FamilyMeritTracker

Privacy Policy

Last updated: April 12, 2026

1. Who we are

FamilyMeritTracker ("the Service") is operated by SLIDVESVAMP LLC, a company registered in Delaware, United States. In this policy, "we," "us," and "our" refer to SLIDVESVAMP LLC.

Contact: privacy@familymerittracker.com

2. What data we collect

2.1 Account data

When you create an account, we collect:

  • Name
  • Email address
  • Authentication credentials (hashed password or Google OAuth token)
  • Timezone

2.2 Family data

When you use the Service, you provide:

  • Children's first names and avatar preferences
  • Adults' first names and optional email addresses
  • Merit and demerit logs (task names, point values, notes, timestamps)
  • Activity/reward definitions and redemption history

2.3 Usage data

We automatically collect:

  • Device type and browser information
  • IP address (for security and abuse prevention)
  • Pages visited and features used (aggregated analytics)
  • Push notification subscription data (endpoint, keys)

2.4 Lead capture data

When you download a template from our blog, we collect your email address and which template you requested.

3. How we use your data

  • Providing the Service: Displaying merit trees, tracking points, managing family members, and delivering push notifications.
  • Communication: Sending daily reminders, weekly digests, welcome emails, and co-parent invitations that you have opted into.
  • Improvement: Understanding how the Service is used to improve features and fix issues.
  • Security: Detecting and preventing fraud, abuse, and unauthorized access.
  • Marketing (with consent): Sending occasional parenting tips to email addresses collected through template downloads. You can unsubscribe at any time.

4. Legal basis for processing (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or other jurisdiction where GDPR applies, we process your data under the following legal bases:

  • Contractual necessity: Processing required to provide the Service you signed up for (account data, family data, merit logs).
  • Legitimate interest: Analytics and security monitoring to improve and protect the Service.
  • Consent: Marketing emails, push notifications, and non-essential cookies. You may withdraw consent at any time.

5. How we share your data

We do not sell your data. We share it only with:

  • Supabase: Database hosting and authentication (data stored in their infrastructure).
  • Resend: Email delivery service (receives email addresses for transactional and notification emails).
  • Vercel: Application hosting (processes requests, may log IP addresses).
  • Google: OAuth authentication (if you sign in with Google).
  • Co-parents and accountability partners: When you invite someone, they see shared family data (children, merits, rewards) as part of the Service's core functionality.

We do not share data with advertisers or data brokers.

6. Data retention

  • Account data: Retained as long as your account is active. Deleted within 30 days of account deletion.
  • Family data: Retained as long as your account is active. Deleted with your account.
  • Lead capture emails: Retained until you unsubscribe or request deletion.
  • Logs and analytics: Aggregated data retained indefinitely. Individual-level logs retained for 90 days.

7. Your rights

Depending on your jurisdiction, you have the right to:

  • Access: Request a copy of your data.
  • Correction: Update inaccurate data.
  • Deletion: Request deletion of your account and data.
  • Portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interest.
  • Withdraw consent: For marketing emails and push notifications, at any time.

To exercise any of these rights, contact privacy@familymerittracker.com.

8. Children's privacy

FamilyMeritTracker is designed for parents to manage their family. Children do not create accounts. Parents enter children's first names and avatar colors. We do not collect children's email addresses, dates of birth, photos (unless the parent uploads one), or any data directly from children.

We comply with COPPA (Children's Online Privacy Protection Act). If you believe a child under 13 has provided personal data directly to us, contact us and we will delete it promptly.

9. International data transfers

Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where required by GDPR.

10. Security

We protect your data using:

  • Encryption in transit (HTTPS/TLS)
  • Encryption at rest (database-level encryption via Supabase)
  • Row-level security policies
  • Hashed passwords (never stored in plain text)
  • Regular security audits

11. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

12. Changes to this policy

We may update this policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use of the Service after changes constitutes acceptance.

13. Contact

SLIDVESVAMP LLC
Registered in Delaware, United States
Email: privacy@familymerittracker.com