Children's Privacy Notice

Effective October 2, 2026 · Version 2026-10-02

This notice is for parents and legal guardians. It explains how Fammit, made by Caridad Studios LLC ("we", "us"), collects, uses and shares information about children, including children under 13, and the choices and rights you have. It's written to meet the U.S. Children's Online Privacy Protection Act and the FTC's COPPA Rule ("COPPA"). It's part of our Privacy Policy and Terms of Service.

How children use Fammit

• Children can't sign up for Fammit. A parent or legal guardian who is at least 18 creates the household, adds each child's profile, and gives the consent described below before we collect a child's information.
• A child signs in with a four-digit PIN on a device the family has set up, and uses Fammit inside the household the parent manages: to see the family calendar, tick off chores and routines, work on goals, post in the family feed, and ask the assistant (if the parent allows it).
• Fammit has no advertising, doesn't track children across other apps or websites, and doesn't let children make their information publicly available. A child's posts are seen only inside the household and by connected relatives the parent chooses.

Information we collect about children

What a parent enters

• The child's first name or nickname, birthday or age, color and role in the household.
• A profile photo and banner picture, if added.
• A four-digit PIN, used only to sign in on the family's devices.
• Interests, favorite treat, bio and quote, if added; chores, routines, goals and allowance settings the parent assigns.

What a child creates while using Fammit

• Chore and routine check-offs, including any photo taken as proof of a finished chore.
• Goals and progress (for example, books and pages read).
• Feed posts, comments, reactions, photos, videos and journal entries.
• Messages to the assistant and its replies. The assistant is available to children unless a parent turns it off for them (Settings › Assistant).
• Wishlist items, rewards they redeem and what they choose to save up for.
• Events they add to the family calendar, if the parent allows it.

Only if turned on for the child

• Activity from Apple Health: daily totals such as steps, used only to update the child's activity goals.
• Screen Time app blocking: managed by the device's operating system. We don't receive which apps the child uses.
• Notifications: the device's push-notification token, to send the child reminders.

Collected automatically

• Technical information needed to run and secure Fammit: the app version, device type and operating system, the time of each action, and the IP address in our server logs. We use these only to support Fammit's internal operations (keeping it working, secure and in sync), not to build profiles or for advertising.
• We don't collect a child's device location (GPS), contacts, or advertising identifiers. The household's home address, if a parent adds it, is kept for drive times and the weather. Where a photo was taken is kept only from a parent's post, never from a child's post, and it never leaves the household except as the name of a town to connected relatives.

We don't require a child to share more information than is reasonably necessary to use a feature.

How we use children's information

• To provide Fammit's features to the household: showing the child's calendar, chores, routines, goals, feed and balance; sending reminders; celebrating achievements; and showing the family's wall display and widgets.
• To answer the child's questions to the assistant, and to check that a profile photo shows a face, when those features are used.
• To keep Fammit secure, prevent abuse, fix problems and meet legal obligations.

We never sell children's information, use it for targeted advertising, or use it to train AI models.

Who can see or receive children's information

• The household. Members of the child's household can see what's shared in the household. Parents can see and manage everything in a child's profile except the child's journal. Journal entries are private to the child who wrote them: they're kept apart from the household's information and sent only to the child, signed in with their own PIN. Not even a parent can read them in the app; a parent can ask us for a copy (see "Your rights as a parent").
• Connected households. Only what a parent chooses to share (for example, feed posts marked for extended family, wishlists and birthdays) is visible to relatives the parent connects with.
• Wall displays. A screen the parent pairs shows household information, such as the child's name, photo, chores and routines, to anyone who can see that screen.
• Event invite links. If a grown-up in the house shares an event's invite link, anyone with the link can see that event: its title, time, place, who's hosting and who it's for (which may include a child's first name), and any photos on it. Invite pages aren't listed in search engines.
• Pages of posts. A parent can send a page of the family's posts to someone without Fammit, for example the week's news for a relative on a mission. Before the page is made, the parent confirms they're a parent or guardian of the children in it, and we keep a record of that confirmation: who made it, which children's posts are on the page, and when the page ends. Anyone with the link can see the posts on it, with their photos, videos, voice notes and comments, until it expires (3 to 30 days, the parent's choice) or the parent stops it. If the parent chooses to let a video play in the message (it starts off when a child is in the post), the recipient's messaging app keeps a copy of that video, and stopping the page doesn't remove it. A child appears by first name only, and we remove where a photo or video was taken before showing it. Journal entries, private thank-yous and amounts of money are never on a page. Editing a post changes it on the page, deleting it takes it off, and deleting the household takes the pages down. Pages aren't listed in search engines. A child can't make one.
• Service providers that run Fammit for us, under contracts that require them to keep the information confidential and use it only to provide their service to us:
  • Cloudflare: hosting, databases and photo storage.
  • Anthropic and OpenAI: AI processing of what a child sends to the assistant, photos scanned or checked (including the profile photo check), and artwork. They process it to return a result, may keep it for a limited period (generally no more than 30 days) for safety and abuse monitoring, and may not use it to train their models.
  • Expo: delivering push notifications (the device token and the notification's text).
  • Apple and Google: delivering notifications to the child's device (Apple Push Notification service and Firebase Cloud Messaging).
  • Google Maps: the household's home address and the places on events, to work out drive times. Nothing about the child is sent with them.
  • Open-Meteo and MET Norway: the home's coordinates, for the weather forecast. Nothing about the child is sent with them.
  • Apple, Google and Microsoft: calendars, only if the parent connects one, and Apple Health, only if health sync is turned on.
  • GIPHY: the words searched for when a child looks up a GIF.
• The law and safety. When required by law, or to protect a child's or anyone's safety, and to report apparent child sexual exploitation as the law requires.
• Business transfers. If Caridad Studios is merged or sold, children's information may be transferred, subject to this notice and to COPPA.

