legal: reconcile Terms with locked 18+ and never-auto-contact decisions; add Privacy Policy

The published Terms directly contradicted two locked safety decisions and the
shipping app copy, and the in-app Privacy Policy link 404'd. Both are legal
exposure under CA SB 243 (companion chatbots) and the AI-companion litigation.

Terms (§1, §11):
- Add an explicit "you must be 18 or older" eligibility statement. The old §11
  permitted "Children 13 and over" independently and under-13 via family
  accounts — the exact minor path the app's age gate forbids and the litigation
  epicenter targets.
- Replace §11 "Children and Family Accounts" with an honest "Safety Features"
  section. Removes the Hard Bell auto-notify block ("emergency services and
  trusted contacts are notified first", "cannot be changed") and the
  mandatory-reporting clause ("emergency services or relevant authorities may
  be contacted", "cannot opt out") — both promised an automatic escalation the
  product does not perform. New copy matches the app: Neuron shows you 988 and
  how to reach a contact you chose; it never contacts anyone on your behalf;
  there is no automatic escalation.

Privacy Policy (new):
- Add src/privacy.el + register it in main.el (generation, /legal/privacy route,
  state pointer, sitemap). Fixes the in-app link, which pointed at
  /legal/privacy (404 — no route, no doc existed).
- Ported from docs/legal/privacy-policy-companion-DRAFT.md (2026-07-14):
  local-first, 18+, and never-auto-contact stated verbatim from the locked draft.
- Wire privacy.html through Dockerfile.stage / Dockerfile / deploy.yaml; add the
  secondary /legal/privacy route to server.el for parity.

PENDING ATTORNEY (Daniel) SIGN-OFF before merge/publish. Bracketed legal
decisions (governing law, effective date, retention periods) left for counsel.

.gitea/workflows/deploy.yaml

@@ -55,7 +55,7 @@ jobs:
           echo "$CHANGED"
           # Asset-only: files that don't require rebuilding the El binary.
           # migrations/, scripts/, tests/ are data/infra/test changes — no binary rebuild needed.
-          NON_ASSET=$(echo "$CHANGED" | grep -v '^src/assets/' | grep -v '^src/shares/' | grep -v '^src/index\.html' | grep -v '^src/about\.html' | grep -v '^src/terms\.html' | grep -v '^src/enterprise-terms\.html' | grep -v '^src/llms\.txt' | grep -v '^migrations/' | grep -v '^scripts/' | grep -v '^tests/' | grep -v '^\.gitea/' | grep -v '^$' || true)
+          NON_ASSET=$(echo "$CHANGED" | grep -v '^src/assets/' | grep -v '^src/shares/' | grep -v '^src/index\.html' | grep -v '^src/about\.html' | grep -v '^src/terms\.html' | grep -v '^src/privacy\.html' | grep -v '^src/enterprise-terms\.html' | grep -v '^src/llms\.txt' | grep -v '^migrations/' | grep -v '^scripts/' | grep -v '^tests/' | grep -v '^\.gitea/' | grep -v '^$' || true)
           if [ -z "$NON_ASSET" ] && [ "$CHANGED" != "unknown" ]; then
             echo "asset_only=true" >> "$GITHUB_OUTPUT"
             echo "=> Asset-only change detected, will use fast path"
@@ -104,7 +104,7 @@ jobs:
       - name: Touch HTML placeholder files
         # El binary regenerates these at startup via fs_write. They must exist
         # in the build context for Dockerfile COPY to succeed.
-        run: touch src/index.html src/about.html src/terms.html src/enterprise-terms.html
+        run: touch src/index.html src/about.html src/terms.html src/privacy.html src/enterprise-terms.html
 
       # ── El SDK setup ──────────────────────────────────────────────────────
 

Dockerfile

@@ -96,7 +96,7 @@ RUN apt-get update \
  && groupadd -r landing && useradd -r -g landing landing
 
 COPY --from=builder /build/landing /usr/local/bin/landing
-COPY src/index.html /srv/landing/index.html
+COPY src/index.html src/about.html src/terms.html src/privacy.html src/enterprise-terms.html /srv/landing/
 COPY src/assets /srv/landing/assets
 
