Neurodiversity Foundation Privacy Policy

Effective Date and Last Updated: October 25, 2026

The Neurodiversity Foundation ("NDF," "we," "us," or "our") respects Your privacy. This Privacy Policy explains how we collect, use, share, and protect information about You when You use www.iamnd.org and its subdomains (including portal.iamnd.org and ai.iamnd.org), any NDF mobile application, and any other online service that links to this Privacy Policy (together, the "Site"), and the programs and features offered through the Site (the "Services"). Capitalized terms not defined here have the meanings given in our Terms of Use. This Privacy Policy is part of our Terms of Use.

1. Information We Collect

Information You give us. Depending on how You use the Site, this may include:

• Account and contact information, such as Your name, email address, phone number, mailing address, username, password, and communication preferences.
• Guided Intake and assessment information, such as Your answers to NeuroTraits and other assessments, information about traits, strengths, challenges, sensory needs, goals, and life domains, and the results we generate. Some of this information may relate to Your health or neurotype.
• AI conversations, meaning the messages You send to AI Features and the AI Output You receive.
• Information about family members, such as information a parent or legal guardian provides about a minor child, or that You provide about an adult You are authorized to act for.
• Membership, donation, and purchase information, such as membership level, donation history, billing address, and purchase history. Payments are processed by third-party payment processors.
• Communications and community content, such as messages You send us, feedback, survey responses, and content You post in Forums.
• Coaching and program information, such as notes and goals related to Neurodivergent Coaching Services or other NDF programs You join.

Information we collect automatically. When You use the Site, we and our service providers may collect technical information, such as Your IP address, browser and device type, operating system, pages viewed, links clicked, referring website, and the date and time of Your visit. We collect this information using cookies and similar technologies (see Section 10).

Information from others. We may receive information about You from a parent, guardian, or other authorized person who uses the Site on Your behalf, from research partners when You have consented to a study, or from OptimalMD when You authorize it.

You do not have to give us information, but if You choose not to, some Services may not work.

2. How We Use Information

We use information to:

• create and manage Your Account and membership;
• provide Guided Intakes, assessments, AI Features, coaching, Forums, and other Services, including AI generated analysis of Your assessment results;
• keep Your assessment results and AI conversations so You can return to them and receive guidance over time, with or without AI;
• connect You with partner resources and NeuroCares when You ask us to;
• display crisis resources and protect the safety of users and others;
• process memberships, donations, and purchases, and send donation acknowledgments;
• send You information about Your Account and the Services and, with Your consent, newsletters, event invitations, and program updates;
• understand how the Site is used and improve the Services, including our AI Features, using de-identified or aggregated information wherever practical;
• conduct research, but only with Your separate informed consent when the research uses identifiable information about You as a research subject;
• secure the Site, prevent fraud and misuse, and enforce our Terms of Use; and
• comply with the law and respond to lawful requests.

We do not use identifiable health information You provide to train AI models made available to third parties without Your consent.

3. AI Features and Your Information

• Storage. We store Your AI conversations and assessment results in Your Account so that You can return to them.
• Human review. NDF personnel do not read Your AI conversations except in a crisis situation, to aid emergency or clinical personnel, or when required by law.
• Crisis situations. If Your messages suggest a possible crisis, the AI Feature displays crisis resources immediately. In a crisis situation, authorized NDF personnel may review the relevant conversation and share necessary information with emergency or clinical personnel when we believe in good faith that it is necessary to protect someone's life or safety.
• NDF's own servers. Our AI Features run on servers that NDF owns and operates. Your AI conversations are not sent to outside AI companies, and they are not used to train AI models offered by anyone else. Any vendor that helps NDF maintain these systems may access information only to provide services to NDF, under a written agreement that prohibits any other use.
• Improvement. We may use de-identified or aggregated information to improve our AI Features.
• What not to share. Please do not enter passwords, government identification numbers, or financial account numbers into AI Features.

4. AI Tools: My ND Guide™ and NeuroTraits™

IamND includes two AI-assisted tools, available on the Site and in the IamND mobile app:

• My ND Guide™ provides educational information and AI-assisted guidance related to neurodiversity.
• NeuroTraits™ helps You explore personal characteristics associated with autism, ADHD, and other neurodevelopmental differences, for education and self-reflection.

These tools run on AI models hosted on IamND's own servers (ai.iamnd.org). They do not send Your Personal Data to any third-party AI company.

What we collect. When You use these tools, we collect:

• Your name, email address, and IamND member ID, which we use to sign You in;
• the messages You type, including any health information You choose to share, such as symptoms;
• Your answers to assessments;
• voice input, if You use voice features;
• photos or images You choose to share; and
• Your conversation history and the date and time of Your sessions.

How we collect it. Your name, email address, and member ID come from Your IamND account when You open an AI tool. Everything else comes directly from You when You type, speak, or upload something. The IamND mobile app uses Your device's microphone or camera only after You give permission, and You can turn this off at any time in Your device settings. Each time You open the AI tools in the app, we show a notice explaining how this information is used, and You must agree before continuing.

