Privacy Policy

1. Introduction and Scope

2674156 ONTARIO INC., operating as FamilyBase ("we," "us," or "our"), respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the FamilyBase mobile application, web application, and related services (collectively, the "Service").

This policy is designed to strictly comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada, applicable Canadian provincial privacy laws, and the Children’s Online Privacy Protection Act (COPPA) in the United States.

2. Information We Collect (Limiting Collection)

In accordance with PIPEDA's principle of limiting collection, we collect only the personal information reasonably necessary to operate, secure, and deliver the FamilyBase experience:

• Account Information: When an adult registers a primary account, we collect an email address, display name, and authentication credentials (securely managed via Firebase Authentication).
• Family Hub Data: Data inputted by you or household members authorized within your hub, including chore/task assignments, grocery lists, calendar events, meal plans, custom family recipes, personal/shared notes, and in-game points/scores.
• Device & Technical Usage Data: Firebase Cloud Messaging (FCM) tokens to deliver transactional alerts (e.g., chore assignments, perishable expiration reminders). Standard technical metadata (IP address, operating system, device model) is processed via Firebase App Check and Google reCAPTCHA v3 to prevent bot abuse and secure our infrastructure.
• Location Data (Weather Features): If you utilize the integrated household weather display, the application requests temporary, ephemeral access to your device's geolocation coordinates (latitude and longitude). This data is processed strictly in real-time to fetch local weather forecasts via third-party providers (BigDataCloud and Open-Meteo). Location coordinates are never written to disk, stored on our Firestore servers, or linked to your user profile.
• Camera Data (Barcode Scanning): If you utilize the grocery barcode scanner, camera permissions are required. Barcode images are processed strictly locally on your device hardware and are never transmitted to our servers or stored. Only the extracted numerical barcode sequence is transmitted to the Open Food Facts API to retrieve matching product titles.
• Subscription Data: Subscriptions are managed via RevenueCat. Full credit card and financial information is processed exclusively by Apple App Store, Google Play Store, or our secure web payment gateways. We do not store financial account numbers on our servers.
• Aggregated Analytics Data: Non-identifying operational telemetry and performance metrics via Google Analytics for Firebase to diagnose application crashes, measure system latency, and refine user experience.

3. Children's Privacy & COPPA Compliance

FamilyBase is built for household collaboration. Because children under 13 may interact with the platform under parental oversight, we enforce strict safeguard mechanisms:

• Data Minimization for Minors: Minor accounts are restricted to essential operational data: a login-routing email, display name/nickname, custom emoji avatar, and in-app activity metrics (tasks completed, arcade game scores, leaderboard points).
• Zero Third-Party Advertising / Tracking: We do not track children across third-party websites or apps, nor do we serve targeted behavioral or context-based advertisements to minors.
• Parental Control & Deletion Rights: Family Admins maintain full real-time oversight. Admins can inspect minor activity, reset leaderboard points, revoke permissions, or permanently remove a minor from the Family Hub via Admin Controls. Parents may also contact our Privacy Officer to request complete erasure of a child's data.

4. How We Use Your Information (Identifying Purposes)

Under PIPEDA, we identify the purposes for data collection prior to or at the time of collection. Your data is used exclusively to:

1. Synchronize tasks, events, grocery lists, and meal plans seamlessly across linked family devices in real-time.
2. Generate automated household insights (e.g., "Grocery Insights", "Wellness Scores", and perishable food expiration alerts).
3. Send user-requested push notifications regarding pending household chores and scheduled events.
4. Maintain family leaderboards, chore reward redemptions, and digital arcade high scores.
5. Verify and manage Premium entitlement access across household members.
6. Secure our API infrastructure against unauthorized intrusion, bot abuse, and security vulnerabilities.

5. Data Sharing and Third-Party Sub-Processors

We do not sell, rent, trade, or monetize your personal information. We share data only with bound third-party sub-processors strictly required for platform infrastructure:

6. Data Retention, Account Deletion & Individual Access

Self-Serve Erasure: You retain complete ownership of your data. You may permanently delete your user account and personal data at any time by navigating to Profile > Danger Zone > Delete Account in the app. This action triggers immediate re-authentication, revokes family access, removes your Firestore profile, and disassociates your record from active databases.

Family Hub Wipes: If a Family Admin deletes a Family Hub, all associated sub-collections (tasks, groceries, recipes, calendar events, point logs) are permanently purged from active Firestore databases.

7. Security Safeguards

We enforce rigorous technical and organizational safeguards: TLS/HTTPS 1.3 encryption for all data in transit, AES-256 encryption for data at rest on Google Cloud, and Firestore Security Rules that restrict database read/write access strictly to authenticated members of your verified Family Hub ID.

8. Contact Our Privacy Officer

For questions regarding this Privacy Policy, PIPEDA compliance, individual access requests, or parental consent revocation, contact our Privacy Officer: