1. Introduction

Welcome to Family Mentor (“we,” “our,” or “the App”). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and protect your information.

This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information. By using Family Mentor, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address (for authentication and account recovery)
• Display name (chosen by you)
• Password (encrypted and securely stored via Firebase Authentication)
• Date of birth (used to calculate age for age-appropriate features)
• Account role (Parent or Child)

2.2 Family Information

To enable family collaboration features, we collect:

• Family name (chosen during family creation)
• 6-character family code (generated automatically for joining families)
• Family membership data (list of family members and their roles)
• Family relationship information (parent-child connections)
• Join dates and timestamps

2.3 User-Generated Content

We store content you create within the app:

• Chat messages (family chats, direct messages, mediator conversations)
• AI assistant conversations (questions and responses)
• Calendar events (family schedules and activities)
• Shopping lists (items, quantities, assignments)
• Meal plans (recipes, ingredients, dietary preferences)
• Chore assignments (tasks, completion status)
• Challenge room activities (challenges created and completed)
• Pantry items (inventory tracking)
• Activity searches (cities and activity preferences)
• Article bookmarks and preferences

2.4 Child Account Data

For parent-created child accounts, we collect:

• Imaginary email addresses (format: {parentUid}.child.{name}.{timestamp}@familyhub.app)
• Auto-generated passwords (encrypted, provided to parents)
• Parental permission settings (feature access controls)
• Usage tracking data (for parental controls and time limits)
• Age-based restrictions

2.5 Device and Technical Information

• Firebase Cloud Messaging (FCM) tokens (for push notifications)
• Device platform (Android/iOS)
• Last active timestamps
• App version information
• General error logs and crash reports (for debugging and improvements)

2.6 Usage Analytics

We collect limited analytics data:

• Feed interaction data (views, clicks on feed items)
• Feature usage patterns (for parental controls and app improvements)
• Content performance metrics (video views, article reads)
• Notification delivery status

2.7 Camera and Media

• Camera access (ONLY when you use the receipt scanner feature)
• Photos (ONLY images you choose to scan for receipt text recognition)
• Text extracted from receipts (processed on-device using Google ML Kit)

2.8 Text-to-Speech Preferences

• TTS on/off setting (stored locally on your device via SharedPreferences)
• No audio is recorded or transmitted

2.9 Location Data

2.10 What We Do NOT Collect

We explicitly do NOT collect:

• ❌ Precise GPS coordinates or location history
• ❌ Contacts from your device
• ❌ Photo library contents (only camera access for receipt scanning)
• ❌ Microphone recordings or voice data
• ❌ Browsing history or web activity
• ❌ Payment card information
• ❌ Health or fitness data
• ❌ Biometric data (fingerprints, face scans)
• ❌ Device identifiers (IMEI, MAC address, device fingerprints)
• ❌ Third-party app usage data

3. How We Use Your Information

3.1 Core App Functionality

• Authenticate users and maintain secure accounts
• Enable family creation, joining, and collaboration
• Facilitate chat and messaging features
• Store and sync user-generated content across devices
• Display personalized content in the smart feed
• Provide AI-powered assistance and recommendations

3.2 AI-Powered Features

• OpenAI GPT-4 Integration: Your questions and messages sent to AI assistants (Guide, Teacher, Supporter, Mediator) are processed by OpenAI’s API to generate responses. Conversations are stored in your Firestore account to maintain context.
• Meal Planning: Dietary preferences and pantry data are sent to OpenAI to generate personalized meal plans and recipe suggestions.
• Activity Search: Your city name and activity preferences are sent to OpenAI to find family-friendly activities.
• Article Generation: AI generates parenting tips and educational articles based on general topics (not personalized to your family).

3.3 Content Recommendations

• YouTube Data API: We use YouTube’s API to fetch family-friendly video content for the feed. No user data is shared with YouTube. Videos are fetched server-side based on general family topics.
• Google Places API: We use Google Places API to find local family activities based on city names you provide. No precise location or user identification is shared.

