Privacy Policy

Family Day2Day is operated by KSSP Solutions LLC, a California limited liability company. Your privacy matters to us. This policy explains what information we collect, how we use it, and your rights regarding your data.

We collect the following categories of personal information when you use Family Day2Day: Account & Profile Data: Your name, email address, optional phone number, and relation label (e.g. Parent, Partner, Sibling, Grandparent — labels that describe the relationship between adult members). Date of Birth: We collect each member's date of birth for one purpose only — to verify they meet our 18+ minimum age (see Section 7). We store the date itself and the date on which the check passed, so we can demonstrate the requirement was applied. It is not used for marketing, profiling, advertising, or any form of age-based personalisation, and it is not disclosed to anyone other than the service providers that host our database. Family Activity Data: Lists, tasks, shopping items, calendar events, decisions and votes, point transactions, reward redemptions, and saved places you create within the app, and Shopping Session transcripts (the text of what was said and of Dewey's replies). Uploaded Images: Receipts you scan and calendar or schedule photos you import. Scanned receipt and calendar images are processed to extract items or events (see Section 3) and are not stored after processing. Scanned images are also sent to our AI provider, which handles them under its own retention policy (Section 3), and uploaded images are checked by automated moderation (Section 11). Authentication Data: Passwords stored as one-way cryptographic hashes (bcrypt) — never in plaintext. If you sign in with Google, we receive your name and email from Google only. Device & Technical Data: Expo push notification tokens (device identifiers used to deliver push notifications on iOS and Android), your browser's localStorage data (for web offline access), your approximate country derived from your IP address when your family account is first created, the app version installed on your device, and crash and error diagnostics (stack traces, device model, OS version) sent to our error-reporting service when the app malfunctions. Billing Data: When you subscribe, Apple, Google, or Stripe processes your payment and holds your card details; we receive only a subscription identifier, the plan and period you chose, the status of the subscription, and the dates of charges. We never receive your full card number. Consent Records: The Terms of Use version you accepted and when, and your confirmation of subscription terms at purchase. Communications: Your email address is used to send the notifications you configure in Settings, subscription and trial notices, and replies to messages you send us. We also send occasional product emails about getting started with the app; each one has an unsubscribe link, and unsubscribing does not stop account, trial or billing notices. Help questions: If you use Ask Help on our website, the question you type is sent to Anthropic, our AI provider, to generate an answer from our help articles. We keep the question text for up to 90 days, without your name, account, IP address or device identifier, to improve the Help center; we strip email addresses and phone numbers before storing it and delete any other personal details we notice. We do not try to work out who asked a question, and because nothing links a stored question to you, we cannot find or delete a particular question on request. Location Data (optional — "Store Reminders"): If you turn on the optional Store Reminders feature, the App asks your permission to use your device's location, including in the background ("Always"), so it can remind you when you arrive at a store or place you have saved that has items on one of your lists. This matching happens entirely on your device. Your location is never transmitted to our servers, never stored by us, and never shared with or sold to any third party. We do not collect, log, or retain your location, and we do not use it for advertising or tracking. The feature is off by default, requires your explicit opt-in, and can be turned off at any time in the App (Places → Store Reminders) or in your device's system settings. The only thing we record is a daily count of how many reminders the app showed and acted on — never where. Household sharing. Family Day2Day is shared by design. Lists, tasks, calendar events, decisions and votes, points, rewards, places and Shopping Session transcripts in a household are visible to every member of that household, and so are each member's name and relation label. Other members cannot see your date of birth, password, email address or phone number. The household administrator can add and remove members, and can delete the household and its content; every member can export their own data. If you leave a household or are removed from it, your account and profile are removed from that household; content you added to its shared lists, tasks, calendar and decisions stays with the household and is shown as added by a former member.

This notice is provided at or before the point of collection as required by the CCPA/CPRA. We do not sell personal information and do not share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes other than providing the feature you asked for.