Profile photos and faces

When a profile photo is added, Fammit may send it to an AI provider to check that it shows a face (and offer a tip, such as "a little closer"). The check returns only whether a face is visible, close enough, smiling and with eyes open, which Fammit uses to offer a tip; nothing else is kept from it. We don't create, store or use face templates, face geometry or any other biometric identifier, and we don't use photos to recognize or identify anyone. The photo itself is kept only as the child's profile picture.

Parental consent

Before we collect information about a child, the adult setting up the household must:

• confirm their date of birth shows they're at least 18;
• sign in with an account tied to their own email address and password;
• read this notice, the Privacy Policy and the Terms; and
• confirm that they're the child's parent or legal guardian (or have that person's permission) and give consent in the app to our collecting, using and disclosing the child's information as this notice describes.

We keep a record of that consent: the date and time, the version of this notice, and the account that gave it. We may ask for additional verification before collecting a child's information or before honoring a request about it. We send the household's email address a notice confirming the consent and explaining how to withdraw it.

Your rights as a parent

You can, at any time:

• Review your child's information. Most of it is visible to you in the app. Your child's journal isn't, so that it stays theirs day to day; you can ask us for a copy of all of your child's information, journal included.
• Correct it, in the app or by asking us.
• Delete items such as posts and photos in the app, or ask us to delete your child's profile and all of their information.
• Refuse further collection. Asking us to remove your child's profile stops all further collection about that child. You can also turn off individual features for a child, such as the assistant, health sync or notifications.
• Withdraw consent to the disclosure of your child's information to the AI service providers named above, without withdrawing consent to the rest of Fammit, by turning off the assistant and photo features for your child or by writing to us.

To make a request, write to [email protected] from your household's email address. We'll verify that you're the child's parent or guardian before acting, and respond within 30 days.

How long we keep children's information

We keep a child's information only as long as reasonably necessary to provide Fammit to the household:

• While the household uses Fammit, a child's information is kept so the family's history (chores, goals, posts) stays available. Older history may be moved to archived storage.
• Items a parent or child deletes are removed from our active systems right away and from backups and archives within 90 days.
• When a child's profile is deleted, or the household is deleted, we delete the child's information within 30 days, and from backups and archives within 90 days.
• Server logs that contain technical information are kept for no more than 30 days.
• A household that hasn't been used for 24 months may be deleted after we email the household's address.

We keep information longer only where the law requires it, and then only for that purpose.

How we protect it

We maintain a written information security program for children's information. Information travels over encrypted connections; passwords are stored only as salted hashes; sign-in tokens for connected services are encrypted; photos open only through signed links that can't be guessed; and access by our team is limited to what's needed to run and support Fammit.

Teens

Household members aged 13 to 17 use Fammit under the same parental supervision and protections described here, and a parent can exercise the same rights for them.

Changes to this notice

If we make a material change to how we collect, use or disclose children's information, we'll tell parents in the app and by email before it takes effect, and ask for new consent where COPPA requires it.

Contact

The operator responsible for children's information in Fammit is:

Caridad Studios LLC
1475 E Waterfall Way, Fruit Heights, UT 84037
(801) 436-7768
[email protected]