Privacy Policy

1. Introduction

The Hive Network, LLC ("Famlo," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our software-as-a-service ("SaaS") platform, including any related services, websites, and applications (collectively, the "Platform").

By using the Platform, you agree to the practices described in this Privacy Policy.

2. Information We Collect

We collect information from users in the following categories:

2.1 Information You Provide

• Account registration data (name, email, password)
• Profile information (including family member data, images, addresses)
• Curriculum quiz answers, which anyone can give without an account: each child's first name or a nickname, their grade, how they learn and the subjects you want picks for; your preferences on prep time, worldview, budget and whether you will pay with a Florida scholarship; and the email address we send the plan to (Section 9)
• Event creation details
• Messages, posts, and other submitted content (including images, videos, and other media)
• Payment details (processed by third-party provider; we do not store full credit card numbers)
• Agreements you sign for an organization (a waiver, a release, a photo permission): the name you type, the drawn signature image if you draw one (the final image only — we keep no stroke timing, speed or pressure), whether you signed as the child's parent or court-appointed legal guardian and that you are 18 or older, the email address on your account at the moment you signed, the IP address and device you signed from, and the exact text you were shown (Section 9.6)
• Your mobile number and your agreement to receive texts, if you choose to get signing links by text: the number you agreed for, when, where you agreed, and the wording you were shown. We text you only with that agreement, and replying STOP ends it

2.2 Information Collected Automatically

• IP address, browser type, device info
• Usage data (clicks, page views, actions)
• Cookies and tracking pixels — including, in the occasional marketing emails you opt in to, an open-tracking image and links that pass through our own tracking domain so we can see whether a message was opened or clicked. Emails about your account, bookings, or messages carry no such tracking.
• Approximate location — city and state only, never a street address — derived from your network connection when you visit, and recorded once against your account when you create it
• Searches you run on our activity and directory pages, recorded without a link to your account (Section 6)

2.3 Information from Third Parties

• Payment processors (e.g., Stripe)
• Analytics platforms (PostHog, and Google Analytics on our public pages)
• Authentication providers (if using SSO or OAuth)

2.4 Notice at Collection

The categories below use the labels defined by California law. We do not sell any of them, and we do not share any of them for cross-context behavioral advertising except as described in Section 11.2.

3. How We Use Your Information

We use collected data for:

• Account creation and management
• Delivering and improving our services
• Event registration and communications
• Processing payments and sending receipts
• Sending transactional messages (RSVP confirmations, waitlist updates, etc.)
• Recording the agreements you sign for an organization, emailing you a PDF copy of each, and sending signing links by email, or by text if you agreed to texts
• Letting anyone holding an agreement's record code confirm it is genuine at verify.famlo.co (Section 9.6)
• Building the downloads an organization asks for of its own signed agreements and registration forms (Section 9.5)
• Passing your contact details to an organization's own email tool, but only if you asked us to — see Section 5.1
• Monitoring usage patterns and platform performance
• Investigating and preventing abuse, fraud, and violations of our Terms
• Analyzing de-identified or aggregated data for service optimization

4. Cookies and Tracking

We use cookies and other tracking technologies to:

• Keep you logged in
• Remember your preferences
• Understand how users engage with the Platform
• Support marketing and analytics through trusted tools like PostHog and Google Analytics

You can control cookies through your browser settings. Disabling cookies may affect functionality.

5. Sharing Your Information

We have never sold personal information for money, and we do not sell children's information under any definition. Some of our analytics and advertising-measurement technologies may qualify as "sharing" under state privacy laws, as explained in Section 11.2. We may share data:

• With service providers under strict data processing agreements (e.g., Amazon Web Services, Stripe, PostHog, Google Analytics, Sentry)
• With the organizers of organizations your family belongs to, and of organizations you register a child with, so they can run their activities — Section 9.5 sets out exactly which fields about a child this covers and who counts as an organizer
• If required by law (e.g., lawful subpoenas or court orders)
• As part of a merger, acquisition, or asset transfer
• With the email tool an organization uses, if you asked that organization to email you — Section 5.1
• With the organization that asked you to sign an agreement: it holds the signed record, can read it in its console and can download it (Sections 9.5 and 9.6). Famlo keeps the record on its behalf
• With anyone holding an agreement's record code, who can see the limited facts listed in Section 9.6 at verify.famlo.co — never who signed
• With your explicit consent

5.1 Organization mailing lists

When you register for an activity, the checkout page offers one optional box, unticked, asking whether that organization may email you directly. It is never required to complete a registration, and if you leave it alone nothing is shared.