 ENV LANDING_ROOT=/srv/landing

Dockerfile.stage

@@ -37,8 +37,8 @@ COPY src/llms.txt /srv/landing/llms.txt
 # rewrite them with the freshly-rendered page (extracted JS asset paths,
 # updated chat widget, etc.). Without this they stay as their COPY'd root-
 # owned shells and the served HTML never reflects post-COPY source edits.
-COPY src/about.html src/terms.html src/enterprise-terms.html src/index.html /srv/landing/
-RUN chown landing:landing /srv/landing/about.html /srv/landing/terms.html /srv/landing/enterprise-terms.html /srv/landing/index.html /srv/landing/llms.txt
+COPY src/about.html src/terms.html src/privacy.html src/enterprise-terms.html src/index.html /srv/landing/
+RUN chown landing:landing /srv/landing/about.html /srv/landing/terms.html /srv/landing/privacy.html /srv/landing/enterprise-terms.html /srv/landing/index.html /srv/landing/llms.txt
 
 COPY dist/entrypoint.sh /usr/local/bin/entrypoint.sh
 RUN chmod +x /usr/local/bin/entrypoint.sh

server.el

@@ -16,6 +16,7 @@
 //   GET  /api/founding-count → {"sold":N,"total":N,"remaining":N}
 //   GET  /assets/*           → static files under $LANDING_ROOT/assets/
 //   GET  /brand/*            → static files under $LANDING_ROOT/assets/brand/
+//   GET  /legal/privacy       → privacy.html
 //   GET  /<other>            → 404 JSON
 
 // ── Path helpers ──────────────────────────────────────────────────────────────
@@ -118,6 +119,9 @@ fn handle_request(method: String, path: String, body: String) -> String {
     if str_eq(clean, "/legal/terms") {
         return fs_read(root_dir() + "/terms.html")
     }
+    if str_eq(clean, "/legal/privacy") {
+        return fs_read(root_dir() + "/privacy.html")
+    }
     if str_eq(clean, "/about") {
         return fs_read(root_dir() + "/about.html")
     }

src/checkout.el

@@ -98,7 +98,7 @@ fn checkout_page(plan: String, pub_key: String) -> String {
         el_li("", "Persistent memory - never resets")
         + el_li("", "Local inference via Ollama (coming)")
         + el_li("", "Bring your own API keys")
-        + el_li("", "3 marketplace plugins included")
+        + el_li("", "Plugin marketplace access (coming soon)")
         + el_li("", "Core built-in capabilities")
         + el_li("", "2 devices included")
     } else {

src/main.el

@@ -82,6 +82,7 @@ from styles           import { page_open, page_open_seo, page_close }
 from about            import { about_page }
 from founding_badge   import { founding_badge, founding_badge_css }
 from terms            import { terms_page }
+from privacy          import { privacy_page }
 from enterprise_terms import { enterprise_terms_page }
 from checkout        import { checkout_page }
 from safety          import { safety }
@@ -582,6 +583,7 @@ fn handle_request_inner(method: String, path: String, headers: Map, body: String
             + "  <url><loc>https://neurontechnologies.ai/</loc><changefreq>weekly</changefreq><priority>1.0</priority></url>\n"
             + "  <url><loc>https://neurontechnologies.ai/about</loc><changefreq>monthly</changefreq><priority>0.8</priority></url>\n"
             + "  <url><loc>https://neurontechnologies.ai/legal/terms</loc><changefreq>monthly</changefreq><priority>0.3</priority></url>\n"
+            + "  <url><loc>https://neurontechnologies.ai/legal/privacy</loc><changefreq>monthly</changefreq><priority>0.3</priority></url>\n"
             + "  <url><loc>https://neurontechnologies.ai/legal/enterprise-terms</loc><changefreq>monthly</changefreq><priority>0.3</priority></url>\n"
             + "</urlset>\n"
         return http_response(200, "{\"Content-Type\":\"application/xml; charset=utf-8\"}", sitemap_body)
@@ -605,6 +607,15 @@ fn handle_request_inner(method: String, path: String, headers: Map, body: String
         return "{\"__status__\":404,\"error\":\"not found\"}"
     }
 
