Privacy Policy

Android Play edition

The Play edition does not initialize Google Analytics, Microsoft Clarity or optional campaign tracking. A parent may enable an optional daily approval-count reminder. Only after parent authorization does Firebase Cloud Messaging process an app installation identifier, registration token, app version and technical delivery information. The reminder contains no child names, task details or balances. Enrollment remains on a shared device during same-household child use and logout; parents can disable it in Account settings. Removal deletes the device token and requests deletion of its Firebase installation; provider retention may continue under Firebase's deletion process. In-app notifications remain available without enrollment. The separately distributed Android edition also supports Firebase reminders. Operational account, household, security and support data described below still apply.

Request account or child-data deletion. You can make a request without signing in. Support verifies authority before fulfillment, explains retained records and applies the retention process to backups and processors.

1. Information we collect

Account and contact information. A parent or guardian may provide a name, email address, password, household settings, email preferences, support messages, and account-verification or recovery information. Parent account passwords are stored as hashes, not readable passwords.

Child and household information. A parent may create child profiles containing a display name, birth date, child login credential, and interface preference. The service also stores the household's tasks, schedules, completion and approval history, credits and ledger entries, savings and goals, perks, withdrawals, rewards, notifications, and settings.

Purchases and licenses. We store order, subscription, product-license, fulfillment, and download records, including customer name and email, amounts and status, Stripe identifiers, license codes, download time, a hashed IP address, and user-agent information. Stripe receives payment and billing information directly; FamilyRhythm does not store full payment-card numbers.

Email and story access. If you request The Earning Tales or another email series, we store your email address, source and campaign information, subscription and suppression status, delivery events, and records needed for private story, download, and unsubscribe links.

Usage, device, and security information. Depending on your choices and use of the service, we may process routes visited, referrer, time on page, random visitor and session identifiers, campaign parameters, browser, device and operating-system information, user agent, and an IP address or a hashed or truncated form of it. QR-code redirects may record the campaign and placement, scan time, destination, referrer, user agent, and truncated IP address.

Information stored on your device. The application uses local or session storage for sign-in state, consent choice, onboarding progress, interface preferences, dismissed notices, and random analytics identifiers when analytics is accepted.

2. How we use information

• Provide, secure, support, and troubleshoot the service
• Authenticate parents and children and preserve household records
• Process purchases, subscriptions, licenses, downloads, and refunds
• Send account, service, fulfillment, and opted-in educational emails
• Honor unsubscribe, bounce, and complaint suppressions
• Measure product reliability and, with consent, understand site use
• Prevent abuse, enforce our terms, and comply with law

FamilyRhythm records are tools for the household. We do not use a child's task, credit, savings, or behavior history to advertise to the child or build an advertising profile.

3. Analytics, cookies, and similar storage

Essential application records and security logs are created when you use product features. The browser also stores information needed for sign-in, navigation, preferences, and unfinished onboarding.

Basic first-party statistics. When a public page or a public printable PDF is requested, we may record the time, page path, permitted campaign fields (utm_source, utm_medium, utm_campaign, and utm_content), referring domain, and whether the request appears to be an automated crawler. This basic record does not contain an IP address, full referrer URL, user agent, visitor or session identifier, cookie identifier, account identity, or arbitrary query-string fields. We use it to understand which pages and campaign links are requested and improve our pages. These aggregate request counts do not identify visitors or build profiles; they do not establish unique people or completed ad conversions.

Basic request statistics are separate from optional browser analytics. Selecting Decline also objects to future basic statistics once this browser has saved the objection cookie. You may object to the basic statistics using this control. The preference uses a first-party boolean cookie so our web server can honor it; it is not a visitor identifier.

Optional browser analytics run only after you select Accept. These may include Google Analytics and Microsoft Clarity, which help us understand aggregate traffic and usability. Third-party advertising and remarketing features are not enabled. Microsoft Clarity receives analytics-storage consent but not advertising-storage consent.

FamilyRhythm reading journeys. If you accept optional analytics, we use random, pseudonymous browser and session identifiers to record public pages visited and their order, referring domains and permitted campaign fields, internal navigation and link interactions, maximum scroll depth, and active time while a page is visible and focused. These first-party journey records are not linked to your FamilyRhythm account or household and do not contain raw IP addresses, full external referrer URLs, arbitrary URL query strings, or the text you enter into forms.

Optional analytics. Analytics acceptance covers the analytics described here, including consented first-party campaign attribution. It does not grant permission to send account conversion events to OpenAI. Historical combined analytics-acceptance markers do not authorize sharing for new registrations. Previously authorized account-level sharing can be withdrawn using the account control above.

