Legal
Terms of Service
Last updated: April 2026
IMPORTANT: By creating an account or using the DaySteps application, you agree to these Terms. If you do not agree, do not use DaySteps.
1. About DaySteps
DaySteps is a routine management application — not a medical device, not a clinical intervention, and not a diagnostic tool. DaySteps does not diagnose, treat, cure, or prevent any medical, psychological, or developmental condition. DaySteps is designed to complement professional care, not replace it.
DaySteps LLC ("DaySteps," "we," "us," or "our") operates the DaySteps application and all associated services, including the DaySteps web application.
2. Account Holders and Eligibility
2.1 Legal Account Holder
The parent or legal guardian who creates an account is the legal account holder and bears full responsibility for account use, including supervising the child's use of the application. Children do not hold accounts — their profiles are managed by the parent account holder.
2.2 Age Requirements
To create a parent, adult, teacher, or Care Team account, you must be at least 18 years of age. Children under 18 may only use DaySteps through a child profile established and managed by a parent or legal guardian.
2.3 Account Types
Seven valid account configurations: Adult · Adult + Teacher · Adult + Care Team · Parent · Parent + Teacher · Parent + Care Team · Child. Teacher and Care Team add-ons are mutually exclusive.
2.4 Guest Classroom Mode
Students may participate in live classroom sessions via the DaySteps web application without any account. Guest participants are completely anonymous — no name, no account, no data. These Terms do not apply to guest participants; there is nothing to agree to.
2.5 Account Accuracy
You agree to provide accurate information when creating your account and to maintain its accuracy. You are responsible for keeping your credentials secure.
3. Children's Profiles and Parental Responsibility
3.1 Consent at Child Profile Creation
A child profile may not be created, and no child data may be collected, until the parent has reviewed the Direct Notice and provided verifiable parental consent in-app. Consent is obtained at the moment of child profile creation — not at account creation. Adult account creation does not constitute consent for child data collection.
3.2 Separate Sharing Consent
Consent to collect and use a child's data does not automatically authorize sharing with teachers or Care Team members. Sharing consent is obtained separately, is specific to each individual connection, and may be revoked at any time. A parent may consent to collection without consenting to any sharing.
3.3 Parental Control and Supervision
The parent account holder maintains full administrative control at all times: approve or revoke connections, configure progression settings, view all child data, and delete the account. The parent account holder is solely responsible for supervising the child's use of DaySteps and for ensuring use is appropriate for the child's age and developmental level.
4. Acceptable Use
4.1 Permitted Use
- Parents and guardians: creating and managing daily routines for their children
- Children: executing routines assigned by their parents
- Teachers: supporting classroom routine management for students whose parents have connected and consented
- Care Team members: supporting clients whose parents have connected and provided explicit sharing consent
- Adults: personal routine management
- Students: anonymous guest viewing of live class routines via the web app
4.2 Prohibited Use
The following uses are prohibited and constitute grounds for immediate account termination.
- Using DaySteps to diagnose, treat, cure, or prevent any medical condition — DaySteps makes no clinical claims and is not a medical device
- Entering ICD codes, CPT codes, DSM diagnostic codes, clinical assessment scores, treatment plan templates, prescriptions, or any clinical documentation into DaySteps — DaySteps is not an electronic health record
- Sharing a child's data with any person other than those explicitly authorized by the parent through the app's connection system
- Creating child profiles without parental authorization
- Impersonating any person or misrepresenting professional credentials
- Reverse-engineering, decompiling, or attempting to extract source code
- Using DaySteps in violation of COPPA, FERPA, HIPAA, PIPEDA, Quebec's Law 25, or any applicable law
4.3 Care Team Member Obligations — Facilitators Only
Care Team members are facilitators of parent-controlled care coordination. They have no independent authority over a child's account, routines, or data. All suggestions require parent review and approval before taking effect.
