Privacy Policy

Last Updated: 2025-10-13

1. Introduction

Welcome to Personal Family Organizer ("we," "our," or "us"). We are committed to protecting your privacy and the privacy of your family members. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our family organization platform.

By using the Personal Family Organizer service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access the application.


2. Information We Collect

We collect information that you provide directly to us, including:

  • Account Information

    Username, email address, password (encrypted), first name, last name, and display name

  • Family Information

    Family unit name, family member relationships, roles, and permissions

  • Content Data

    Recipes, chore lists, calendar events, meal plans, shopping lists, rewards, allowance tracking, and other content you create

  • Usage Information

    Log data, IP address, browser type, device information, and activity within the application

  • Communication Data

    Messages, comments, and notifications sent within the application


3. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, maintain, and improve our services
  • To create and manage your family account
  • To enable family members to collaborate and share information
  • To send you technical notices, updates, and support messages
  • To respond to your comments, questions, and requests
  • To monitor and analyze usage patterns and trends
  • To detect, prevent, and address technical issues and security concerns
  • To comply with legal obligations

4. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

  • With Family Members

    Information you create is shared with your family unit members according to the visibility settings you configure

  • With Service Providers

    We may share information with third-party service providers who perform services on our behalf (e.g., hosting, email delivery, analytics)

  • For Legal Compliance

    We may disclose information if required by law, legal process, or to protect the rights, property, or safety of our users

  • Business Transfers

    In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity


5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

  • Password encryption using industry-standard bcrypt hashing
  • Secure database connections with parameterized queries to prevent SQL injection
  • Session-based authentication using NextAuth.js
  • Role-based access control and permission systems
  • Regular security updates and vulnerability assessments

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.


6. Children's Privacy (COPPA Compliance)

Our service is designed for family use and may include accounts for children. We are committed to complying with the Children's Online Privacy Protection Act (COPPA).

Parent or guardian consent is required to create accounts for children under 13 years of age. We collect only the minimum information necessary to provide the service. Parents have the right to:

  • Review their child's personal information
  • Request deletion of their child's personal information
  • Refuse to allow further collection or use of their child's information

For questions about children's privacy, please contact us at [INSERT CONTACT EMAIL].


7. Your Rights (GDPR Compliance)

If you are located in the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR):

  • Right to Access

    You can request a copy of your personal information

  • Right to Rectification

    You can correct inaccurate or incomplete information

  • Right to Erasure

    You can request deletion of your personal information (subject to legal obligations)

  • Right to Data Portability

    You can request your data in a structured, machine-readable format

  • Right to Object

    You can object to processing of your personal information

  • Right to Restrict Processing

    You can request limitation of processing under certain circumstances

To exercise any of these rights, please contact us at [INSERT CONTACT EMAIL].


8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you wish to delete your account or request that we no longer use your information, please contact us. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.


9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our service and store certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

Types of cookies we use:

  • Session Cookies

    Essential for authentication and maintaining your logged-in state

  • Preference Cookies

    Remember your settings and preferences (e.g., timezone, language)


10. Third-Party Services

Our service may contain links to third-party websites or services that are not owned or controlled by us. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services. We strongly advise you to review the privacy policy of every site you visit.


11. International Data Transfers

Your information, including personal data, may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.


12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.


13. Contact Us

If you have any questions about this Privacy Policy, please contact us:

  • Email

    [INSERT CONTACT EMAIL]

  • Address

    [INSERT PHYSICAL ADDRESS IF REQUIRED BY LAW]