[HOLD — attorney sign-off] Terms: 18+ & never-auto-contact reconcile; add Privacy Policy (fix /legal/privacy 404) #161
Open
will.anderson
wants to merge 1 commits from
legal/18plus-terms-privacy-reconcile into main
pull from: legal/18plus-terms-privacy-reconcile
merge into: :main
:main
:cost-opt/soul-demo-stage-minscale
:copy/two-bill-story
:fix/retire-family-child-plan-pricing
:legal/18plus-terms-privacy-reconcile
:fix/safety-claims-match-shipped-behavior
:feat/downloads-page
:fix/honest-claims-closed-beta
:stage
:dev
:fix/csp-analytics
:fix/syntax-error-and-csp
:fix/devices-count-v2
:fix/devices-count
:fix/account-el-meta
:fix/magic-link-flow
:fix/free-plan-setup-intent
:fix/about-rendering
:fix/stripe-dedup-attestation
:fix/webhook-initstripe-textarea
:fix/greeting-history-load
:fix/question-timer-pricing-clarity
:fix/binary-assets-checkout-layout
:fix/zero-pi-setup-future-usage
:fix/free-plan-payment-intent
:fix/free-checkout-stripe
:fix/stage-full-build
:ci/touch-dist
:ci/trigger-rebuild
:fix/force-full-rebuild
:fix/stage-ci-paths
:feat/checkout-comprehensive-tests
:fix/checkout-auth-reveal
:fix/entrypoint-k3s-nonblocking
:fix/single-stage-dockerfile
:fix/stage-source-check
:fix/payment-page-heredoc-escape
:feat/k3s-embedded-soul
:feat/native-el-ui
:fix/ci-elb
:fix/ci-pr-triggers
:fix/stage-source-enforcement
:sync/dev-stage
:fix/have-curl-define
:fix/soul-demo-emit-metric
:fix/pentest-security-hardening
:fix/gallery-layout-account-otp
1 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
|
|
4989641b39 |
legal: reconcile Terms with locked 18+ and never-auto-contact decisions; add Privacy Policy
The published Terms directly contradicted two locked safety decisions and the
shipping app copy, and the in-app Privacy Policy link 404'd. Both are legal
exposure under CA SB 243 (companion chatbots) and the AI-companion litigation.
Terms (§1, §11):
- Add an explicit "you must be 18 or older" eligibility statement. The old §11
permitted "Children 13 and over" independently and under-13 via family
accounts — the exact minor path the app's age gate forbids and the litigation
epicenter targets.
- Replace §11 "Children and Family Accounts" with an honest "Safety Features"
section. Removes the Hard Bell auto-notify block ("emergency services and
trusted contacts are notified first", "cannot be changed") and the
mandatory-reporting clause ("emergency services or relevant authorities may
be contacted", "cannot opt out") — both promised an automatic escalation the
product does not perform. New copy matches the app: Neuron shows you 988 and
how to reach a contact you chose; it never contacts anyone on your behalf;
there is no automatic escalation.
Privacy Policy (new):
- Add src/privacy.el + register it in main.el (generation, /legal/privacy route,
state pointer, sitemap). Fixes the in-app link, which pointed at
/legal/privacy (404 — no route, no doc existed).
- Ported from docs/legal/privacy-policy-companion-DRAFT.md (2026-07-14):
local-first, 18+, and never-auto-contact stated verbatim from the locked draft.
- Wire privacy.html through Dockerfile.stage / Dockerfile / deploy.yaml; add the
secondary /legal/privacy route to server.el for parity.
PENDING ATTORNEY (Daniel) SIGN-OFF before merge/publish. Bracketed legal
decisions (governing law, effective date, retention periods) left for counsel.
|