+    // ── Privacy Policy ────────────────────────────────────────────────────────
+    if str_eq(path, "/legal/privacy") {
+        let privacy_path: String = state_get("__privacy_html_file__")
+        if !str_eq(privacy_path, "") {
+            return fs_read(privacy_path)
+        }
+        return "{\"__status__\":404,\"error\":\"not found\"}"
+    }
+
     // ── Enterprise Agreement ──────────────────────────────────────────────────
     if str_eq(path, "/legal/enterprise-terms") {
         let ent_path: String = state_get("__enterprise_terms_html_file__")
@@ -2386,10 +2397,15 @@ let ent_terms_html_path: String = src_dir + "/enterprise-terms.html"
 fs_write(terms_html_path, terms_page())
 fs_write(ent_terms_html_path, enterprise_terms_page())
 
+// Generate privacy policy HTML.
+let privacy_html_path: String = src_dir + "/privacy.html"
+fs_write(privacy_html_path, privacy_page())
+
 // Register with El HTTP runtime.
 state_set("__html_file__",                   html_path)
 state_set("__about_html_file__",             about_html_path)
 state_set("__terms_html_file__",             terms_html_path)
+state_set("__privacy_html_file__",           privacy_html_path)
 state_set("__enterprise_terms_html_file__",  ent_terms_html_path)
 state_set("__src_dir__",                     src_dir)
 state_set("__stripe_secret_key__",           stripe_key)

src/marketplace.el

@@ -77,7 +77,7 @@ fn marketplace_categories() -> String {
 
     el_div(
         "class=\"marketplace-categories reveal\" style=\"transition-delay:320ms\"",
-        marketplace_tags_block("Connectors - day one", connectors) +
+        marketplace_tags_block("Connectors (rolling out)", connectors) +
         marketplace_tags_block("Following launch", following) +
         el_div(
             "",

src/pricing.el

@@ -36,7 +36,7 @@ fn pricing_free_features() -> String {
     el_li("", el_span("class=\"dash\"", "-") + el_span("", "Local inference via Ollama (coming)")) +
     el_li("", el_span("class=\"dash\"", "-") + el_span("", "Neuron Inference included when it launches - Q3 2026")) +
     el_li("", el_span("class=\"dash\"", "-") + el_span("", "Unlimited projects")) +
-    el_li("", el_span("class=\"dash\"", "-") + el_span("", "3 marketplace plugins included")) +
+    el_li("", el_span("class=\"dash\"", "-") + el_span("", "Plugin marketplace access (coming soon)")) +
     el_li("", el_span("class=\"dash\"", "-") + el_span("", "Core built-in capabilities"))
 }
 

