Privacy policy: the family app

1. Who we are

The family app (the "app") is made by AN Ventures LLC, a company in Texas, USA, publishing as AN Ventures Labs ("we", "us"). We are responsible for the personal information described here.

Contact: contact@anventureslabs.com · 821 W New Hope Dr, Ste 102 #3, Cedar Park, TX 78613, United States · +1 (737) 235-8388 (voicemail)

This policy is for the app. Our website has its own policy at www.anventureslabs.com/privacy. If the two differ about the app, this one applies.

2. The short version

The app helps one family keep its plans together. We keep only what the app needs to do that.
A child has no account and no email. For a child we keep only a first name, a birth year and a picture chosen from our built-in set, never a photo, and only after a parent or legal guardian agrees.
Only members of your family can see your family's information.
No ads. No tracking. No analytics. We never sell or rent personal information, and we never use it for advertising.
You can see and change your information in the app, and ask us for a copy of it or to delete it.

3. What we keep

Your account (adults and teens)

Your email address, to sign you in. If you sign in with Apple or Google, we receive your email address from them (or Apple's private relay address if you choose "Hide My Email"). Apple may also give us your name the first time; we use it only to suggest your display name.
Sign-in records: when you signed in, and, for each phone that is signed in, the IP address and device type our hosting provider records to keep the session safe. They are kept while that phone stays signed in.

Other members never see your email address.

Sign-in codes (anyone who asks for a sign-in email)

When you ask for a sign-in email, we send a 6-digit code and a link. To stop strangers guessing codes, we keep, for that email address:

the code and the link in scrambled form only (nobody can read them back, us included), and how many wrong tries were made. A code works for 15 minutes; these records are deleted 24 hours after it expires;
a record of each email sent and each wrong code typed, with the time. These are deleted after 48 hours;
if an email to that address bounces or is reported as spam, a note to stop sending sign-in emails to it for 30 days.

We keep these records even if the address never becomes an account, but only for these short periods, and only to protect sign-in.

Your profile (adults and teens)

Display name (required).
A photo you choose, or a picture from our set (optional). A photo can only be picked from your phone's photo library; the app never uses the camera. Before it leaves your phone, the app makes it smaller and removes location and camera details. Photos are stored privately: only your family can see them inside the app, and there are no public links to them.
A colour for you in the app.
Birthday, as day and month (optional). Your family sees the day and month.
Birth year (optional). Only you and the family's adults see it.
Language, country and digit style, so the app shows the right words, dates and numbers. Country starts as your phone's region; you can change it.

Child profiles

A child with a child profile has no account and does not sign in (section 6 explains who gets which). A parent or legal guardian creates the profile. For a child we keep only:

first name;
birth year;
a picture chosen from our built-in set (never a photo of a child).

We also keep app settings for the profile, which are not information about the child: a colour, the PIN that opens the profile (stored only in scrambled form, so nobody can read it, us included), and which adult looks after the profile.

We never ask a child for an email address, a phone number, a photo, a location or a full birth date.

Family records

Your family: the family name, its time zone, who is in it, each member's role (owner, adult, teen, child), when they joined, and who looks after each child profile.
Consent records: when a parent or legal guardian agrees to a child profile or a teen account, we record who agreed, when, in which language and country, which version of the wording they saw, and which version of this policy they could open. We keep this as proof that a parent or legal guardian agreed.
Invites: an invite to join a family has a role, a code and a secret link, and ends after 7 days. We keep who created it, whether it was used, by whom, and when. We store the secret link only in scrambled form.
Invite attempts: when someone tries an invite code or link, we record their account, the time and the result. We use this only to stop people guessing codes.
Family activity: a short history inside the family, such as "Sara joined as adult". It holds who did what and when, never message text, and nothing about a child beyond their place in the family.

Your phone

A record for each phone you sign in on: whether it is an iPhone or Android phone, a random number the app makes for that phone, the app version, its language, and when it was last used. It is deleted when you sign out on that phone.
The copy on your phone: the app keeps a copy of your family's information on your phone so it works offline. This copy is encrypted, and it is deleted when you sign out.

