Privacy Policy

1. Information we collect

Account and contact information. A parent or guardian may provide a name, email address, password, household settings, email preferences, support messages, and account-verification or recovery information. Parent account passwords are stored as hashes, not readable passwords.

Child and household information. A parent may create child profiles containing a display name, birth date, child login credential, and interface preference. The service also stores the household's tasks, schedules, completion and approval history, credits and ledger entries, savings and goals, perks, withdrawals, rewards, notifications, and settings.

Purchases and licenses. We store order, subscription, product-license, fulfillment, and download records, including customer name and email, amounts and status, Stripe identifiers, license codes, download time, a hashed IP address, and user-agent information. Stripe receives payment and billing information directly; FamilyRhythm does not store full payment-card numbers.

Email and story access. If you request The Earning Tales or another email series, we store your email address, source and campaign information, subscription and suppression status, delivery events, and records needed for private story, download, and unsubscribe links.

Usage, device, and security information. Depending on your choices and use of the service, we may process routes visited, referrer, time on page, random visitor and session identifiers, campaign parameters, browser, device and operating-system information, user agent, and an IP address or a hashed or truncated form of it. QR-code redirects may record the campaign and placement, scan time, destination, referrer, user agent, and truncated IP address.

Information stored on your device. The application uses local or session storage for sign-in state, consent choice, onboarding progress, interface preferences, dismissed notices, and random analytics identifiers when analytics is accepted.

2. How we use information

• Provide, secure, support, and troubleshoot the service
• Authenticate parents and children and preserve household records
• Process purchases, subscriptions, licenses, downloads, and refunds
• Send account, service, fulfillment, and opted-in educational emails
• Honor unsubscribe, bounce, and complaint suppressions
• Measure product reliability and, with consent, understand site use
• Prevent abuse, enforce our terms, and comply with law

FamilyRhythm records are tools for the household. We do not use a child's task, credit, savings, or behavior history to advertise to the child or build an advertising profile.

3. Analytics, cookies, and similar storage

Essential application records and security logs are created when you use product features. The browser also stores information needed for sign-in, navigation, preferences, and unfinished onboarding.

Optional browser analytics run only after you select Accept. These may include Google Analytics and Microsoft Clarity, which help us understand aggregate traffic and usability. Advertising and remarketing features are not enabled. Microsoft Clarity receives analytics-storage consent but not advertising-storage consent.

Optional analytics are not run on child or kiosk routes. Selecting Decline prevents optional browser analytics from loading; changing from Accept to Decline stops future optional tracking and asks Clarity to clear its cookies.

We may use Sentry as essential error and performance monitoring. It helps diagnose failures and is not used for advertising.

4. Service providers and disclosures

We disclose information only as needed to operate the service, complete a transaction, protect users, comply with law, or complete a business transfer. Current provider categories include:

• Hosting, database, storage, and backup providers for application operation
• Postmark for customer email delivery and delivery/suppression events
• Stripe for checkout, billing, refunds, fraud prevention, and customer billing management
• Cloudflare Turnstile for abuse prevention on protected forms
• Google Analytics and Microsoft Clarity for consented public and parent-session analytics
• Sentry for error and performance monitoring when configured

We may also disclose information when reasonably necessary to protect rights or safety, investigate fraud or security incidents, respond to lawful process, or complete a merger, financing, acquisition, or sale of assets.

5. Children's privacy and parental control

FamilyRhythm is designed for a parent or legal guardian to create and control the household. Child profiles can be created only through an authenticated parent account. Children do not provide an email address, make purchases, or manage the household subscription.

A parent chooses the child's display name, birth date, login credential, tasks, and household records. We use that information to provide the child-facing service, adapt the interface, maintain the household record, and protect the account. We do not require a child to provide more information than is reasonably needed to use the applicable feature.

Parents may review core household information in the product, export family data, correct profile information, or contact us to request access, restriction, or deletion. Optional third-party analytics are excluded from child and kiosk routes.

6. Retention and deletion

We keep account and household information while the account is active and for only as long afterward as reasonably necessary for account support, security, legal obligations, dispute resolution, and the purposes described here. Canceling a subscription does not itself delete the account.

Unsubscribe and suppression records may be retained so we can honor the request. Transaction, tax, fraud-prevention, audit, publishing-license, and fulfillment records may be retained as required to document a purchase or continuing license. Backup copies and security logs may remain for a limited operational period before deletion or overwrite.

Generated personalized PDF files may be deleted without deleting the underlying purchase or license record; an authorized customer may regenerate the same licensed edition.

FamilyRhythm currently handles full account-deletion requests through support. We verify authority before deleting or de-identifying data and may retain records that law or legitimate security, transaction, or licensing needs require.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, export, delete, or restrict use of personal information. You may:

• Export core family data from the parent account page
• Change account and email preferences in the product
• Decline optional analytics through the site prompt
• Unsubscribe using the link in an eligible marketing or educational email
• Contact us to request access, correction, deletion, or help with a child's information

We may need to verify your identity and relationship to the household before acting on a request.

8. Security

We use access controls, transport encryption, password hashing, rate limits, abuse protection, backups, and operational monitoring intended to protect information. No online service can guarantee absolute security. Please protect parent and child login credentials and contact us if you suspect unauthorized access.

9. Changes to this policy

We may update this policy as the product or law changes. We will change the effective date and provide additional notice when a material change requires it. If a material change affects previously authorized collection, use, or disclosure of children's information, we will seek any additional parental notice or consent required by law.

10. Contact

OneStage Solutions, LLC operates FamilyRhythm. For privacy questions or requests, email support@familyrhythm.com or use our contact form.