Privacy Statement

This Privacy Statement explains how FamilyPhD collects, uses, stores, and protects information when you use FamilyPhD websites, apps, accounts, Premium features, family workspaces, research experiences, FamilyPhD Studio, and related services.

Our privacy approach

FamilyPhD is designed around a simple principle:

Your family context should help FamilyPhD serve you, not become someone else’s product.

FamilyPhD may use information you choose to provide to personalize your experience, improve continuity, operate the service, and make future interactions more useful.

We do not sell your personal information to advertisers.

Who may have an account

FamilyPhD user accounts are for adults age 18 or older.

A minor may not create or independently use a FamilyPhD user account.

An adult may create a family-member profile for a child or other family member. Those profiles are part of the adult’s family workspace and do not receive independent sign-in credentials.

FamilyPhD may later offer limited parent-controlled experiences for minors, such as viewing schedules, responsibilities, or other selected tools. Those experiences do not provide independent access to the FamilyPhD AI experience.

Information you provide

Depending on the features you use, FamilyPhD may collect information you choose to provide, including:

  • account information
  • name and contact information
  • family-member profiles
  • birthdays or ages
  • relationships
  • notes and preferences
  • goals and routines
  • Plans
  • Moments and experiences
  • developmental or life-stage context
  • questions you ask
  • answers you save
  • research you view or save
  • feedback
  • voice input or transcripts
  • content created through FamilyPhD Studio
  • information submitted through family tools
  • other information you choose to place in your workspace

You control what family information you choose to share.

Family-member information

Family-member profiles may contain information about people other than the account holder.

You are responsible for having appropriate authority to provide information about another person.

Family-member profiles are used to help FamilyPhD understand relevant family context. They are not independent accounts.

FamilyPhD may preserve the source or provenance of information where it matters, such as whether information was explicitly provided, confirmed, inferred, or generated from an interaction.

Personalization and the Compounding Family Intelligence Model™

FamilyPhD may use the Compounding Family Intelligence Model™ (CFIM™) to carry relevant family context across interactions over time.

For example, FamilyPhD may use stored information about:

  • who a question concerns
  • age or life stage
  • previously stated goals
  • relevant preferences
  • prior Plans
  • relevant Moments
  • previously confirmed family context

to make future answers more relevant.

CFIM™ does not mean that an AI model independently “remembers” your family.

Persistent family context is stored and managed by FamilyPhD systems and may be supplied to an AI provider when relevant to a particular interaction.

FamilyPhD should not treat inferred or unconfirmed information as equivalent to information you explicitly confirmed.

What FamilyPhD may infer

FamilyPhD may derive limited contextual signals from your interactions, such as:

  • likely topic relevance
  • recurring family themes
  • whether a piece of context may be useful later
  • potential connections between Moments, Plans, questions, or goals

Where practical, FamilyPhD should distinguish inferred information from confirmed facts.

You should be able to correct or remove important family context.

Questions and AI-generated answers

When you ask FamilyPhD a question, we may process:

  • the question
  • relevant family context
  • relevant research or evidence
  • safety instructions
  • product guidance and voice instructions

through AI and search systems used to generate the answer.

FamilyPhD currently uses third-party cloud and AI providers to operate parts of the Ask experience.

Those providers process information on FamilyPhD’s behalf according to their applicable service agreements and our configuration.

FamilyPhD may change AI or search providers over time.

Research and evidence use

FamilyPhD may retrieve research documents or evidence from the FamilyPhD library to help answer a question.

FamilyPhD may record:

  • which research was retrieved
  • which research was displayed
  • whether a source contributed to an answer
  • citation relationships
  • answer-quality or reliability signals
  • evidence gaps

This information helps FamilyPhD improve trust, attribution, retrieval, and research coverage.

Voice

Some Premium features may support voice input.

When you use voice features, FamilyPhD may process audio or a transcription in order to:

  • answer a question
  • update context
  • interact with a Plan
  • capture a Moment
  • operate another FamilyPhD feature

FamilyPhD may use third-party transcription or AI services for voice processing.

We should disclose when audio is retained versus when only a transcript is retained.