If you tick it, we pass your email address, and your first and last name if you have given them to us, to the email tool that organization uses — currently Wix or Mailchimp. We record the exact wording of the box as it read on your screen, together with the date, the IP address it was ticked from, and the registration it accompanied, so that what you agreed to can be reproduced later rather than merely asserted.

A child's information is never part of this. The box shares your own contact details and nothing else: no child's name, age, birthdate, grade, health, allergy, medication, dietary or special-needs information, and no record of which activity any child attended. Section 9.3 continues to apply without exception — we do not use children's information for advertising, do not sell it, and do not share it with third parties for marketing.

Emails from that list are sent by the organization, not by Famlo, from their own tool and under their own name. Every such email carries an unsubscribe link, and using it stops that organization's emails. You can also tell us to withdraw you: we will mark you unsubscribed and push that withdrawal to the organization's tool. We should be plain about the limit of that, though — once your address is in an organization's own system, that organization holds a copy we do not control, in the same way described in Section 9.5. If they do not honor a withdrawal, contact them directly and tell us.

An organization can only build such a list once it is verified and has claimed its listing, and it can export the addresses it has collected. We exclude anyone who has unsubscribed from that export.

6. Analytics

We use analytics in two distinct ways, and they are controlled differently.

In your browser. PostHog records which pages you view. On our public pages only — never on signed-in pages — Google Analytics does the same, so we can understand how visitors find us. Neither is loaded in your browser until you accept analytics in our cookie notice or turn it on from "Privacy Preferences" in the website footer, where you can also turn it off again, and we honor Global Privacy Control and Do Not Track signals.

On our servers. Separately, we record certain events in your account when they happen — for example that a booking was paid, or that an organizer opened their management console — and send them to PostHog under contract. These records identify your account by an internal identifier. They never include a child's name, age, birthdate, health, allergy or special-needs information, and never record which specific child attended which activity; this is enforced in our code, not only by policy. They are never used for advertising and are never sold or shared for cross-context behavioral advertising. Because our servers create them rather than your browser, they are not switched off by the Analytics preference. See our Cookie Policy, Section 3.6. To ask us to stop, or to have them deleted, email support@famlo.co.

Searches. When you search for activities or organizations, we record what was searched for — the filters used, an approximate area, roughly what time of day it was, and how many results came back — so that organizations can see, in aggregate, what families near them are looking for and what nobody nearby is offering. These records are deliberately built so that they cannot be connected to you: they contain no account identifier, no IP address, no device information, and no precise location. Separate households are counted using a code that is regenerated every day from information we do not store, so records from one day cannot be linked to another day's, by us or by anyone else. We never record a child's age — only the broad age range a search asked for, such as "ages 5 to 12".

Words you type into the search box are handled more carefully still. Anything that looks identifying — an email address, a phone number, a street address, or any run of digits — causes the entire entry to be discarded rather than trimmed. What remains is reduced to a few plain words. A word or phrase is never shown to an organization until at least 25 separate households in at least three different areas have searched for it and a person at Famlo has reviewed it; everything else is counted only as "other" and is never displayed. The underlying search records, including those words, are automatically deleted after 35 days, and only aggregate counts are kept beyond that.

Search recording follows the Analytics setting in "Privacy Preferences", and we honor Global Privacy Control and Do Not Track signals for it. If you have opted out, nothing is recorded and no cookie is set.

Signing and verification pages carry no analytics. The pages a signing link opens, the page you sign on when an organizer hands you their device, and verify.famlo.co load no PostHog, no Google Analytics and no other third-party script, and send no referrer to anywhere you go next. Codes and links are kept out of our request logs.

We also use Sentry to receive diagnostic reports when something breaks. Those reports exclude your email address, your IP address, and any health information, and error monitoring is necessary to operate the Platform safely, so it is not switched off by the Analytics preference. We do not use session recording.

