Privacy Policy

Effective Date: October 23, 2026

1. Introduction

MindfulBytes ("we," "us," or "our") is a K-5 digital wellness program operated by Merek Security Solutions, LLC. Merek Security Solutions serves as the data controller for all information collected through this website (mindfulbytes.io). We are committed to protecting the privacy of children, students, educators, and all visitors to our website.

2. Student Data (FERPA)

MindfulBytes is designed to operate within educational environments. This website collects no student data, and we follow these principles in line with the Family Educational Rights and Privacy Act (FERPA):

• We do not collect, store, or process student education records.
• Our program materials are delivered through schools and do not require student accounts or logins.
• No personally identifiable information (PII) from student education records is collected through this website.
• School administrators maintain full control over how MindfulBytes materials are used in their classrooms.
• We do not share any data with third parties for commercial purposes.

3. Children Under 13 (COPPA)

This website is built so that it collects no personal information from children, in line with the Children's Online Privacy Protection Act (COPPA):

• This website is not directed at children under 13 and does not knowingly collect personal information from children.
• Our K-5 program content is delivered through schools and educators, not directly to children online.
• No child accounts, profiles, or interactive features requiring personal information are offered on this website.
• If we become aware that personal information from a child under 13 has been collected without verified parental consent, we will delete that information immediately.
• Parents or guardians may contact us at michael@merek.io to inquire about any data that may have been inadvertently collected.

4. Research With Children

The MindfulBytes program is also studied, so that what children learn in class can be measured well. This section explains how that research protects the children in it. It covers program data from lessons, which is separate from this website: as stated above, this website collects no student data.

Ethics review. The current study, “Measurement Design for Digital Wellness Assessment,” was reviewed and approved by the New Mexico Institute of Mining and Technology (New Mexico Tech) Institutional Review Board in August 2026. It is led by a principal investigator at New Mexico Tech. Merek Security Solutions, LLC is the curriculum provider and data custodian. Parents' and guardians' written permission forms for the study are held and maintained by the participating school.

What the research uses. The study is records-based: it analyzes reflections and survey responses that students already completed during normal MindfulBytes lessons, to help build the Digital Wellness Assessment, a tool for measuring children's relationship with technology. No new activity is asked of any child for this study. The surveys cover technology habits, feelings about lessons, and awareness of digital experiences. They do not ask about mental health conditions or diagnoses, family income, political beliefs, religious practices, sexual behavior, illegal activity, or privileged relationships.

How children's information is protected.

• Surveys may be completed with student ID numbers rather than names.
• Records are encrypted at rest and in transit, with access limited by role.
• Before any data reaches the research team, the data custodian removes names, the links between names and ID numbers, and anything else that could reasonably identify a child.
• The New Mexico Tech researchers work only with de-identified data and never have access to identifiable student information.
• Results are reported only in aggregate. Individual responses are never sold, shared with third parties for commercial purposes, or used for marketing.
• De-identified research data is kept for at least three years after publication. Any remaining identifiable elements are permanently destroyed once analysis is complete.

Your choice. Participation in the research is voluntary. A parent or guardian may decline, or withdraw their child's data from the analysis at any time, and doing so does not affect the child's participation in MindfulBytes lessons in any way. If a future version of the Digital Wellness Assessment is given in class, participation will be voluntary, children may skip any question, and families will be notified in advance. To ask a question or withdraw your child's data, contact us at michael@merek.io and we will connect you with the New Mexico Tech research team. You may also contact the New Mexico Tech Institutional Review Board directly about your rights as a participant.

The MindfulBytes Fellowship. The Fellowship is a classroom program now in its pilot year, developed with our partner school. Children take part in it the same way they take part in any MindfulBytes lesson, as part of classroom instruction. Any use of Fellowship work in research follows the same ethics review, de-identification and family choice described above.

5. Data Collection Disclosure

MindfulBytes.io collects minimal data. The only mechanism for data collection on this website is our contact form, which collects:

• Full name
• Email address
• Organization name (optional)
• Role/title (optional)
• Message content

This information is used solely to respond to inquiries about the MindfulBytes program. We do not use this data for marketing, profiling, or any purpose beyond responding to your inquiry.

6. Cookies and Tracking

MindfulBytes.io does not use cookies. We do not use any third-party analytics services (such as Google Analytics), tracking pixels, advertising trackers, or any other form of user tracking technology. Your visit to this website is not tracked or monitored.

7. Third-Party Services

This website does not integrate any third-party analytics, advertising, or tracking services. The site is hosted on Vercel, which may collect standard server logs (IP address, browser type, access times) as part of its hosting infrastructure. These logs are managed by Vercel in accordance with their privacy policy and are not accessible to or used by MindfulBytes.

Contact form messages are delivered to us by email through Resend, an email delivery service. Links to book a conversation open Google Calendar's appointment page, and newsletter links open Beehiiv's signup page; each of those services handles what you enter there under its own privacy policy.

8. Data Retention and Deletion

Contact form submissions are retained only as long as necessary to respond to inquiries, typically no longer than 90 days. After this period, submissions are permanently deleted.

You may request deletion of your data at any time by contacting us at michael@merek.io. We will process deletion requests within 30 days.

9. Data Security

We implement appropriate technical and organizational security measures to protect any personal information submitted through our contact form. All data transmission is encrypted via TLS/SSL. Access to submitted data is restricted to authorized MindfulBytes personnel only.

10. Your Rights

You have the right to:

• Request access to any personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent for data processing at any time

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

12. Contact Information

For questions, concerns, or data requests related to this privacy policy, please contact: