Privacy Policy

Introduction

Welcome to FocalNest. We are committed to protecting your privacy and the privacy of your family, especially children. This Privacy Policy explains how we collect, use, and protect your information.

Note: FocalNest complies with the Children's Online Privacy Protection Act (COPPA). If you are a parent or guardian, please read the Children's Privacy section carefully.

1. Information We Collect

1.1 Information You Provide

• Account Information: Display name, birthday, optional email
• Family Information: Family name, family member roles
• Task Data: Tasks created, completed, and assigned
• Preferences: Display settings, accessibility options
• Calendar Events: Events you create in your family calendar

1.2 Information We Don't Collect

• Full legal names or last names
• Physical addresses or phone numbers
• Location or geolocation data
• Social security numbers or government IDs
• Payment information (handled by third-party processors)
• Photos or images (unless you explicitly upload them)

2. How We Use Your Information

We use your information only to provide and improve FocalNest:

• Display your name and avatar within your family
• Show age-appropriate features based on birthday
• Track task completion and award points
• Enable family coordination (shared calendar, task assignments)
• Provide accessibility features (ADHD-friendly UI, etc.)
• Send important account notifications (with your consent)

We NEVER: Show ads to children, sell your data to third parties, or use your data for marketing purposes.

3. Children's Privacy (COPPA Compliance)

FocalNest complies with the Children's Online Privacy Protection Act (COPPA). We take additional steps to protect children under 13.

3.1 Parental Consent

We do not knowingly collect personal information from children under 13 without verifiable parental consent. When a child attempts to register:

• We require birthday to calculate age
• If under 13, we block self-registration
• We request parent/guardian email
• We send verification email to parent
• Account activates only after parent verifies consent

3.2 Information Collected from Children

With parental consent, we collect from children:

• First name (for display)
• Birthday (for age-appropriate features)
• Task activity (chores completed, points earned)
• User preferences (accessibility settings)

We do NOT collect from children:

• Email addresses
• Phone numbers
• Location data
• Photos (unless parent uploads)
• Any data shared with third parties

3.3 Parental Rights

Parents have the following rights regarding their child's account:

• Review: View all data collected from your child
• Export: Download all data in machine-readable format (JSON)
• Delete: Request permanent deletion of child's account and data
• Revoke: Withdraw consent at any time (account becomes inactive)
• Refuse: Stop further data collection

To exercise these rights, visit your Parental Controls Dashboard or email us at privacy@focalnest.app.

3.4 Consent Updates

If we update our privacy policy in a way that affects children, we will notify parents and request renewed consent. Children's accounts will be temporarily restricted until parents review and approve the updated policy.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share data only in these limited cases:

• Within Your Family: Family members see shared tasks, calendar, and activity
• Service Providers: Hosting, email (Resend), with strict data protection agreements
• Legal Requirements: If required by law (court orders, subpoenas)
• Safety: To protect against fraud, abuse, or safety threats

We never share children's data with advertisers or marketing companies.

5. Data Security

We protect your data with industry-standard security measures:

• HTTPS/TLS encryption for all data transmission
• Encrypted passwords (bcrypt hashing)
• Role-based access controls
• Regular security updates and audits
• Isolated family data (multi-tenant security)

6. Data Retention

We retain your data as follows:

• Active Accounts: Data retained as long as account is active
• Inactive Accounts: Deleted after 2 years of inactivity
• Child Accounts (Consent Revoked): Account disabled immediately, data preserved for 30 days, then deleted
• Account Deletion: 30-day grace period, then permanent deletion
• Backups: Purged from backups within 90 days of deletion

7. Your Rights

You have the right to:

• Access: Request a copy of your data
• Correction: Update incorrect information
• Deletion: Request account and data deletion
• Export: Download your data in JSON format
• Objection: Object to certain data processing activities

To exercise these rights, visit Settings or email privacy@focalnest.app.

8. Cookies and Tracking

We use minimal cookies:

• Essential Cookies: Authentication, session management (required)
• Preferences: Remember your settings (optional)

We do NOT use: Advertising cookies, tracking pixels, or third-party analytics

9. Third-Party Services

We use these third-party services:

• Hosting: Fly.io / Cloudflare (data encrypted at rest and in transit)
• Email: Resend (for transactional emails only)
• Payments: Stripe (we don't store payment info)

All service providers sign data protection agreements and comply with applicable privacy laws.

10. International Users

FocalNest is based in the United States. By using our service, you consent to the transfer and processing of your data in the US. We comply with applicable international privacy laws including GDPR (EU) and PIPEDA (Canada).

11. Changes to This Policy

When we make changes:

• We update the "Last Updated" date at the top
• We increment the version number
• We notify you via email or in-app notification
• For children: We notify parents and request renewed consent

12. Contact Us

If you have questions about this Privacy Policy or our data practices:

For COPPA-related questions or to exercise parental rights, please include "COPPA Request" in your subject line.

13. COPPA Safe Harbor Certification

FocalNest is pursuing certification through the kidSAFE Seal Program, an FTC-approved COPPA Safe Harbor. This provides independent third-party validation of our children's privacy practices.

Status: Application in progress (as of March 2026)