Category (Cal. Civ. Code §1798.140)	What, specifically	Collected where	Purpose	Kept for	Sold / shared
Identifiers	Name, email, phone (optional), member ID, push token	Signup; Add member; Notification settings	Account, sign-in, household sync, the notifications you turn on	Life of the account + 30 days; backups ≤ 90 days	No
Characteristics of protected classifications (age)	Date of birth (age-check record)	Signup; Add member	Verify 18+; demonstrate the check was applied	Life of the account + 30 days; backups ≤ 90 days	No
Commercial information	Plan, billing period, subscription status, charge dates (no card numbers)	Checkout via Apple / Google / Stripe	Provide the subscription, renewals, receipts, refunds	Life of the account + 7 years for financial records	No
Internet / electronic activity	App version, crash diagnostics, sign-in timestamps, feature usage counts	Automatically while using the app	Keep the app working, diagnose faults, measure adoption in aggregate	Diagnostics 90 days; usage counts ≤ 400 days	No
Precise geolocation — used on your device only; not collected by us	Device location, on your device only, when Store Reminders is on	Device permission prompt in Places	Show nearby stores and arrival reminders	Never leaves the device; not retained by us	No
Audio / visual	Voice dictation and Shopping Session speech (both converted to text by your device or browser, which may use Apple's or Google's speech-recognition service under their terms; no audio reaches us or our AI provider), receipt and calendar images	Dewey, Shopping Session, receipt scanner, calendar import	Extract items and events; run a Shopping Session	Scan images not stored after processing; Shopping Session transcripts (text) 90 days	No
Inferences	None. We build no profiles.	—	—	—	No
Approximate location	Country from IP address, once	Account creation	Regional compliance, aggregate analytics	Life of the account	No
Help questions	Questions typed into Ask Help on our website (redacted of email addresses and phone numbers)	Ask Help box on familyday2day.com	Answer the question; improve the Help center	Up to 90 days	No

Your rights and how to exercise them are in Section 9. Sensitive personal information. The only sensitive personal information we collect is your account log-in (your email address with your password, which we store only as a one-way hash), and we use it only to let you sign in. Precise location for Store Reminders is used on your device only and is not collected by us. We use and disclose sensitive personal information only for the purposes permitted by California Civil Code §1798.121 and Regulation §7027(m) (providing the service you expect, keeping your account secure, and maintaining and servicing your account), so there is no right to limit its use and we do not offer a separate "Limit the Use of My Sensitive Personal Information" link.

We use the information we collect to: • Authenticate you and maintain your session across devices • Sync your family's lists, tasks, calendar, decisions and places across all devices • Send email notifications and reminders you configure in Settings, and the trial and subscription notices described in the Terms of Use • Send occasional product emails about getting started, which you can unsubscribe from at any time • Send push notifications for task assignments, approvals, digests, and cross-device sync • Power the Dewey AI assistant, receipt scanner and calendar import (see Section 3) • Determine your approximate country for regional compliance and internal analytics • Remind you when you arrive near a saved store that has items on a list, only if you turn on the optional Store Reminders feature — this matching happens on your device and your location is never sent to us • Detect and report prohibited imagery as required by law (see Section 11) • Provide technical support and diagnose issues • Comply with applicable laws and respond to lawful requests We do not sell, rent, or share your personal data with any third party for advertising or marketing purposes.

Family Day2Day includes an AI assistant named Dewey, a Shopping Session (a spoken or typed conversation with Dewey while you shop from your lists), a receipt scanner and a calendar photo import, each powered by Claude — an AI model developed by Anthropic, PBC ("Anthropic"). They are optional; the app works without them. What is sent to Anthropic: when you use an AI feature we transmit your message or dictated text, the image you chose to scan, and, for context, your family's list names, task text and due dates, and member first names. Shopping Session: most of what you say during a session is interpreted by our own software and never leaves our servers. Only when your words cannot be interpreted that way do we send that sentence, with the names and status of the items on the lists in the session, to Anthropic. Every turn — what you said, as text, and Dewey's reply — is stored with your household's data so the trip can be reviewed later and supported (see Section 10). Speech is converted to text by your device or browser (which may use Apple's or Google's speech-recognition service under their terms), and spoken replies are generated on your device; no audio is sent to us or to Anthropic. What is never sent: your location, dates of birth, passwords, email addresses, phone numbers, payment information, push tokens, or the content of lists you did not ask about. How Anthropic uses it: solely to generate a response. Under Anthropic's commercial terms for its API, Anthropic does not use data we send it to train its models. Anthropic's retention of API inputs is governed by its own policy (anthropic.com/privacy). Before first use of each AI feature the app shows a short notice with this information and asks you to continue. AI output is labelled as AI-generated. Important limitation: AI-generated responses may be inaccurate or incomplete. Do not rely on Dewey for medical, legal, financial, safety-critical, or any other high-stakes decisions.