- Use child data only for the child's direct benefit in the purpose for which the parent granted access
- Maintain all clinical records, treatment notes, assessment results, and diagnostic information in your own professionally appropriate system — not in DaySteps
- DaySteps suggestions are recommendations for routine adjustments — not clinical orders, prescriptions, or treatment directives
- Do not re-disclose, combine, or use child data for any purpose beyond care coordination for that specific child
- Your professional obligations and standards of care remain your own — DaySteps does not alter them
- DaySteps is not a HIPAA covered entity or business associate. Clinical HIPAA obligations belong to the clinician's own practice.
4.4 Teacher Obligations — Facilitators Only
Teachers are facilitators of classroom routine support. They have no independent authority over a child's account or personal data beyond the completion status of class routines.
- Use student data only for educational purposes directly benefiting students whose parents have connected
- Do not use student data for targeted advertising, profile-building for non-educational purposes, or any purpose prohibited by California SOPIPA or applicable state student privacy laws
- Comply with your institution's data governance policies
- Do not access or attempt to access data for students whose parents have not connected
5. Data and Privacy
Your use of DaySteps is governed by the Children's Privacy Policy (daysteps.app/privacy) and Written Data Retention Policy (daysteps.app/retention), incorporated by reference.
Before parental consent, only minimal information is collected — the parent's email address and the child's nickname. No behavioral or activity data is collected prior to consent.
- We do not sell personal information
- We do not use personal information for advertising
- All data stored in Canada (Supabase ca-central-1, AWS Montreal)
- Parental consent required before any child data is collected
6. Intellectual Property
DaySteps LLC owns all intellectual property rights in the DaySteps application. You retain ownership of content you create (routines, settings). By using DaySteps, you grant DaySteps LLC a limited license to store, process, and display your content solely for the purpose of providing the service.
The Mulberry Symbol library is licensed under CC BY-SA 4.0. Attribution: Mulberry Symbols, Cate Sweeney (Straight Street).
7. Disclaimers
DaySteps is not a medical device. It makes no claim to diagnose, treat, cure, or prevent any medical or developmental condition. DaySteps' clinical design principles are grounded in peer-reviewed research, but DaySteps' specific implementation has not been independently validated in a clinical trial. DaySteps must complement — not replace — professional evaluation and care.
DaySteps guarantees no specific outcome, improvement, or result. Results vary based on the individual child and many factors outside DaySteps' control.
DaySteps is provided 'as is' and 'as available.' We reserve the right to modify, suspend, or discontinue the service at any time with reasonable notice.
8. Limitation of Liability
To the maximum extent permitted by applicable law, DaySteps LLC shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising out of your use of, or inability to use, DaySteps.
DaySteps LLC's total liability for any claim shall not exceed the amount you paid to DaySteps LLC in the twelve months preceding the claim.
9. Indemnification
You agree to indemnify, defend, and hold harmless DaySteps LLC and its officers from any claims, damages, liabilities, costs, and expenses (including reasonable legal fees) arising out of or related to: (a) your use of DaySteps in violation of these Terms; (b) your violation of any applicable law or third-party right; or (c) any content you submit through DaySteps.
10. Account Termination
10.1 Termination by You
Delete Account via Settings at any time. All personal data (excluding consent and audit records) is permanently deleted. Irreversible.
10.2 Termination by DaySteps
DaySteps LLC may suspend or terminate your account for violation of these Terms, provision of false information, or if your use poses a risk to children or to the integrity of the service. Reasonable notice will be provided except where immediate termination is required to protect children or comply with law.
10.3 Effect of Termination
Upon termination, your right to use DaySteps ceases immediately. The parent account holder's termination results in deletion of all associated child profiles. Child profiles cannot exist independently of a parent account.
11. Governing Law
12. Changes to These Terms
We may update these Terms from time to time. For material changes, we will notify you through the app and update the effective date. For changes materially affecting children's privacy or parental rights, we will provide 30 days' advance notice and, where required, obtain fresh parental consent.
13. Contact
Privacy Officer: Michael Kessler | daysteps.app">privacy@daysteps.app | daysteps.app