src/privacy.el

@@ -0,0 +1,145 @@
+// components/privacy.el - Consumer Privacy Policy page.
+// Returns complete HTML using the shared page shell from styles.el.
+// Mirrors terms.el. Adapted from docs/legal/privacy-policy-companion-DRAFT.md
+// (draft dated 2026-07-14). PENDING ATTORNEY SIGN-OFF before publication.
+
+from styles import { page_open_seo, page_close }
+from nav    import { nav }
+
+extern fn el_div(attrs: String, children: String) -> String
+extern fn el_span(attrs: String, children: String) -> String
+extern fn el_h1(attrs: String, text: String) -> String
+extern fn el_h2(attrs: String, text: String) -> String
+extern fn el_p(attrs: String, children: String) -> String
+extern fn el_a(href: String, attrs: String, children: String) -> String
+extern fn el_strong(children: String) -> String
+
+fn privacy_page() -> String {
+    page_open_seo(
+        "Privacy Policy — Neuron",
+        "Read the Neuron Privacy Policy. Neuron is local-first: your memory and conversations stay on your device.",
+        "/legal/privacy",
+        "The Neuron Privacy Policy — local-first by design. Your memory and conversations stay on your device.",
+        "false"
+    ) + nav() + privacy_body() + page_close()
+}
+
+fn privacy_section_head(num: String, title: String) -> String {
+    el_div(
+        "style=\"display:flex;align-items:baseline;gap:1rem;margin-bottom:1.25rem;border-bottom:1px solid var(--border);padding-bottom:0.75rem\"",
+        el_span("style=\"font-family:var(--body);font-size:0.75rem;font-weight:600;letter-spacing:0.15em;text-transform:uppercase;color:var(--navy-65)\"", "§ " + num) +
+        el_h2("style=\"font-family:var(--head);font-size:1.25rem;font-weight:600;color:var(--t1)\"", title)
+    )
+}
+
+fn privacy_p(text: String) -> String {
+    el_p("style=\"font-family:var(--body);font-weight:300;font-size:0.9375rem;color:var(--t2);line-height:1.8;margin-bottom:1rem\"", text)
+}
+
+fn privacy_p_last(text: String) -> String {
+    el_p("style=\"font-family:var(--body);font-weight:300;font-size:0.9375rem;color:var(--t2);line-height:1.8\"", text)
+}
+
+fn privacy_body() -> String {
+    let back_link: String = el_div(
+        "style=\"margin-bottom:3rem\"",
+        el_a("/", "style=\"font-family:var(--body);font-size:0.75rem;font-weight:500;letter-spacing:0.15em;text-transform:uppercase;color:var(--navy);text-decoration:none\"", "← Neuron")
+    )
+
+    let page_header: String = el_div(
+        "style=\"margin-bottom:4rem;border-bottom:1px solid var(--border);padding-bottom:3rem\"",
+        el_p("class=\"label\" style=\"margin-bottom:1rem\"", "Legal") +
+        el_h1("style=\"font-family:var(--head);font-size:clamp(2rem,4vw,3rem);font-weight:600;color:var(--t1);margin-bottom:0.75rem;line-height:1.1\"", "Privacy Policy") +
+        el_p("style=\"font-family:var(--body);font-size:0.875rem;color:var(--t3)\"", "Effective May 1, 2026  ·  Neuron, LLC")
+    )
+
+    let s1: String = el_div(
+        "style=\"margin-bottom:3rem\"",
+        privacy_section_head("1", "Who We Are") +
+        privacy_p("Neuron is made by Neuron Technologies / Neuron, LLC ("Neuron," "we," "us"). This policy explains what data Neuron handles, where it lives, and what - if anything - leaves your device.") +
+        privacy_p_last("Neuron is an AI companion with persistent memory. Because it is designed to remember you across time and to feel warm and personal, we hold ourselves to a local-first standard: your relationship with Neuron stays on your machine.")
+    )
+
+    let s2: String = el_div(
+        "style=\"margin-bottom:3rem\"",
+        privacy_section_head("2", "Our Core Principle - Local-First") +
+        privacy_p_last("Your Neuron memory and knowledge graph are stored " + "<strong style=\"color:var(--t1);font-weight:500\">on your device</strong>" + " (in ~/.neuron) by a local engine running on your own computer. By default, your memories, notes, conversations, documents, and knowledge never leave your device. We cannot see them.")