We use the following third-party services to operate Family Day2Day. Each processes your data only as necessary to provide its function, in the United States unless stated: • Neon (neon.tech) — cloud PostgreSQL database where all family data is stored • Vercel (vercel.com) — application hosting and serverless API • Anthropic (anthropic.com) — AI model API (Claude) for Dewey, the Shopping Session, receipt scanning and calendar import in the app, and Ask Help answers on our website • Resend (resend.com) — transactional email delivery • Google (google.com) — Sign in with Google (name and email only; no Drive, contacts, or other Google services are accessed) • Expo / Expo Push (expo.dev) — push notification delivery for iOS and Android • Sentry (sentry.io) — crash and error reporting (stack traces and device diagnostics; we configure it to scrub personal data from reports) • Apple (App Store) and Google (Google Play Billing) — subscription purchases made on your device; they hold your payment details under their own privacy policies • Stripe (stripe.com) — subscription purchases made on the web; Stripe holds your payment details under its own privacy policy • Plausible Insights OÜ (Plausible Analytics) — cookieless website statistics for our marketing pages at familyday2day.com only (page views, referrer, campaign tags, browser and device class, country, and a "joined the waitlist" event); never inside the app. Your IP address is used only to derive your country and a daily-rotating hash and is not stored. Processed in the European Union (Germany). • RevenueCat — subscription management for App Store and Google Play purchases (receives purchase, renewal and cancellation events from Apple and Google and relays them to us; no card data) • Microsoft PhotoDNA Cloud Service (microsoft.com/photodna) — matching of uploaded images against known child sexual abuse material (Section 11); Microsoft receives a hash of each uploaded image computed on our server, not the image itself We have data processing terms in place with these processors as required by applicable law.

If you enable push notifications, we store an Expo Push Token — a device identifier generated by Expo — on our server, associated with your family and member record. This token is used to deliver the notifications you have enabled (task assignments, approvals, reward redemptions, daily digests) and silent background messages that tell your other devices to refresh. You can disable push notifications at any time in your device's system settings or in the app's Notification Settings.

The web version of Family Day2Day uses your browser's localStorage to cache your family data for offline access. No third-party tracking cookies, advertising pixels, or analytics SDKs that set cookies are used in the app. Our marketing website (not the app) uses Plausible Analytics, a cookieless statistics service that counts page views without cookies, local storage or personal identifiers; see the Cookie Notice for details. When you check out on the web, Stripe's checkout pages set their own cookies under Stripe's policy. If you clear your browser's localStorage, you will need to sign in again. For the full itemised account of what is stored locally and why, see our Cookies & local storage page (familyday2day.com/cookies). Do Not Track and Global Privacy Control. We do not sell or share personal information and do not track you across other companies' sites or apps, so there is nothing for a Do Not Track or Global Privacy Control signal to turn off. We treat both signals as a request to keep it that way, and our website does not load its analytics script for a browser that sends either signal.

Minimum age: Family Day2Day is for adults only. You must be 18 or older to use the App. It is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18. No minor members: Every person in a family — including anyone an administrator adds — must be 18 or older. There is no mechanism for a parent or guardian to create an account, profile, or member record for someone under 18, and doing so is a violation of our Terms of Use. How we enforce it: We ask for each member's date of birth when their record is created and check it against the 18+ minimum before the account can be used. See Section 1 for how that date is stored and Section 10 for how long we keep it. Discovery and removal: If you believe someone under 18 has created an account or been added as a member, please contact us at the address in Section 13. We will verify, remove the member, and delete the associated personal information from our primary database within 30 days and from any backups within 90 days. What "personal information" means in this section: name, email address, phone number, date of birth, device push token, IP address, and any list, task, calendar or comment content the person has created.

Family Day2Day is operated from the United States. All family data is stored on servers located in the United States (Neon and Vercel). AI queries are processed in the United States (Anthropic). Email delivery is processed in the United States (Resend). Family Day2Day is offered only in the United States (Terms of Use, Section 21).