4. What we do not do

We show no ads and use no advertising or tracking tools.
We use no analytics or crash-reporting services.
We do not sell, rent or trade personal information.
We do not build profiles of anyone for marketing or advertising, and we never use a child's information for marketing.
We do not use your contacts, your location, your microphone or your camera. A profile photo can only be chosen from your photo library, one photo each time you choose to.
We do not send marketing emails. The only emails we send are sign-in emails, and they carry no open or click tracking.
We do not send push notifications yet. When we add them, we will update this policy first.

5. Why we use it

To run the app for your family: sign you in, show your family to each other, keep your phones in sync, and let adults invite people and look after child profiles.
To keep accounts and families safe: stop code guessing, prevent misuse, and investigate problems.
To prove that a parent or legal guardian agreed to a child profile or a teen account.
To follow the law.

6. Children and teens

Who is a child and who is a teen in the app. A child profile is for a child who does not have their own sign-in. A teen account is for a young person aged 13 to 17 with their own sign-in. A child under 13 can only have a child profile, never an account.

A parent or legal guardian decides. Only an adult in the family can create a child profile or invite a teen. Before a child profile is saved, and before a teen is invited or an adult is changed to a teen, that young person's parent or legal guardian must agree in the app. They see what we keep and why, and can read this policy, even offline. We record that agreement (section 3). A teen also sees a short notice when joining.

What we keep about a child: first name, birth year and a picture from our built-in set. Nothing else. Children never have a photo, an email address or a sign-in.

What a parent or legal guardian can do at any time:

see the child's profile, and change the first name, birth year, picture, colour or PIN;
remove the child profile, or remove a teen from the family; this also withdraws the agreement;
ask us for a copy of the information, or ask us to delete it, by writing to contact@anventureslabs.com.

What others see. A child's first name and picture are visible only to members of the same family. A child's birth year is visible only to the family's adults.

No ads and no tracking, for everyone. We do not show ads to children or teens, we do not track them, and we do not use their information for marketing.

If you believe we hold information about a child without a parent's or legal guardian's agreement, write to us and we will delete it.

7. Who can see your information

Your family. Members of your family see each other's display names, photos or pictures, colours, roles and birthdays (day and month). Birth years are shown only as described in section 3.
Nobody outside your family. Another family can never see your family's information.
Service providers who run parts of the app for us (section 8). They may use the information only to provide their service to us.
Authorities, only when the law requires it, or to protect someone's safety.
A buyer, if our company or the app is ever sold. The buyer would have to keep the promises in this policy, and we would tell account holders before it happens.

8. Service providers

Supabase, Inc. hosts the app's database, sign-in and photo storage. It holds everything in section 3 except the copy on your phone. Location: the United States (North Virginia).
Resend sends our sign-in emails. It receives your email address and the email itself (with the code and link), and records whether it was delivered. It sends from Ireland, in the European Union, and keeps the email and its delivery records in the United States for 30 days.
Apple and Google sign you in if you choose Sign in with Apple or Google, and run the app stores. They receive what you share with them to sign in. Push notifications through Apple and Google: not yet.
Expo (650 Industries, Inc.) delivers app updates to your phone. It receives technical details of each request, such as IP address and app version. Location: the United States.
Cloudflare, Inc. hosts our website, including the page an invite link or sign-in link opens on a computer. It receives technical details of each request, such as IP address.

Each provider is bound by a data processing agreement or equivalent terms, and must protect your information at least as well as this policy does. We will update this list before we add a provider.

9. Where your information is stored

Your family's information is stored by Supabase in the United States (North Virginia), and on your family members' phones. Sign-in emails are sent from Ireland, and Resend keeps them and their delivery records in the United States.

If you live outside the United States, your information is transferred there. We protect these transfers with the safeguards your law requires. Our agreements with Supabase and Resend include the European Commission's standard contractual clauses and the United Kingdom's addendum to them, and Resend also takes part in the EU–U.S. Data Privacy Framework. Anyone who asks can get a copy of the safeguards that apply to them.

If we move where we store your information, we will update this policy before the move.