Consented trial attribution. If you accept optional analytics, allow campaign trial attribution, and register for FamilyRhythm, we may attach validated campaign labels and the campaign landing-page path to your registration and count an operational trial when it actually starts. We count each registered family and first trial once. Consented labels may be held in this tab for up to 30 minutes to preserve the handoff across public pages. These labels are separate from reading journeys: we do not attach your browsing session or visitor identifier to your account, collect form answers for attribution, or send these trial labels to advertising platforms without a distinct, explicit ad-sharing authorization. If you decline or have not chosen analytics, or have not allowed campaign trial attribution, we do not collect these labels. Earlier analytics acceptances do not silently enable this new purpose. Unattributed trials remain included in overall business totals.

The FamilyRhythm journey identifier stored in your browser expires 13 calendar months after it is created. Visits do not renew that lifetime. If analytics remains accepted, we use a new random identifier after expiry without linking it to the old one. If the browser is closed at expiry, the expired identifier is removed before it is next used. Your remembered analytics choice is separate from this identifier.

Optional analytics are not run on child or kiosk routes. Selecting Decline prevents optional browser analytics from loading. Changing from Accept to Decline stops future optional tracking, removes FamilyRhythm's journey identifiers from this browser, and asks Clarity to clear its cookies. It does not automatically erase analytics records already delivered.

We may use Sentry as essential error and performance monitoring. It helps diagnose failures and is not used for advertising.

4. Service providers and disclosures

We disclose information only as needed to operate the service, complete a transaction, protect users, comply with law, or complete a business transfer. Current provider categories include:

• Hosting, database, storage, and backup providers for application operation
• Postmark for customer email delivery and delivery/suppression events
• Stripe for checkout, billing, refunds, fraud prevention, and customer billing management
• Cloudflare Turnstile for abuse prevention on protected forms
• Google Analytics and Microsoft Clarity for consented public and parent-session analytics
• Sentry for error and performance monitoring when configured

We may also disclose information when reasonably necessary to protect rights or safety, investigate fraud or security incidents, respond to lawful process, or complete a merger, financing, acquisition, or sale of assets.

5. Children's privacy and parental control

FamilyRhythm is designed for a parent or legal guardian to create and control the household. Child profiles can be created only through an authenticated parent account. Children do not provide an email address, make purchases, or manage the household subscription.

A parent chooses the child's display name, birth date, login credential, tasks, and household records. We use that information to provide the child-facing service, adapt the interface, maintain the household record, and protect the account. We do not require a child to provide more information than is reasonably needed to use the applicable feature.

Parents may review core household information in the product, export family data, correct profile information, or contact us to request access, restriction, or deletion. Optional third-party analytics are excluded from child and kiosk routes.

6. Retention and deletion

First-party reading journeys. Journey sessions and their associated page views and interactions expire 13 calendar months after the session starts and are excluded from active analytics at that point. Our daily cleanup normally removes expired records from the live database within 24 hours. Restricted recovery backups are not used for routine analytics; expired journey records are removed against the current date before analytics resumes after a restore.

Optional campaign trial-attribution records also expire 13 calendar months after the trial starts and follow the same daily cleanup and restore safeguards. The underlying operational trial record is separate from optional attribution.

We keep account and household information while the account is active and for only as long afterward as reasonably necessary for account support, security, legal obligations, dispute resolution, and the purposes described here. Canceling a subscription does not itself delete the account.

Unsubscribe and suppression records may be retained so we can honor the request. Transaction, tax, fraud-prevention, audit, publishing-license, and fulfillment records may be retained as required to document a purchase or continuing license. Backup copies and security logs may remain for a limited operational period before deletion or overwrite.

Generated personalized PDF files may be deleted without deleting the underlying purchase or license record; an authorized customer may regenerate the same licensed edition.

FamilyRhythm currently handles full account-deletion requests through support. We verify authority before deleting or de-identifying data and may retain records that law or legitimate security, transaction, or licensing needs require.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, export, delete, or restrict use of personal information. You may:

• Export core family data from the parent account page
• Change account and email preferences in the product
• Decline optional analytics through the site prompt
• Object to basic first-party page statistics using the control above
• Unsubscribe using the link in an eligible marketing or educational email
• Contact us to request access, correction, deletion, or help with a child's information

We may need to verify your identity and relationship to the household before acting on a request.

8. Security

We use access controls, transport encryption, password hashing, rate limits, abuse protection, backups, and operational monitoring intended to protect information. No online service can guarantee absolute security. Please protect parent and child login credentials and contact us if you suspect unauthorized access.

9. Changes to this policy

We may update this policy as the product or law changes. We will change the effective date and provide additional notice when a material change requires it. If a material change affects previously authorized collection, use, or disclosure of children's information, we will seek any additional parental notice or consent required by law.

10. Contact

OneStage Solutions, LLC operates FamilyRhythm. For privacy questions or requests, email support@familyrhythm.com or use our contact form.