Depending on where you live, you may have the following rights regarding your personal data: For all users: • Access — request a copy of personal data we hold about you • Correction — request correction of inaccurate data • Deletion — request deletion of your account and associated data • Portability — request an export of your data in a machine-readable format You can exercise access, portability and deletion yourself, immediately, from Settings → Privacy & Data in the app or at familyday2day.com/delete-account. California residents: you may ask us to tell you what personal information we have collected about you (the categories and specific pieces, the sources, the purposes, and the categories of service providers we disclose it to), and to delete or correct it. We do not sell personal information or share it for cross-context behavioral advertising, and we do not use sensitive personal information in a way that gives a right to limit it, so there is nothing to opt out of or limit. We will not discriminate against you for exercising your rights. You may use an authorized agent; we may ask the agent for proof of authority and ask you to verify your identity. We verify requests by confirming control of the email address on the account. To exercise any right by email, write to contact@ksspsolutions.com with the subject "Privacy Request." We will confirm receipt within 10 business days and respond within 45 days. If we need more time, we will tell you why, and we may take up to 45 more days where the law allows.

We retain your family's data for as long as your family group is active on the platform, and then as follows: • Account and family data (members including dates of birth and age-check records, lists, tasks, events, decisions, points, rewards, places): deleted from our primary database within 30 days of a verified deletion request or account deletion, and from backups within 90 days. A paused household (trial ended, no subscription) keeps its data until you delete it. • Uploaded scan images (receipts, calendar photos): processed and not stored. • Consent records (Terms acceptance, purchase confirmation): at least 3 years, and at least 1 year after the subscription ends. • Billing records received from Apple, Google or Stripe: 7 years for tax and accounting. • Crash diagnostics: 90 days. Delivery logs for notifications: 30 days. Usage counts used for aggregate analytics: up to 400 days. • Shopping Session transcripts (the text of what you said and what Dewey replied, with the items checked off or added): kept for 90 days after the session and then deleted automatically, or sooner if the household is deleted. If a member leaves or is removed, the turns they spoke stay in the household's transcripts until that 90-day window ends. • Questions typed into Ask Help on our website are kept for up to 90 days, with no name, account, IP address or device identifier attached, and then deleted automatically. • Data transmitted to Anthropic for AI processing is subject to Anthropic's own retention policy. When you choose Leave household in Settings, your member record is removed from the household and kept for 30 days so the administrator can restore it if the removal was a mistake; after that it is deleted. Content you added stays with the household, shown as from a former member (Section 1). To delete your account entirely, or the whole household if you are its administrator, use Settings → Privacy & Data.

We implement technical and organizational measures to protect your data, including: • TLS (HTTPS) encryption for all data in transit • Bcrypt hashing for all passwords — plaintext passwords are never stored • Row-level access controls in our database so one household's data cannot be read by another • Rate limiting on authentication endpoints to prevent brute-force attacks • Server-side input validation and HTML escaping to prevent injection attacks • Multi-factor authentication on our own administrative access Image safety. Images uploaded to the app are checked by automated moderation. We are required by U.S. law (18 U.S.C. §2258A) to report apparent child sexual abuse material to the National Center for Missing & Exploited Children; where that duty applies we preserve the material as the law requires and report it. See our Community Guidelines. No method of electronic storage or transmission is completely secure. In the event of a data breach that poses a risk to you, we will notify affected users and relevant authorities within the timeframes required by applicable law. Found a vulnerability? Please report it responsibly — see our security & vulnerability disclosure policy at familyday2day.com/security (machine-readable at /.well-known/security.txt).

We may update this Privacy Policy periodically. For material changes — particularly those affecting how we process your personal data — we will provide notice within the app and update the effective date at the top of this page. Where required by law, material changes that affect data processing will require your affirmative acknowledgment before taking effect.

Family Day2Day is operated by KSSP Solutions LLC, based in California, USA. Mailing address: 3722 Old Santa Rita Rd #1006, Pleasanton, CA 94588. For privacy questions, data subject requests, or to report a concern: Email: contact@ksspsolutions.com · Subject line: "Privacy Request" We will acknowledge and respond to requests as described in Section 9. Version 6 · Effective November 6, 2026.