Service is used. You can control cookies through your browser settings; disabling strictly necessary cookies may prevent the Service from working.

8. Children's privacy (COPPA)

The Service includes experiences intended for children, but children do not create their own accounts. A parent or guardian creates and controls the account and any child profiles, and in doing so provides verifiable parental consent for us to collect and use a child's information as described in this policy.

• What we collect about a child: a display name and optional character name, the child's assessment answers and resulting DISC profile, progress and activity (such as streaks, time, and goal progress), and any in-app rewards. We do not require a child's real contact information.
• How it is used: only to provide the assessment experience, show progress to the parent and any observers the parent authorizes, and operate in-app (non-monetary) rewards. Children never make purchases; all payments are made by the controlling adult.
• Parental controls: a parent can view their child's information, correct it, stop sharing with any observer, and request deletion at any time by contacting us or using in-app controls. Exiting kids mode is protected by a parent-set PIN.
• We do not condition a child's participation on disclosing more information than is reasonably necessary, and we do not knowingly allow children to publicly share personal information.

If you believe a child has provided us information without the involvement of a parent or guardian, please contact us and we will delete it.

9. Data retention

We keep information for as long as your account is active and as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When you delete your account or a child profile, we delete or de-identify the associated personal information within a reasonable period, except where retention is required by law (for example, transaction records).

10. Security

We use technical and organizational measures designed to protect your information, including encryption in transit, hashed passwords, access controls, and processing payments through a PCI-compliant provider. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. International transfers

We and our service providers may process information in the United States and other countries. Where we transfer information from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses.

12. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, port, or restrict the use of your information, and to object to or withdraw consent for certain processing. You can exercise many of these directly in your account settings, or by contacting us. We will not discriminate against you for exercising your rights. For details, see our GDPR & Compliance page.

13. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect means you accept the revised policy.

14. Contact us

Taylor Media Group LLC (operator of The Assessment Library)
1667 Grove Rd, El Cajon, CA 92020
Email: support@theassessmentlibrary.com
Or use our Contact page.

---

Questions about this document? Visit our Contact page or email support@theassessmentlibrary.com.