Privacy Policy

What we store

• Family and profiles. Your family name, each member's display name, avatar, role (parent or child), and points balance.
• PINs. Each profile is protected by a PIN. PINs are hashed with bcrypt before they are stored — we cannot read them, and neither can anyone with database access.
• Content your family creates. Chores, prizes and redemptions, messages, countdowns, lists, meal plans, medication reminders, package tracking entries, and photos you upload.
• Game activity. Rounds played, answers submitted during a game, and points awarded.
• Settings. Your chosen theme and widget layout, the location you set for weather and local events, RSS feeds you add, and screen protection and TV-time preferences.
• TV pairing. A short-lived session token per paired TV, plus which platform it is running on, so the phone and TV can find each other.
• Push notification endpoints, if you turn notifications on — the browser-issued address needed to deliver a notification to that device.

What we don't collect

• We do not require an email address or account for children.
• We do not sell or rent any data, and we do not share it with advertisers.
• We do not run third-party advertising or tracking scripts on the app.
• We do not collect precise device location. Weather and local events use a location a parent enters in Settings.

Children

Child profiles are created by a parent inside an existing family. A child does not supply an email address, phone number, or any contact information, and cannot create a family on their own. A parent can rename or delete any profile, and deleting a profile removes that member's chores, messages, and game records along with it.

Where it's stored

Data is stored in a Postgres database and object storage hosted by Supabase. Every table is protected by row-level security rules keyed to your family, so one family's data is not readable by another. The web app is served by Cloudflare Pages.

Services we call out to

• Open-Meteo — receives the coordinates you set for the weather widget. No account or personal data is sent.
• Ticketmaster — receives a city or coordinates to look up nearby events, if you enable the local events widget.
• Google Calendar and Google Photos — only if you explicitly connect them. We request read access, show the results on your TV, and you can disconnect at any time from Settings, which revokes our access.
• RSS feeds you add yourself, fetched to populate the news widget.

Photos

Photos you upload are stored in Supabase Storage so your TV can display them. Deleting a photo in the dashboard removes the stored file, not just the database row.

Deleting your data

A parent can delete individual items, individual member profiles, or the whole family from the dashboard. Deleting the family removes its members, content, and uploaded photos.

Changes

If this policy changes in a way that affects what we collect or who we share it with, we will update the date at the top of this page.

Contact

We're still setting up a support address for Smart Family. It will be published here as soon as it's live.