Subprocessors
These are the third-party services that process data on our behalf in order to run FocalNest. Each operates under a data processing agreement.
| Service | What it does | What it processes | Location |
|---|---|---|---|
| Fly.io | Application and database hosting | All application data | United States |
| Cloudflare | Hosting for this website and the app’s web files, card and adventure art, CDN, DDoS protection | Request traffic, such as IP addresses; no account data | Global edge network |
| Stripe | Subscription billing | Billing email, payment details (we never see or store card numbers) | United States |
| Postmark | Transactional email (password resets, parental consent, invitations), delivering messages sent through the contact form on this website, and inbound email parsing (forwarding an email to create tasks and events) | Your email address and the contents of emails we send you; the name, email address, and message you type into the contact form; the contents of emails you choose to forward to your family address | United States |
| Twilio | Receiving texts you choose to forward to FocalNest, so they can become tasks and events. FocalNest never sends texts | The texts you forward, any photos in them, and the phone number you forward from. Each text is deleted from Twilio once FocalNest has read it | United States |
| Loops | Waitlist emails | The email address you join the waitlist with | United States |
| Sentry | Error and performance monitoring | Error reports and a sample of request timings, with cookies and IP addresses left out | United States |
| Anthropic | AI project drafting, first-step generation, suggesting steps for a task, forwarded-email parsing, the momentum observation, and matching tasks to Play mode adventures | Your project description or forwarded email, including any photos or PDFs attached to it, plus household shape (roles and age ranges, not names). Email parsing additionally sends existing collection titles and identifiers, the titles of up to 15 recent open tasks, and the names of your family’s places (like “Kitchen”), so a forwarded message can be filed against something that already exists. For a forwarded email or text that links to a page with the details, Anthropic may open up to two of those links, as a signed-out visitor. A task’s text is sent only when everyone the task is for has AI turned on, whoever is using the feature | United States |
| OpenAI | Generating collectible card art and ambient backgrounds | None. The art is generated ahead of time from prompts we write, reviewed, and shipped with the app. Nothing about you or your family is sent | United States |
| ElevenLabs | Reading task and reward titles aloud for young readers, and saying what the kitchen screen is counting down to; generating narration and the background sounds for Play mode adventures | The words of a task or reward title shown to a young reader, or of the routine or event the kitchen screen counts down to, the first time those words are spoken on FocalNest. Narration and background sounds are generated ahead of time from text and prompts we write, with no customer data | United States |
| Capawesome | Delivering app updates to the installed Android and iOS apps | A random ID the app creates for each install, the app and system versions, and the request’s IP address; no account or family data | Global server network (company based in Germany) |
| Optional Google Calendar sync and Google sign-in | Calendar events you choose to sync; your Google account email | United States | |
| Apple | Optional Sign in with Apple | Your Apple account email (or a private relay address Apple creates for you); a sign-in token we send back to Apple only to revoke it if you delete your account | United States |
| Firebase Cloud Messaging (Google) | Delivering notifications to the installed Android and iOS apps. Not switched on yet | Once switched on: each notification’s title and text (for example a task title, a parent’s message, a forwarded email’s subject, or a child’s first name and the card they found) and a token that names the device. Children’s own phones and tablets receive these too; shared screens in a room do not | United States |
| Apple (APNs) | Apple’s notification delivery, which passes those same notifications on to iPhones and iPads. Not switched on yet | The same notification title and text, and the device’s token | United States |
| Have I Been Pwned | Checking whether a new password has appeared in a known data breach | The first 5 characters of a scrambled (SHA-1) version of the password, which is not enough to tell which password it was. Nothing else | Global server network (service run from Australia) |
| Better Stack | Uptime monitoring and our status page | None about you. It checks our public health addresses from outside, and our server sends it an empty check-in while background jobs are healthy | Global monitoring network (company based in the Czech Republic) |
A note on the AI services
Anthropic mostly processes text when you use an AI feature, like asking the wizard to draft a project or forwarding an email to your family address. Two uses run on their own: the short momentum observation on the arrival screen, written from the titles of your own recent tasks and routines, and Play mode matching, which sends a new task's title and description when FocalNest doesn't already recognize the wording. It receives the text you supplied (for a forwarded email, the message body as the sender wrote it and any photos or PDFs attached, with photos re-saved without their location and camera details) plus a summary of your household's shape: roles and age ranges, never names. Email parsing sends a little more: your family's existing collection titles and identifiers, the titles of up to 15 recent open tasks, and the names of your family's places, so a forwarded message can be filed against something you already have rather than duplicating it. When a forwarded message leaves the details to a link, like a party invitation, Anthropic's servers may open up to two of its links to read them, the way a signed-out visitor would. FocalNest's own servers never open them. Anthropic does not use API requests to train their models.
Because your own text is sent as you wrote it, don't put sensitive personal, health, or financial details into an AI prompt.
ElevenLabs is used while the app runs for one thing: reading titles aloud. When a task or reward shows up for a child who is still learning to read, its title is sent to ElevenLabs' text-to-speech service if those exact words have never been spoken on FocalNest before. The audio is saved and reused from then on, so a title like "Brush teeth" is only ever sent once. Only the title's words are sent, and nothing about the child, the task's other details, or your family. The same happens for the name of the routine or event a kitchen screen counts down to, so it can say "Soccer practice. Thirty minutes left." Events synced from Google, iCal, or Outlook are never sent.
For a child account, reading titles aloud is off until a parent allows it for that child. It's a separate permission from AI features, so a parent can allow one without the other, and either can be withdrawn at any time.
Changes
We'll update this page when we add or remove a subprocessor. If you'd like to be notified in advance of changes, email privacy@focalnest.com and we'll add you to the list.