Privacy Policy

1. Information We Collect

Parent Account Information

When you create an account, we collect:

• Email address (for account access and security)
• Password (encrypted and stored securely via Firebase Authentication)
• Account creation and usage timestamps

Children's Information (Parent-Provided)

You may choose to add information about your children to use our sharing timer:

• First name or nickname (you decide what to enter - real names are not required)
• Photos or avatar images (optional - you can use our built-in avatars instead)
• Assigned colors for the app interface
• Session timing and turn-taking data

Usage and Analytics Data

To improve our app, we automatically collect:

• App usage patterns and session statistics
• Device information (type, operating system, app version)
• Error logs and performance data
• Anonymous analytics via Firebase Analytics

2. How We Use Your Information

• App Functionality: To provide timer sessions, save your preferences, and sync data across devices
• Account Security: To authenticate users and protect accounts from unauthorized access
• Service Improvement: To understand usage patterns and improve app features
• Communication: To send important service updates (we do not send marketing emails)

3. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties.

We may share information only in these limited circumstances:

• Service Providers: Firebase (Google) for authentication, database, and analytics services
• Legal Requirements: When required by law or to protect rights and safety
• Business Transfer: In the event of a company merger or sale (with notice to users)

4. Children's Privacy (COPPA Compliance)

Our service is designed for parents and does not directly collect information from children under 13:

• Only parents/guardians can create accounts
• Parents control all information entered about their children
• No personal information is required - nicknames and avatars work perfectly
• Parents can delete their children's information at any time

5. Your Rights and Controls

Data Access and Portability

You have the right to:

• Access all data we have about you and your family
• Export your data in a portable format
• Correct or update any information

Data Deletion

You can delete:

• Individual child profiles and photos
• Session history and timing data
• Your entire account and all associated data

GDPR Rights (EU Residents)

If you're in the EU, you also have the right to:

• Object to processing of your personal data
• Restrict processing in certain circumstances
• Lodge a complaint with your local data protection authority

CCPA Rights (California Residents)

California residents have additional rights including:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (we don't sell data)
• Right to non-discrimination for exercising these rights

6. Data Security

We implement industry-standard security measures:

• All data transmitted using HTTPS encryption
• Passwords hashed and secured via Firebase Authentication
• Cloud storage with enterprise-grade security (Firebase/Google Cloud)
• Regular security audits and updates
• Access controls limiting who can view your data

7. Data Retention

• Account Data: Retained while your account is active
• Session Data: Kept for app functionality; can be deleted by user
• Analytics Data: Aggregated and anonymized within 30 days
• Deleted Accounts: All data permanently deleted within 30 days

8. Third-Party Services

We use these trusted third-party services:

• Firebase (Google): Authentication, database, file storage, and analytics
  Privacy Policy: https://policies.google.com/privacy

9. International Data Transfers

Your data may be stored and processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers, including:

• Firebase complies with GDPR and has adequate data protection measures
• Standard contractual clauses for data protection

10. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we make material changes:

• We'll update the "Last updated" date at the top
• We'll notify users via email or in-app notification
• Changes take effect 30 days after notification

11. Contact Us