← HQFam / Privacy Policy
Legal

Privacy Policy

Effective date: March 26, 2026  ·  Last updated: March 26, 2026

Plain English summary: We collect only what we need to run the service. We don't sell your data. Children's data is minimal and protected. You can delete everything at any time.

Table of Contents
  1. Who We Are
  2. What We Collect
  3. How We Use Your Data
  4. How We Share Data
  5. Children's Privacy (COPPA)
  6. Cookies and Tracking
  7. Data Retention
  8. Security
  9. Your Rights
  10. Contact Us

1. Who We Are

HQFam ("we," "us," "our") operates hqfam.com, a family management platform. This Privacy Policy explains how we collect, use, and protect your personal information when you use our Service.

2. What We Collect

2.1 Information You Provide

DataWhy we collect it
Name, email addressAccount creation and communication
Password (hashed)Account authentication — never stored in plain text
Family name and URL slugTo identify and route your family's data
Payment method (via Stripe)Subscription billing — card details never touch our servers
Children's names and agesTo create child profiles within your family account
Content you createChores, rewards, challenges, grocery lists, notes, uploaded images

2.2 Information Collected Automatically

DataPurpose
Firebase Authentication tokensAnonymous auth to secure Firestore access
Browser/device typeCompatibility and debugging
Error logsService stability and bug fixes
Usage patterns (pages visited, features used)Improving the product — no individual tracking or profiling

2.3 What We Do NOT Collect

  • We do not collect Social Security numbers, government IDs, or financial account numbers
  • We do not collect biometric data — PIN and Face ID verification is processed entirely on your device
  • We do not build advertising profiles
  • We do not track your activity across other websites

3. How We Use Your Data

We use the information we collect to:

  • Create and manage your account and family workspace
  • Process payments and manage your subscription via Stripe
  • Send transactional emails (receipts, security codes, account alerts)
  • Send marketing emails (new features, tips) — you can opt out at any time
  • Detect and prevent fraud, abuse, and security breaches
  • Comply with legal obligations
  • Improve and develop the Service based on aggregated usage data

We do not use your data for automated decision-making that has significant legal or similar effects on you.

4. How We Share Data

We do not sell your personal data. We share data only with the service providers necessary to operate HQFam:

ProviderPurposeData shared
Google FirebaseDatabase, authentication, file storage, hostingAll user and family data (processed under Google's DPA)
Stripe, Inc.Payment processingEmail, name, subscription info — card details handled by Stripe directly
Email delivery providerTransactional and marketing email deliveryEmail address and message content

We may disclose data if required by law, court order, or to protect our rights, property, or safety, or that of our users or the public.

5. Children's Privacy (COPPA)

We take children's privacy seriously. HQFam complies with the Children's Online Privacy Protection Act (COPPA).

5.1 How It Works

HQFam accounts are for parents and guardians (18+). Children access the App only through parent-configured profiles. There is no independent account creation for children — parents control everything.

5.2 Data We Collect About Children

Limited to what is necessary to operate the Service:

  • First name and age (entered by parent)
  • Chore completion and point history
  • Shop purchase history within the family account
  • Avatar customizations (cosmetic only)

5.3 What We Never Do With Children's Data

  • Sell or share children's data with advertisers or data brokers
  • Use children's data for behavioral profiling or targeted advertising
  • Allow children to directly communicate with strangers or share their information publicly

5.4 Parental Rights

As the parent or guardian, you can at any time:

  • Review your child's data via the Hub dashboard
  • Delete a child profile (Hub → Kids → Delete)
  • Request complete deletion of a child's data by emailing privacy@hqfam.com
  • Refuse further collection by deleting the account

6. Cookies and Tracking

HQFam uses minimal cookies and browser storage:

  • Session storage: Remembers which kid's app view is active during your session. Cleared when you close the browser.
  • Local storage: Stores your parent login session (hub authentication). Cleared on logout.
  • Firebase SDK cookies: Required for Firebase Authentication to function.

We do not use third-party advertising cookies, analytics trackers (like Google Analytics), or cross-site tracking technologies.

7. Data Retention

  • Active accounts: Data is retained for the life of your subscription
  • Cancelled accounts: Data is retained for 30 days after cancellation to allow reactivation, then permanently deleted
  • Deleted child profiles: Permanently deleted within 30 days of deletion request
  • Payment records: Retained for 7 years as required by financial regulations
  • Email logs: Retained for 90 days for deliverability troubleshooting

8. Security

We implement industry-standard security measures to protect your data:

  • All data is transmitted over HTTPS/TLS encryption
  • Passwords are hashed before storage — never stored in plain text
  • Firestore Security Rules restrict data access to authenticated users of the correct family
  • Payment data is handled entirely by Stripe's PCI-DSS-compliant infrastructure
  • Firebase Cloud Functions run in a sandboxed server environment

No system is 100% secure. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the data we hold about you
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your account and associated data
  • Portability: Request an export of your family's data in a structured format
  • Opt-out: Opt out of marketing emails at any time

To exercise any of these rights, contact us at privacy@hqfam.com. We will respond within 30 days. We may need to verify your identity before processing your request.

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact privacy@hqfam.com.

10. Contact Us

Questions, concerns, or data requests:

HQFam — Privacy Team

Email: privacy@hqfam.com

General: hello@hqfam.com

Website: hqfam.com

See also: Terms of Service