Privacy policy

Family Daybook is operated by Family Daybook (“Family Daybook,” “we,” “us,” or “our”). This policy applies to the Family Daybook website, application, and related services.

We collect information that you provide, information created while you use the service, and limited technical information needed to operate it.

• Account and subscription information: name, email address, authentication identifiers, account status, security settings, Plan, Subscription status, statements, and payment history supplied through Clerk. Payment card details are handled by Clerk and its payment processor and are not stored in Family Daybook’s application database.
• Family and workspace information: workspace name, timezone, adult caregiver labels, reviewer names and emails, child display names or labels, and birthdates entered by an adult account holder.
• Daybook content: routines, caregiving entries, appointment information, factual incident notes, timestamps, people present, observations, outcomes, corrections, and other details you choose to record.
• Files and reports: images, PDFs, other supported attachments, generated reports, manifests, and checksums.
• Activity and integrity information: server timestamps, revision history, audit events, download activity, record hashes, invitation activity, and deletion tombstones.
• Essential technical information: authentication cookies, request information, and operational logs needed to secure, troubleshoot, and deliver the service.
• Analytics information: Google Analytics may collect page views, session activity, approximate location, browser and device information, referring source, and a pseudonymous client identifier stored in a first-party analytics cookie.

We use information to provide and maintain Family Daybook, including to:

• authenticate users and create isolated private workspaces;
• save, organize, search, correct, and display daybook records;
• store private attachments and generate requested report packages;
• apply owner and reviewer permissions;
• protect the service, investigate misuse, and maintain record integrity features;
• measure website and application usage, understand navigation patterns, and improve the service;
• respond to support, privacy, and security requests; and
• comply with applicable obligations and enforce our terms.

We use Google Analytics for the limited measurement purposes described below. We do not configure Google Analytics to collect daybook entries, child information, attachments, or report content, and we do not sell personal information.

We share information only as needed to operate the service, at your direction, or where required. Recipients may include:

• Service providers: Clerk for authentication and subscription billing, Stripe for payment processing, MongoDB Atlas for database hosting, Vercel for application hosting, private file storage, and background workflows, and Google for website and application analytics. These providers process information under their own contractual and security commitments.
• Authorized reviewers: people an owner invites to a workspace. Reviewers receive read-only access determined by the service’s current permissions. Owners are responsible for choosing reviewers carefully and revoking access when appropriate.
• Legal and safety recipients: authorities, advisers, or other parties when we reasonably believe disclosure is required by law, necessary to protect rights or safety, or needed to investigate fraud or abuse.
• Business transfers: a successor or involved advisers during a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality protections.

Family Daybook and Clerk use cookies and similar browser storage that are necessary to sign users in, maintain sessions, prevent abuse, and operate account features. We also use Google Analytics 4, provided by Google, to measure visits and usage. Google Analytics uses the Google tag and may set first-party cookies, including _ga, to distinguish pseudonymous users and sessions.

Google Analytics may receive the page or route visited, session and page-view activity, approximate location, browser and device information, referring source, and related technical information. Google states that Google Analytics 4 uses IP addresses at collection time to derive approximate location and discards them before the addresses are logged.

Learn more about how Google uses information from sites that use its services. You can manage or delete cookies through your browser settings or use the Google Analytics opt-out browser add-on to prevent Google Analytics from using data from your browser.

Family Daybook is intended for adults and is not directed to children. Adult users may choose to enter information relating to children as part of a private family workspace. The adult account holder is responsible for having appropriate authority to enter, use, invite access to, and disclose that information.

If you believe a child provided personal information directly to us without appropriate adult involvement, contact us so we can review the request.

We use administrative, technical, and organizational safeguards intended to reduce the risk of unauthorized access, loss, misuse, or alteration. These include authenticated access, workspace and role checks, private file routes, file-type validation, server-controlled timestamps, and tamper-evident revision history.

No service can guarantee absolute security. You are responsible for protecting your account, using a strong password, enabling available multi-factor authentication, keeping devices secure, and promptly reporting suspected unauthorized access.

We retain account and workspace information while the service is active and as reasonably needed to provide the service, maintain security and audit history, resolve disputes, or meet applicable obligations.

Records ordinarily remain until an authorized owner deletes them. Permanent record deletion is disabled by default and can be enabled by an owner in workspace settings. A permanent purge requires a reason and typed confirmation, and removes active record content, attachments, and stored reports containing that record while retaining a content-free deletion tombstone.

Downloaded copies cannot be revoked. Residual copies may remain in provider backups until those backups expire under the provider’s configured retention schedule.

Depending on your location, you may have rights to request access, correction, deletion, restriction, portability, or information about how personal information is used. The application also provides tools to review records, append corrections, export reports, manage reviewers, and—when enabled—permanently purge individual records.

To submit an account-level or privacy request, email admin@myfamilydaybook.com. We may need to verify your identity and authority before completing a request.

We may update this policy as the service or applicable requirements change. We will post the revised policy with a new effective date and provide additional notice when appropriate.

Questions or requests may be sent to admin@myfamilydaybook.com.