How we use it. We use this information to:

• respond to You and provide the AI tools;
• keep Your conversation history so You can return to it;
• keep the service secure, fix problems, and prevent misuse; and
• [improve the quality of the AI tools' responses].

We do not sell this information, use it for advertising or marketing, or share it with affiliates. The affiliate and marketing uses described elsewhere in this Privacy Policy do not apply to information You share with the AI tools.

Who can access it. Information You share with the AI tools is processed only on IamND's own servers and is not shared with any third-party AI company. Our hosting and technical service providers may access it only as needed to operate the service, under the protections described in this Privacy Policy. We may also disclose it when required by law, as described in Section 7.

How long we keep it. We keep Your conversation history [for as long as Your account is active], unless You ask us to delete it. To request a copy or deletion, email [email protected].

The AI tools provide information and support, not medical advice, diagnosis, or treatment, and do not replace care from a licensed healthcare provider. If You are experiencing a medical emergency, call 911.

5. IamND Mobile App

When You use the IamND mobile app, we collect the Personal Data in Your account, and also:

• a push notification identifier, through our notification provider OneSignal, so we can send You notifications (You can turn these off in Your device settings);
• photos You choose to upload, for example for Your profile;
• microphone and camera input, only with Your permission, for the AI tools' voice and image features;
• Your location, only with Your permission and only when a feature asks for it; and
• basic device, app, usage, and diagnostic information, such as device model, operating system, and app version, to support the app and fix problems.

We use this information only to provide and support the app and its services. We do not use the app to track You across other companies' apps or websites.

6. How We Share Information

We do not sell Your Personal Data, and we do not share it for targeted advertising. We share information only as described below:

• Service providers. We share information with companies that provide services to NDF, such as website and data hosting, email and text messaging, payment processing, analytics, and customer support. They may use the information only to provide services to NDF under written agreements.
• OptimalMD and NeuroCares. When You choose to enroll in NeuroCares, we share only Your name, email address, phone number, and date of birth with OptimalMD so it can enroll You. We share other information, such as assessment results or AI conversations, only if You direct or authorize it, or in a crisis situation as described in Section 3. OptimalMD handles Your information under its own privacy practices and notice of privacy practices. OptimalMD does not share Your clinical records with NDF unless You authorize it or the law permits or requires it.
• Partners. We share information with a Partner only when You ask us to connect You with that Partner, or with Your consent.
• Research partners. We share identifiable information with research partners only as described in a research consent You sign. We may share de-identified or aggregated information for research and education.
• People You authorize. We share information with a parent, guardian, or other person You authorize, and we share a minor's information with that minor's parent or legal guardian.
• Safety and legal reasons. We may share information when we believe in good faith that it is necessary to protect someone's life or safety, to comply with law or legal process, to respond to lawful requests from government authorities, to investigate fraud or security issues, or to protect the rights and safety of NDF, our users, and the public.
• Organizational changes. If NDF merges with, transfers its programs to, or reorganizes with another organization, information may be transferred to that organization, which will be required to protect it consistent with this Privacy Policy.
• Forums. Content You post in Forums may be seen by other members. Please do not post detailed health information in Forums.

Text messaging. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

Donors. We do not sell, rent, or trade donor names or contact information.

7. Service Providers and Other Disclosures

From time to time, we may contract with third parties to provide services on our behalf to maintain and add functionality to our Site, host our systems, analyze data, send push notifications, provide marketing and customer assistance, and provide other services including, but not limited to, the ability to send, receive or view text, data and video messaging or communications. The Personal Data that we obtain through this Site may be accessed by these third parties as necessary to perform their functions, solely on our behalf, but we generally do not authorize these service providers to make any other use of Your Personal Data. We require these service providers to give Your Personal Data the same or equal protection as described in this Privacy Policy, and to use it only to provide services to us. By accepting to be bound by the Terms of Use You are consenting to our disclosure of such information to such third parties. We may also use data we have about You (such as the interests and preferences You have expressed) to determine whether You might be interested in career opportunities of a particular third party. We may also disclose Personal Data to financial institutions or other third parties in connection with performing payment transactions. We do not otherwise disclose Your Personal Data to third parties, unless such disclosure is required by law, necessary in connection with a legal claim or proceeding, necessary to protect the rights or interests of NDF or third parties, necessary to prevent a crime or protect national security, or necessary to protect the personal safety of users or the public. We cooperate with law enforcement agencies in identifying those who may be using our servers or services for illegal activities.

We reserve the right to disclose information submitted by or concerning any Member, as we reasonably believe is necessary to protect our systems or business. Specifically, but without limitation, we reserve the right to disclose such information when a Member is in violation of our Terms of Use or other published guidelines, or partakes (or is reasonably suspected of partaking) in any harmful, infringing or illegal activity, even without a subpoena, warrant, or other court order. We also reserve the right to report any suspected illegal activity to law enforcement for investigation or prosecution, or to suspend or terminate Your membership in connection with any suspected illegal or infringing activity.