10. How long we keep it

Account and profile: while you have an account.
When a member leaves or is removed: their birthday, birth year, language, country and phone records are deleted at once. Their photo can no longer be seen at once, and the file is erased within a day. For a child, the birth year and PIN are deleted at once.
The display name of an adult who left or was removed: 1 year, so the family's history still shows who did what; then it is replaced with "Former member".
The first name of a child or teen who left or was removed: 30 days; then it is replaced with "Former member".
A photo you replace or remove: it can no longer be seen at once, and the file is erased within a day.
Consent records: while the child profile or teen account exists, then 3 years, as proof of the agreement. If the whole family is deleted, they are deleted with it.
Invites: deleted 90 days after they were used, cancelled or expired.
Invite attempts: 7 days.
Family activity history: 90 days.
Things you delete in the app: 30 days, so they can be restored; then deleted.
A deleted family: erased 7 days after it is deleted.
Your phone's record: until you sign out on that phone.
Sign-in codes and links: deleted 24 hours after the code expires. Records of sign-in emails and wrong codes: 48 hours. A stop on emails to an address that bounced or reported spam: 30 days.
Sign-in emails and delivery records at Resend: 30 days.
Our hosting provider's logs and backups: up to 7 days.

11. Your rights and choices

Everyone, wherever you live

See the information we hold about you, and get a copy in a common format.
Correct it. Most of it you can change yourself in the app.
Delete it. You can leave your family and remove your photo in the app. Until account deletion is available in the app, write to us and we will delete your account and its information.
Withdraw consent you gave for a child profile or a teen account, by removing the profile or the teen, or by writing to us.
Object to a use of your information, or ask us to limit it.
Complain to the data protection authority in your country.

A parent or legal guardian can use these rights for their child. Write to contact@anventureslabs.com. We may ask you to confirm it is you, usually by writing from your account's email address. We reply as soon as we can, within the time set by the law of the country where you live, and never later than 30 days. We do not charge for this.

We do not sell personal information or share it for targeted advertising, so there is nothing to opt out of. We do not make decisions about you by automated means alone.

European Union (France, Germany, Austria)

Our legal bases are: our agreement with the person using the app, to provide it; our legitimate interest in keeping the app and sign-in secure (for example the sign-in code records and invite attempts); the consent of a parent or legal guardian for child profiles, and for teens below the age of digital consent in their country (15 in France, 16 in Germany, 14 in Austria); and our legal obligations. You can also ask to move your information to another service, and you can complain to your country's authority (in France the CNIL, in Germany your federal state's authority, in Austria the Datenschutzbehörde).

Brazil (LGPD)

You can also ask us to confirm whether we process your information, to anonymise, block or delete information that is unnecessary or excessive, to move it to another provider, to tell you whom we share it with, and to tell you what happens if you do not consent. A child's information is used only in the child's best interest and with a parent's or legal guardian's specific consent. You can complain to the ANPD.

United States (COPPA)

In this version of the app we do not collect personal information directly from children under 13: a parent or legal guardian enters a child's first name, birth year and picture. A parent or legal guardian can review this information, have it deleted, and stop any further use, at any time, in the app or by writing to us. We do not share children's information with anyone except the service providers in section 8, who run the app for us.

Turkey (KVKK)

You can also ask whether we process your information and for what purpose, which recipients in Turkey or abroad receive it, that we tell those recipients about a correction or deletion, and compensation for damage caused by unlawful processing. Write to us first; we answer within 30 days. If you are not satisfied, you can complain to the Personal Data Protection Authority (KVKK).

Other countries

In Egypt, Saudi Arabia, the United Arab Emirates, Jordan, Morocco, Canada, Mexico, Colombia, Argentina, India, Indonesia, Japan, South Korea, Vietnam, Pakistan and Bangladesh, you have the rights your country's law gives you, and we honour them in the same way: write to contact@anventureslabs.com. You can complain to your country's data protection authority.

12. Security

Information travels encrypted. The copy on your phone is encrypted. Each family's information is walled off from every other family's in our database. PINs, sign-in codes and invite links are stored only in scrambled form. Only a few people at our company can reach the systems, and only to run and fix the app. No system is perfectly safe; if a breach affects you, we will tell you and the authorities as the law requires.

13. Changes to this policy

The app carries a copy of this policy, so you can read it offline. The version on our website is the reference. When we change the policy, we update both, change the version and date at the top, and tell you in the app before an important change takes effect. If a change affects what we keep about children or teens, we ask the parent or legal guardian to agree again.

14. Contact

AN Ventures LLC (AN Ventures Labs)
contact@anventureslabs.com
821 W New Hope Dr, Ste 102 #3
Cedar Park, TX 78613, United States
Phone (voicemail): +1 (737) 235-8388