Privacy Notice

DEVELOPMENT DRAFT — REQUIRES OPERATOR-SPECIFIC DETAILS Controller/operator: [ENTER LEGAL NAME, ADDRESS AND PRIVACY CONTACT] Information in this application Account records include email addresses, password hashes where a local password is used, linked Google identity identifiers, verification status, invitation records and security events. Profiles include a display name, birth date and voluntarily entered details. Social records include friends, messages, group memberships, posts and uploaded images. Policy acknowledgments and optional-media choices are recorded with their version and time. Age and visibility The proposed development membership rule is 13+, with required supervision through age 17. A birth date is used to assess eligibility and is private by default. This is self-declared eligibility, not identity-document verification. A display name is required; a public legal name is not. A stored restriction requires an administrator review before correction. Providers and recipients This application sends account email using Resend and supports optional Google sign-in. Embedded external images, music and videos are disabled unless allowed in Privacy choices; enabling them makes requests to their providers, which may receive your address and technical information. Authorized site administrators may access data for support and moderation. [LIST ALL OTHER ACTUAL HOSTING, LOGGING, ANALYTICS AND EMAIL PROVIDERS AND INTERNATIONAL TRANSFERS]. Retention, rights and lawful bases [SET ACTUAL RETENTION PERIODS FOR ACCOUNTS, MESSAGES, UPLOADS, INVITES, LOGS, BACKUPS, SECURITY AUDITS AND POLICY RECEIPTS]. [EXPLAIN PURPOSES AND APPLICABLE LAWFUL BASES; USER RIGHTS, DELETION/EXPORT PROCESS, CONTACT AND REGULATOR RIGHTS WHERE APPLICABLE]. The development cleanup action removes old expired verification challenges and budgets after seven days; it does not implement a complete account deletion or retention policy. Your choices Use Privacy choices to reject or allow optional external media at any time. This notice is information about processing, not a blanket consent request. Acknowledging that you have read a new version does not grant permission for unrelated processing. Complete and review this notice before production. Family Center — guardian access and records Members aged 13–17 have supervised accounts. Their birthday and location fields are hidden on public profiles. Guardian access is not secret: the teen sees a supervision notice, the guardian's identity, and recent family-review activity. Other members are informed that supervised accounts exist and that messages/group activity involving a teen can be reviewed. Guardians use their own accounts and a fresh email verification step. Access is limited to the linked teen, their conversations, their profile activity and groups the teen is approved to use. There is no general access to another participant's inbox. A group ban or loss of membership restricts group reading. Guardian access ends at 18, withdrawal, revocation, or a disputed-link review. The service records link requests, both parties' acknowledgments, the administrator's review reference, guardian permissions, and metadata about reviews and controls. Message bodies, passwords and verification codes are not duplicated into family audit logs. A claim of guardianship requires independent review outside the application; this application is not an identity-document validation service. Do not submit ID documents through profile or group uploads for this purpose. [DEFINE A LAWFUL BASIS AND NECESSITY/PROPORTIONALITY FOR GUARDIAN ACCESS, INCLUDING OTHER MESSAGE PARTICIPANTS; DEFINE RETENTION/DELETION FOR FAMILY LINKS, PERMISSIONS, REVIEWS AND AUDIT LOGS; DOCUMENT CHILD SAFETY, DISPUTE AND GUARDIAN AUTHORITY CHECK PROCEDURES BEFORE PRODUCTION]. A privacy acknowledgment is not blanket consent to all processing. This is a development draft, not legal approval to monitor minors.