+    )
+
+    let s3: String = el_div(
+        "style=\"margin-bottom:3rem\"",
+        privacy_section_head("3", "What Data We Handle, and Where It Goes") +
+        privacy_p("<strong style=\"color:var(--t1);font-weight:500\">Your memory, conversations, and files.</strong> Stored locally on your device. Neuron&#39;s servers do not receive them.") +
+        privacy_p("<strong style=\"color:var(--t1);font-weight:500\">AI inference (bring-your-own-key).</strong> To answer you, the Neuron app on your device sends your conversation content directly to the AI provider you choose (for example, Anthropic) using your own API key. This content goes from your machine to that provider; it does not pass through Neuron&#39;s servers, and we do not store or train on it. That provider&#39;s privacy policy and terms govern how they handle it - you are using your own account with them.") +
+        privacy_p("<strong style=\"color:var(--t1);font-weight:500\">AI inference (future Neuron-hosted tiers).</strong> If you opt into a paid tier that uses Neuron-hosted models, conversation content needed for inference will be processed on Neuron-operated infrastructure. When that launches, we will not train on it, will not sell it, and will state retention plainly. This is forward-looking and not active today.") +
+        privacy_p("<strong style=\"color:var(--t1);font-weight:500\">License validation.</strong> On startup the app contacts our licensing server to verify your license status only. We do not transmit your memory or conversations during validation.") +
+        privacy_p("<strong style=\"color:var(--t1);font-weight:500\">Account &amp; purchase data.</strong> If you create an account or buy a tier, we (and our payment processor and sign-in providers) process your email, authentication identity, and payment metadata. We do not receive full card numbers.") +
+        privacy_p("<strong style=\"color:var(--t1);font-weight:500\">Connectors &amp; imports.</strong> When you connect a third-party service (GitHub, Notion, Linear, Google Drive) or import from another tool, you authorize those flows; the third party&#39;s terms govern their side. Imported content and on-device OCR results are stored locally.") +
+        privacy_p_last("<strong style=\"color:var(--t1);font-weight:500\">Website.</strong> The marketing website uses standard anti-abuse and sign-in tooling (for example, Cloudflare Turnstile and OAuth sign-in). The desktop app does not send usage telemetry for ordinary local use.")
+    )
+
+    let s4: String = el_div(
+        "style=\"margin-bottom:3rem\"",
+        privacy_section_head("4", "What We Do Not Do") +
+        privacy_p_last("We do " + "<strong style=\"color:var(--t1);font-weight:500\">not</strong>" + " sell your data. We do " + "<strong style=\"color:var(--t1);font-weight:500\">not</strong>" + " train models on your conversations. We do " + "<strong style=\"color:var(--t1);font-weight:500\">not</strong>" + " read your memory or local files.")
+    )
+
+    let s5: String = el_div(
+        "style=\"margin-bottom:3rem\"",
+        privacy_section_head("5", "Safety Features and Crisis Data") +
+        privacy_p("If Neuron&#39;s safety features are active, distress detection runs on your device. If triggered, Neuron shows you crisis resources (such as 988) and, if you have set a personal safety contact, shows you how to reach that person. " + "<strong style=\"color:var(--t1);font-weight:500\">Neuron does not contact anyone on your behalf - it does not notify your safety contact, 988, 911, or anyone else. There is no automatic escalation.</strong>") +