3.4 Notifications

Send push notifications for:

• New family chat messages
• Calendar reminders
• Chore assignments
• Challenge invitations
• Shopping list updates
• Family invitations

3.5 Parental Controls

• Track child account activity for parental oversight
• Enforce time limits and feature restrictions
• Monitor content access based on age-appropriateness

3.6 Analytics and Improvement

• Analyze feed engagement to improve content quality
• Monitor app performance and identify bugs
• Understand feature usage to prioritize development

3.7 Security and Safety

• Detect and prevent unauthorized access
• Enforce Firestore security rules
• Protect against spam and abuse

4. Data Storage and Security

4.1 Where Your Data is Stored

• Firebase Cloud Firestore: All user data is stored in Google’s Firebase infrastructure, primarily in US data centers.
• OpenAI Servers: AI conversation data is processed and temporarily stored by OpenAI (see Section 5.2).

4.2 Security Measures

• Encryption in Transit: All data transmitted between your device and our servers uses TLS/HTTPS encryption.
• Encryption at Rest: Firebase encrypts data at rest using industry-standard methods.
• Password Security: Passwords are hashed and encrypted via Firebase Authentication (never stored in plain text).
• Access Control: Firestore security rules ensure users can only access their own data and their family’s shared data.
• Role-Based Permissions: Family admins have elevated privileges; regular members have restricted access.

4.3 Data Retention

• Active Accounts: Data is retained as long as your account is active.
• Deleted Accounts: Upon account deletion, all personal data is permanently removed from Firestore within 30 days.
• AI Conversations: OpenAI retains API data for 30 days for abuse monitoring, then deletes it (see OpenAI’s data policy).
• Analytics: Aggregated, anonymized analytics may be retained indefinitely for app improvement.

5. Data Sharing and Third Parties

5.1 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5.2 Third-Party Services We Use

Firebase (Google LLC)

• Purpose: Authentication, database, cloud functions, push notifications, analytics
• Data Shared: Email, user ID, device tokens, user-generated content
• Privacy Policy: firebase.google.com/support/privacy

OpenAI (OpenAI, L.L.C.)

• Purpose: AI-powered chat assistants, meal planning, activity recommendations, article generation
• Data Shared: User messages, dietary preferences, pantry data, activity search queries
• Data Retention: OpenAI retains API data for 30 days for abuse prevention, then deletes it
• Privacy Policy: openai.com/policies/privacy-policy
• Note: OpenAI does NOT use your data to train their models (per API agreement).

YouTube Data API (Google LLC)

• Purpose: Fetch family-friendly video content for the feed
• Data Shared: NONE (API calls are server-side only; no user identification sent)
• Privacy Policy: policies.google.com/privacy

Google Places API (Google LLC)

• Purpose: Find local family activities based on city names
• Data Shared: City names entered by users (no GPS, no user identification)
• Privacy Policy: policies.google.com/privacy

Google ML Kit (Google LLC)

• Purpose: On-device text recognition for receipt scanning
• Data Shared: NONE (all processing happens on your device)
• Privacy Policy: policies.google.com/privacy

5.3 Legal Compliance

We may disclose your information if required by law, court order, or governmental request, or to:

• Protect the safety and rights of Family Mentor users
• Investigate fraud or security issues
• Comply with legal obligations

5.4 Business Transfers

If Family Mentor is acquired or merged with another company, your data may be transferred to the new entity. You will be notified of any such change.

6. Children’s Privacy COPPA Compliant

Family Mentor allows parents to create accounts for children under 13 years of age. We take children’s privacy very seriously and comply with the Children’s Online Privacy Protection Act (COPPA).

6.1 Parental Consent

• Required: Parents must create child accounts themselves using the in-app “Create Child Account” feature.
• No Direct Child Sign-Up: Children cannot create accounts without parental action.
• Imaginary Email System: Child accounts use fictional email addresses (e.g., parent123.child.emma.1234567890@familyhub.app) that do NOT require email verification.

6.2 Data Collected from Children

For child accounts, we collect:

• Display name (chosen by parent)
• Age/birthdate (for age-appropriate content filtering)
• Imaginary email address and password (generated by the app)
• User-generated content (messages, chore completions, challenge participation)
• Usage data (for parental oversight and time limits)

6.3 How We Use Children’s Data

• Enable participation in family activities (chats, challenges, chores)
• Provide age-appropriate AI assistance
• Allow parents to monitor activity and enforce controls

6.4 Third-Party Access to Children’s Data

• OpenAI: Children’s messages to AI assistants are processed by OpenAI (same as adults).
• Firebase: Children’s data is stored in Firebase Firestore under strict access controls.
• No Advertising: We do NOT show targeted ads to children or share their data with ad networks.