Plans, Moments, and family tools

Information created through Plans, Moments, goals, routines, reminders, calendars, or other family tools may be stored in your FamilyPhD workspace.

FamilyPhD may use that information to:

  • operate the tool
  • personalize future interactions
  • preserve continuity
  • help identify patterns over time
  • improve relevant recommendations

Use of that information should remain scoped to your family workspace and FamilyPhD service operations.

Grocery product matching

When retailer matching is enabled, selecting Find retailer branches sends the ZIP you enter to Kroger. After you confirm a branch, selecting Match selected items sends only those item names and that retailer branch identifier to Kroger. These requests do not include family profiles, account names, or the rest of your list. Opening a list, confirming a displayed product, and ordinary shopping do not request new retailer data.

When a cache lifetime is not established, branch selection carries only the selected identifier in a signed form for the next explicit product request. Returned details and product selections remain on the current page only; they are not saved in browser storage, server caches or your database and disappear when you leave or reload. A short form-security expiry does not grant a provider caching period. Separately cached details are held in server memory only when the provider response permits it, expire according to that response, and may disappear after a server restart. Durable confirmations contain references and household attribution, not permanent copies of retailer content. Missing details leave your plain shopping list usable; refreshing requires an explicit action. Matching does not connect a customer retailer account or place an order. Usage records contain operation counts, timing, cost information and account attribution, without item names or branch content. See the Kroger Privacy Policy.

Grocery location and store search

When enabled, selecting Find stores sends your chosen home area, city or ZIP, or permitted device location, along with the search radius and optional store name, to Google Maps Platform. An area search may also use Google to locate that area. Google receives connection information, including our server's network address. Grocery items, family profiles, account names, and shopping history are not included in these requests. Avoid entering personal information in the store-name field.

Device location requires browser permission. On a phone where permission is already granted, the Location field may use a fresh position; otherwise you can choose Use my location or enter a city or ZIP. Obtaining a position does not itself search Google for stores. Device coordinates are used transiently for the current interaction and are not saved to your profile, session, or Grocery database.

Opening a list, adding or checking off items, changing search fields, and choosing an existing preference do not search for stores. When enabled, explicitly starting shopping on a phone may use your permitted, accurate position to match a saved branch; if no saved branch matches, it may make one nearby grocery search. Desktop shopping does not request device location.

Search listings are displayed temporarily with Google Maps and any supplied third-party attribution. Preferred stores retain a place identifier and the editable label you explicitly save. The label may begin with the returned store name and city; saving confirms that text, including any edits you make. Search results are not saved as preferences automatically, and full listing addresses are not retained in preferences. Branch coordinates may be held separately for up to 29 days to match a nearby saved branch, then removed through expiration cleanup. Expired coordinates are not used. New preferred stores and store choices for shared lists are shared with that household. Previously saved private store preferences are not automatically shared. Individual item and product preferences retain their own privacy settings.

We record operation counts, timing, provider identity, estimated cost, and account attribution for service usage, without location or listing content in that record. Google's processing is governed by the Google Privacy Policy, which is incorporated into this Privacy Statement. See also our Google Maps terms.

FamilyPhD Studio

FamilyPhD Studio may allow parents, experts, creators, educators, institutions, developers, and other approved users to create tools, experiences, content, or integrations.

Studio may process:

  • content you create
  • prompts or instructions
  • uploaded materials
  • metadata
  • previews
  • publishing status
  • attribution information

Additional terms or permissions may apply to content submitted for publication or distribution.

Experts and creators

FamilyPhD may include expert profiles, creator pages, research attribution, and contributed content.

FamilyPhD may record:

  • which creator or expert referred a user
  • which search entry point was used
  • whether research or expert work contributed to an answer
  • aggregate engagement with creator or expert pages

Attribution analytics should not give creators or advertisers access to private family conversations.

Usage and analytics information

FamilyPhD may collect operational and product-usage information such as:

  • page views
  • feature use
  • search and Ask activity
  • timestamps
  • device/browser information
  • approximate location derived from IP where necessary
  • response latency
  • error information
  • provider/model identity
  • usage counts
  • cost information
  • referral or attribution source
  • subscription or entitlement state

We use this information to operate, secure, measure, and improve FamilyPhD.