+        privacy_p("Your safety contact (a name, relationship, and phone or email you optionally enter) is stored locally on your device in ~/.neuron. It is surfaced only to you, only in a crisis moment, as a reminder of who you trust. It is not transmitted to us.") +
+        privacy_p_last("Crisis-related conversation content is excluded from Neuron&#39;s persistent memory (&#34;Hard Bell&#34; does not retain it), so distressing moments are not resurfaced to you later. Neuron is not a crisis service and not a medical or clinical provider (see Terms &#167; 11). We process only what is necessary for the feature to function on your device.")
+    )
+
+    let s6: String = el_div(
+        "style=\"margin-bottom:3rem\"",
+        privacy_section_head("6", "Age and Minors") +
+        privacy_p_last("<strong style=\"color:var(--t1);font-weight:500\">Neuron is intended for adults; you must be 18 or older to use it</strong>" + " (see Terms &#167; 1). The app asks you to confirm your age before use. We do not knowingly collect personal information from anyone under 18. If we learn that someone under 18 has used Neuron, we will take reasonable steps to delete the information we hold and end that use.")
+    )
+
+    let s7: String = el_div(
+        "style=\"margin-bottom:3rem\"",
+        privacy_section_head("7", "Your Rights and Choices") +
+        privacy_p_last("Most of your data lives on your device and is under your direct control - you can access, correct, export, and delete it yourself. To delete the account, license, or payment records we hold, contact legal@neurontechnologies.ai. Depending on where you live, you may have GDPR or CCPA/CPRA rights, including the right to know, access, delete, correct, and opt out of the &#34;sale&#34; or &#34;sharing&#34; of your personal information - which we do not do.")
+    )
+
+    let s8: String = el_div(
+        "style=\"margin-bottom:3rem\"",
+        privacy_section_head("8", "Data Retention") +
+        privacy_p("<strong style=\"color:var(--t1);font-weight:500\">Local data</strong>" + " persists on your device until you delete it - you control it directly.") +
+        privacy_p_last("<strong style=\"color:var(--t1);font-weight:500\">Account, license, and payment records</strong>" + " we hold are retained only as long as needed to provide the service, then deleted on account closure, subject to legal and accounting requirements.")
+    )
+
+    let s9: String = el_div(
+        "style=\"margin-bottom:3rem\"",
+        privacy_section_head("9", "Security") +
+        privacy_p_last("We use reasonable technical and organizational measures to protect the limited data we hold (account, license, and payment metadata). Because your memory and conversations stay on your device, the security of that device is also important - keep it protected.")
+    )
+
+    let s10: String = el_div(
+        "style=\"margin-bottom:3rem\"",
+        privacy_section_head("10", "Changes to This Policy") +
+        privacy_p_last("We will post material changes here and, where appropriate, notify you in-app.")
+    )
+
+    let s11: String = el_div(
+        "style=\"margin-bottom:3rem\"",
+        privacy_section_head("11", "Contact") +
+        privacy_p_last("legal@neurontechnologies.ai - Neuron Technologies / Neuron, LLC.")
+    )
+
+    let footer_links: String = el_div(
+        "style=\"margin-top:4rem;padding-top:2rem;border-top:1px solid var(--border);display:flex;gap:2rem;flex-wrap:wrap\"",
+        el_a("/", "style=\"font-family:var(--body);font-size:0.8125rem;color:var(--navy);text-decoration:none\"", "&larr; Home") +
+        el_a("/legal/terms", "style=\"font-family:var(--body);font-size:0.8125rem;color:var(--navy);text-decoration:none\"", "Terms of Service &rarr;")
+    )
+
+    el_div(
+        "style=\"max-width:720px;margin:0 auto;padding:6rem 2.5rem 8rem\"",
+        back_link +
+        page_header +
+        s1 + s2 + s3 + s4 + s5 + s6 + s7 + s8 + s9 + s10 + s11 +
+        footer_links
+    )
+}