8. Health Information and HIPAA

NDF is not a health plan or healthcare provider, so information You provide directly to NDF is generally not "protected health information" under the Health Insurance Portability and Accountability Act (HIPAA). Information You provide to OptimalMD as part of NeuroCares is handled by OptimalMD under its own privacy practices.

Even where HIPAA does not apply, we treat health-related information, including assessment results and information about neurotype, as sensitive. We collect, use, and share it only to provide the Services You request, with Your consent, or as permitted or required by law. Assessment results are not diagnoses, as explained in our Terms of Use.

9. Consumer Health Data Notice

Some states, including Washington, Nevada, and Connecticut, have laws protecting "consumer health data." Information You give us about Your health, traits, or neurotype may be consumer health data under those laws. For residents of those states, and as our general practice for everyone:

• What we collect: the health-related categories described in Section 1, such as assessment answers and results, Guided Intake information, and AI conversations about health or neurotype.
• Why we collect it: to provide the Services You request, including assessments, AI generated guidance, and connections to resources, and to keep users safe.
• Where it comes from: from You, or from a parent, guardian, or other person authorized to act for You.
• Who we share it with: service providers acting for NDF, and others only as described in Section 6. We do not share consumer health data with OptimalMD when You enroll in NeuroCares; enrollment uses only Your name, email address, phone number, and date of birth. We share health-related information with OptimalMD only if You direct it or in a crisis situation.
• Consent: we collect and share consumer health data only with Your consent or as necessary to provide the Service You requested, and we never sell it.
• Your rights: You may confirm whether we hold Your consumer health data, see it, request a list of the third parties we shared it with, withdraw consent, and request deletion, as described in Section 12.

10. Cookies and Similar Technologies

We use cookies and similar technologies to keep You signed in, remember Your preferences, keep the Site secure, and understand how the Site is used. We may use analytics service providers that collect information about Your use of the Site on our behalf. We do not use cookies to show You targeted advertising on other websites.

You can set Your browser to refuse or delete cookies. If You do, some features of the Site may not work properly.

11. Children and Family Accounts

You must be at least 18 years old to create an Account. The Site is not directed to children under 13, and we do not knowingly collect personal information directly from children under 13.

A parent or legal guardian may provide information about a minor child to use Guided Intakes, assessments, and other Services for that child. The parent or guardian may review, correct, or delete the child's information, or ask us to stop using it, by contacting [email protected]. If we learn that we collected personal information directly from a child under 13 without verified parental consent, we will delete it.

12. Your Choices and Rights

Regardless of where You live, You may ask us to:

• confirm whether we hold information about You and give You access to it;
• correct inaccurate information;
• delete Your information or close Your Account;
• give You a copy of Your information, including Your assessment results, in a portable format;
• withdraw consent You previously gave, such as consent to a research study or to share information with OptimalMD or a Partner; and
• stop sending You marketing emails or text messages.

To make a request, contact [email protected]. We will verify Your identity before acting on a request, and we will respond within 45 days, or sooner if required by law. An authorized agent may make a request for You with proof of authority. If we deny Your request, You may appeal by replying to our decision, and we will respond to Your appeal within the time required by law. We will not treat You differently for exercising Your rights.

You can unsubscribe from marketing emails using the link in any email, and You can reply STOP to any text message to opt out. We may still send You messages about Your Account and transactions.

Some information may be kept after a deletion request where the law requires it, for example donation records, or where it has already been de-identified.

13. How Long We Keep Information

We keep Your Account information, assessment results, and AI conversations for as long as Your Account is open, so that You can return to them. When You close Your Account or ask us to delete Your information, we delete or de-identify it within a reasonable time, unless we must keep it to comply with law, resolve disputes, or enforce our agreements. We keep donation and financial records for as long as required by tax and accounting rules. Research data is kept as described in the applicable research consent.

14. How We Protect Information

We use reasonable administrative, technical, and physical safeguards designed to protect Your information, including encryption of information in transit to and from the Site and access limited to people who need it to do their jobs. No system is completely secure, and we cannot guarantee absolute security. If a security breach affects Your information, we will notify You and others as required by law.

Please protect Your password and sign out on shared devices. Contact [email protected] right away if You believe Your Account has been compromised.

15. Where Information Is Stored

We store and process information in the United States. If You use the Site from outside the United States, You understand that Your information will be transferred to and processed in the United States, where privacy laws may differ from those in Your country.

16. Links to Other Websites

The Site may link to websites and services run by others, including Partners and OptimalMD. Their privacy practices are governed by their own policies, not this one. Please review them before sharing information.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on the Site and change the date at the top. If we make material changes, we will notify You by email or a notice on the Site before the changes take effect. We will not use information we already collected in a materially different way without Your consent.

18. Contact Us

If You have questions or requests about this Privacy Policy, please contact us at:

Neurodiversity Foundation

15002 Lakefair Drive

Richmond, TX 77406

Email: [email protected]

Website: www.iamnd.org