6.5 Parental Controls and Rights

Parents have full control over child accounts:

• Access: View all child activity and content
• Modify: Edit permissions, time limits, and feature access
• Delete: Permanently delete child accounts and all associated data
• Export: Request a copy of all child data

6.6 Contact for Parental Inquiries

7. In-App Advertising and Sponsored Content

7.1 Current Status

• Ad Banners: The app may displays promotional text banners within certain features.
• No Third-Party Ad Networks: We  may use AdMob, Facebook Ads, or any other third-party advertising platform.
• No Tracking/Targeting: Ads are generic and not personalized based on your behavior.

7.2 Sponsored Feed Content (Future Potential)

• The app infrastructure supports type: “sponsored” feed items.
• If we introduce sponsored content in the future, this policy will be updated to disclose:
  • What data is shared with sponsors (if any)
  • How sponsored content is labeled
  • Your opt-out options

7.3 Analytics on Ad Interactions

• We track views and clicks on feed items (including potential sponsored content) for performance analysis.
• This data is used internally and not shared with third parties (except aggregated stats for content partners).

8. Your Privacy Rights

8.1 Access Your Data

You can view all your data directly in the app:

• Profile settings (email, name, birthdate)
• Family information (members, chats, shared content)
• AI conversation history
• Calendar, shopping lists, meal plans, chores

8.2 Modify Your Data

You can edit most data directly in the app:

• Update display name, profile picture, and preferences
• Modify family settings (if you’re the family admin)
• Delete individual messages, events, or list items

8.3 Delete Your Data

• Individual Items: Delete messages, events, or other content within the app.
• Leave Family: Remove yourself from a family (your shared content remains for other members).
• Delete Account: Permanently delete your entire account and all associated data:
  • Go to Settings > Account > Delete Account
  • Confirm deletion
  • All data is removed from Firebase within 30 days

8.4 Export Your Data

• Request a Copy: Email us at info@familymentor.net or alphamad239@gmail.com to request a machine-readable export of your data (JSON format).
• Timeframe: We will provide your data within 30 days of verification.

8.5 Opt-Out of Notifications

• Push Notifications: Disable in your device settings (Settings > Apps > Family Mentor > Notifications).
• In-App Notifications: Manage notification preferences in app settings.

8.6 Withdraw Consent

• You can withdraw consent for data processing by deleting your account.
• For children’s accounts, parents can delete child accounts at any time.

8.7 Contact Us for Privacy Requests

9. International Users and Data Transfers

9.1 Data Location

• Family Mentor uses Firebase, which stores data primarily in US data centers.
• By using the app, you consent to the transfer and processing of your data in the United States.

9.2 European Users (GDPR)

If you are located in the European Economic Area (EEA) or UK, you have additional rights under GDPR:

• Right to Access: Request a copy of your data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Delete your data (“right to be forgotten”)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Opt-out of certain data processing activities

To exercise these rights, contact us at info@familymentor.net or alphamad239@gmail.com.

9.3 Data Protection

For GDPR-related inquiries, contact us: info@familymentor.net

10. Cookies and Tracking Technologies

10.1 Cookies

Family Mentor does NOT use browser cookies (it’s a native mobile app).

10.2 Local Storage

• SharedPreferences (Android): Stores local app settings (TTS preferences, onboarding completion status).
• No Cross-App Tracking: We do not track your activity outside of Family Mentor.

10.3 Firebase Analytics

• Firebase may use device identifiers (not personally identifiable) for analytics.
• You can opt-out of Firebase Analytics in device settings (varies by platform).

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• New features or services
• Changes in legal requirements
• Improvements to data security

11.1 Notification of Changes

• In-App Notice: We will notify you of significant changes via an in-app banner or notification.
• Effective Date: The “Last Updated” date at the top of this policy will be updated.
• Continued Use: Your continued use of the app after changes constitutes acceptance of the new policy.

11.2 Review Policy Regularly

We encourage you to review this policy periodically at: https://familymentor.net/family-mentor-app-privacy-policy/

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

13. Consent

By creating an account and using Family Mentor, you acknowledge that you have read, understood, and agree to this Privacy Policy.