Privacy
Here When You Are is a shared board for one household — the schedules, tasks, goals and rewards a family already keeps on a fridge door. This page says plainly what it stores, where that lives, and who can reach it. It is written to be read, not to be survived.
What signing in tells us
Signing in goes through Google. We ask Google for three things — that you are signed in, your email address, and your name — and we keep exactly those, plus the permanent account identifier Google issues so that changing your address later does not lock you out.
We do not ask Google for offline access during sign-in and we store no sign-in token, so the app cannot act on your Google account afterwards. It reads who you are once, and then has no further conversation with Google about you.
If you sign in with a link by email instead, we keep your email address — and, if you join the waitlist, what you tap there and a family member's email if you give one — and nothing else about you. Each link works once and lapses after an hour, is stored only as a one-way hash, and the record of it is deleted within a day.
What the board itself holds
Everything a household puts on its board: the names and rough ages of the people on it, tasks and checklists, calendar events, goals and habits, rewards and the points behind them, notes, and the record of who checked in and when. If a household sets PINs to keep children out of settings, those are stored too.
This is family life, in some detail, and a good deal of it is about children. We collect it because the board cannot work without it, we use it only to draw that household's own board, and it is never sold, never used for advertising, and never fed to anybody's model for training.
Connecting a calendar is optional
A household can connect a Google Calendar so its events appear on the board. This is read-only in the strongest sense available: the permission we request cannot write, so even a bug on our side could not add, change or delete anything in your real calendar.
Connecting does mean we hold a token that lets us re-read those calendars in the background. It sits in the app's database on an encrypted disk, and disconnecting the calendar in Settings discards both the token and every event we imported with it. You can also revoke it yourself at any time from your Google account's permissions page, without asking us.
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Where it is kept
On a server in Toronto, Canada, rented from Fly.io, on an encrypted disk with automatic snapshots so a household's board survives a failure. Session and invite codes are stored only as one-way hashes — we could not tell you your own invite code back.
Households are separated at the point where data is read, not by anything the browser is trusted to ask for politely. Every query names a household; no page can request another one's.
Who else is involved
Four parties, and no others. Google, for signing in and — if you connect one — reading your calendar. Fly.io, who host the server. Resend, who deliver the few emails this site sends — sign-in links, waitlist news, and what you tap when you join, which is forwarded to me — and so see your email address and those messages. And Open-Meteo, a free weather service: if a board shows the forecast, the device fetches it directly using the approximate location for the town chosen in Settings. That request goes from the device, and it carries a place, never a person.
There are no analytics, no advertising and no third-party trackers on any page.
Getting it back, or getting rid of it
A household can export its whole board from Settings at any time, as a file it keeps. To have a board and its accounts deleted from the server, write to aitesting123lab@gmail.com from an address that is on it. We keep a household's data for as long as it is using the board, and remove it when asked.
Changes
If this ever changes in a way that affects what is collected or who it reaches, the date at the foot of the page changes with it and the households on the board are told directly rather than left to notice.