src/terms.el

@@ -59,6 +59,7 @@ fn terms_body() -> String {
         "style=\"margin-bottom:3rem\"",
         terms_section_head("1", "Using Neuron") +
         terms_p("Using Neuron means you've read these terms and agree to them. That's it. No buried consent, no dark patterns. If something here doesn't sit right with you, email us before using the product - we'll talk through it.") +
+        terms_p("<strong style=\"color:var(--t1);font-weight:500\">You must be 18 or older to use Neuron.</strong> Neuron is intended for adults. By using it you represent that you are at least 18 years old and able to form a binding contract. The app asks you to confirm your age before you can use it, and we do not knowingly permit anyone under 18 to use Neuron.") +
         terms_p_last("These terms cover every version of Neuron: free, Professional, and Founding Member. Enterprise use has its own agreement. If you&#39;re deploying Neuron for an organization, that&#39;s the one you want.")
     )
 
@@ -136,26 +137,14 @@ fn terms_body() -> String {
         terms_p_last("Founding Member licenses are locked. I won&#39;t retroactively change what you signed up for.")
     )
 
-    let hard_bell_block: String = el_div(
-        "style=\"margin:1.5rem 0;padding:1.5rem;border-left:3px solid rgba(0,82,160,.35);background:rgba(0,82,160,.04)\"",
-        el_p("style=\"font-family:var(--body);font-weight:600;font-size:0.875rem;color:var(--t1);margin-bottom:0.875rem;letter-spacing:0.04em\"", "Hard Bell - Required acknowledgment for family accounts") +
-        terms_p("Federal data shows approximately 89% of child maltreatment is perpetrated by a parent or caregiver (HHS, Child Maltreatment 2023). The person listed as the primary contact is not always a safe contact. This system is built with that reality in mind.") +
-        el_p("style=\"font-family:var(--body);font-weight:400;font-size:0.875rem;color:var(--t1);line-height:1.8\"",
-            "When you create a family account that includes a minor, you are agreeing unconditionally to the following: " +
-            "<strong>if a safety signal is triggered by a child&#39;s account, the parent or guardian named on the family account will not be the first contact reached.</strong>" +
-            " Emergency services and independently designated trusted contacts are notified first. This is not a setting that can be changed. By creating a family account, you accept this structure."
-        )
-    )
-
     let s11: String = el_div(
         "style=\"margin-bottom:3rem\"",
-        terms_section_head("11", "Children and Family Accounts") +
-        terms_p("Children 13 and over may use Neuron independently. Children under 13 may only use Neuron as part of a family account established by a parent or legal guardian. By setting up a family account that includes a minor, the parent or guardian provides verifiable consent for the child&#39;s use and accepts these terms on the child&#39;s behalf.") +
-        terms_p("When a child&#39;s Neuron instance is part of a family account, certain information - including usage activity and relevant context - may be shared from the child&#39;s local instance to the parent&#39;s local instance. This sharing happens device-to-device and does not pass through or get stored on Neuron&#39;s servers.") +
-        hard_bell_block +
-        el_p("style=\"font-family:var(--body);font-weight:500;font-size:0.9375rem;color:var(--t1);line-height:1.8;margin-bottom:0.75rem\"", "Mandatory reporting - applies to all accounts.") +
-        terms_p("By creating any Neuron account, you acknowledge and agree that: " + "<strong style=\"color:var(--t1);font-weight:500\">if Neuron detects credible, specific indicators of intended harm to a person - including harm to the account holder themselves - emergency services or relevant authorities may be contacted.</strong>" + " This is not limited to family accounts. It applies to every user. This is not a privacy violation. It is the only honest answer to what a system that knows you this well is obligated to do when someone is in genuine danger. You cannot opt out of this. If you are unwilling to agree, do not create an account.") +
-        terms_p_last("Parents control what is visible to them through their local instance and can revoke family account access at any time. If you believe a child is using Neuron outside of a family account, contact legal@neurontechnologies.ai and we will address it promptly.")
+        terms_section_head("11", "Safety Features") +
+        terms_p("Neuron is for adults 18 and older (see &#167; 1). It is not a crisis line, not a medical or mental-health service, and not an emergency responder. In an emergency, contact 911 or your local emergency number, or call or text 988 (the Suicide &amp; Crisis Lifeline) directly.") +
+        terms_p("Neuron includes optional safety features intended to help if you are ever in distress. It is important that you understand exactly what they do and do not do.") +
+        terms_p("<strong style=\"color:var(--t1);font-weight:500\">What they do.</strong> If Neuron&#39;s on-device distress detection is triggered, Neuron shows you crisis resources - prominently the 988 Suicide &amp; Crisis Lifeline (call, text, or chat) - and, if you have chosen a personal safety contact, it shows you how to reach that person. You remain in control of whether and how you reach out.") +
+        terms_p("<strong style=\"color:var(--t1);font-weight:500\">What they do not do. Neuron does not contact anyone on your behalf. It does not call, text, email, or otherwise notify your safety contact, 988, 911, or any other person or service. There is no automatic escalation.</strong> The safety contact you set is stored locally on your device and is surfaced only to you, as a reminder of who you trust - Neuron never reaches out to them for you.") +
+        terms_p_last("These features are provided &#34;AS IS.&#34; Distress detection is imperfect: it may fail to detect distress, may raise false alarms, and must not be relied upon in an emergency. To the maximum extent permitted by law, Neuron, LLC is not liable for any outcome relating to the presence, absence, accuracy, timing, or performance of any safety feature.")
     )
 
     let s12: String = el_div(