Institutional and aggregate reporting

FamilyPhD may offer services to employers, schools, healthcare organizations, churches, or other institutions.

Institutional reporting should use aggregated or de-identified information where appropriate.

FamilyPhD should not provide institutions with identifiable family questions, private family profiles, Moments, or other private workspace content unless the user has specifically authorized that disclosure.

Where geographic reporting is used, FamilyPhD may limit granularity and require minimum thresholds to reduce re-identification risk.

Payments

When paid services become available, payment information may be processed by a third-party payment provider.

FamilyPhD should not store full payment-card details when a payment provider can handle them directly.

FamilyPhD may receive information such as:

  • payment status
  • subscription plan
  • billing date
  • transaction identifier
  • last four digits or payment-method type where supplied by the processor

Payment providers have their own privacy practices.

How we use information

FamilyPhD may use information to:

  • provide the service
  • personalize the experience
  • maintain family context
  • answer questions
  • operate Premium features
  • provide Plans, Moments, and tools
  • operate Studio
  • manage accounts and subscriptions
  • maintain security
  • detect abuse
  • provide customer support
  • measure product performance
  • improve FamilyPhD
  • evaluate answer quality
  • identify research or coverage gaps
  • attribute research, experts, and creators
  • comply with legal obligations

AI training and product improvement

FamilyPhD may use service data to evaluate and improve FamilyPhD systems, subject to applicable privacy controls and legal obligations.

Private family information should not be casually repurposed for unrelated external model training.

Where third-party AI providers process FamilyPhD requests, FamilyPhD should configure those services to minimize secondary use of customer content where the provider offers appropriate enterprise/API controls.

What we do not sell

FamilyPhD does not sell private family conversations or family-profile information to advertisers.

Advertisers, creators, experts, and institutional partners should not receive access to private family workspace content merely because they referred a user or contributed content.

Sharing with service providers

FamilyPhD may share information with service providers that help us operate the service, such as:

  • cloud infrastructure providers
  • AI/model providers
  • search providers
  • payment processors
  • analytics and monitoring providers
  • email or notification providers
  • security providers

These providers should receive only the information reasonably necessary to perform their services.

FamilyPhD may disclose information when reasonably necessary to:

  • comply with law
  • respond to valid legal process
  • protect the security of FamilyPhD
  • investigate fraud or abuse
  • protect users or others from serious harm
  • enforce applicable agreements

FamilyPhD does not promise confidentiality beyond what the law and service architecture can support.

Data retention

FamilyPhD may retain information for as long as reasonably necessary to:

  • provide the service
  • preserve your workspace
  • maintain account and billing records
  • support safety and security
  • meet legal obligations
  • maintain audit history where required

Different categories of information may have different retention periods.

Deleted information may remain temporarily in backups or logs before final removal.

Review, correction, and deletion

FamilyPhD is being designed so users can review and manage important family context.

Depending on the feature and product maturity, users may be able to:

  • review profile information
  • correct inaccurate information
  • remove family context
  • delete Moments
  • update Plans
  • remove family-member profiles
  • delete their account
  • request access to or deletion of certain personal information

Some records may need to be retained where required by law, security, billing, or legitimate operational requirements.

Security

FamilyPhD uses technical and organizational safeguards intended to protect user information.

No system can guarantee absolute security.

You are responsible for protecting your credentials and notifying FamilyPhD if you believe your account has been compromised.

International processing

FamilyPhD may use service providers that process information in the United States or other countries.

Where required, FamilyPhD may use appropriate contractual or legal safeguards for international data transfers.

Children’s privacy

FamilyPhD does not permit minors to create independent FamilyPhD accounts.

Adults may store information about minor family members within an adult-controlled family workspace.

FamilyPhD should not knowingly provide independent AI interaction to children through a minor-owned account.

If FamilyPhD later offers parent-controlled child experiences, those features may be governed by additional privacy protections and parental controls.

Changes to this Privacy Statement

FamilyPhD may update this Privacy Statement as the service evolves.

Material changes may be communicated through the service or other appropriate means.