If we introduce advertising in the future, we will update this Privacy Policy and provide appropriate opt-out mechanisms.

7. Data Security

We implement reasonable physical, administrative, and technical safeguards to protect your personal data. This includes:

• Encrypted HTTPS access, and encryption of all stored data at rest at the storage layer
• Additional application-layer encryption on these free-text fields, so they are unreadable even to someone holding a copy of the database: allergies, medical notes, special needs, medications, dietary restrictions, and the pick-up note. Emergency contact name, phone and relationship are not in that set — they rely on storage-layer encryption alone. We would rather say so than imply a protection that is not there
• Role-based access control, with a child's allergies, medical notes, special needs and emergency contact visible to their own family and to organizer-role holders in the organizations that family currently belongs to or is currently registered with — see Section 9.5, which also lists the fields on a child's record that this rule does not cover
• Third-party vendor privacy and security practices are reviewed before we adopt them and when their terms materially change

No method of data transmission is 100% secure. You use the Platform at your own risk.

7.1 If There Is a Breach

If we determine that a breach of security has compromised your personal information, we will notify you as required by applicable law, and in any event no later than 30 days after that determination, unless a law enforcement agency directs us to delay. Notice will describe what happened, the categories of information involved, and the steps we are taking. Where the law requires it, we will also notify the Florida Department of Legal Affairs and, where applicable, consumer reporting agencies and the authorities in your state of residence. If a breach involves a child's health information, we will notify the parent or guardian on the account directly.

8. Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. Retention durations vary depending on the type of data:

• Account Information: Retained for the duration of the account’s active use and up to 12 months after deactivation.
• Analytics Data: Browser analytics data is retained by Google Analytics for up to 14 months. Server-side product analytics events are retained by PostHog for the period set out in our agreement with them; you may request deletion of analytics data associated with your account at any time by emailing support@famlo.co. We do not retain analytics data longer than we need it for performance monitoring and service improvement.
• Support Logs and Communications: Retained for up to 36 months to ensure quality assurance, dispute resolution, and compliance documentation.
• Children's Health and Safety Data: Retained while the child is on your account, so you do not retype it for every activity. Erased 31 days after you remove the child or ask us to erase it, by a job that runs once a day. One exception: if the child is still registered for an activity that has not happened yet, the erasure waits until after that activity, so an organizer is not left running it without an allergy they were told about. See Section 9.4.
• Payment and Transaction Records: Retained for up to 7 years as required by tax and financial reporting regulations.
• Signed Agreements: Each signed agreement is kept until the later of 7 years after the class's last date (or a longer period the organization has chosen) and the 22nd birthday of the child it was signed for, worked out from the child's age when it was signed. Claims about a child's injury can often be brought for some time after the child turns 18, and the record exists to answer them. The date only ever moves later. A record under a legal hold is kept until the hold is released. When an organization leaves Famlo its signed agreements are deleted 90 days after it schedules the deletion. Deleting your account does not delete them early; it removes the link to your account (Section 11).
• Downloads of Signed Agreements and Registration Forms: Deleted 72 hours after they are ready.
• Text Message Logs: For each signing link we text, we keep the last four digits of the number, when it was sent and whether it was delivered, for as long as the account exists.

You can delete your account and its data yourself, at any time, from Account settings > Privacy & data. You are signed out everywhere immediately and everything is erased 30 days later, with a link in your confirmation email to cancel in the meantime. Copies already inside our encrypted database backups expire on their own, the last of them 12 months later. Some records are kept and anonymised rather than destroyed — what you paid and to whom, messages in conversations other people were part of, and audit records that cannot be edited by anyone. Our Data Deletion Policy lists all of them and explains why. If you cannot sign in, email support@famlo.co and we will do it for you.

9. Children's Privacy

Famlo is not directed at children under 13, and children may not create accounts. A child gives us nothing directly. A parent or guardian enters information about their own child, either from their own account or in our curriculum quiz, which anyone can take without an account. The quiz asks for each child's first name or a nickname, their grade, how they learn, and the subjects you want picks for, plus your preferences on prep time, worldview, budget and whether you will pay with a Florida scholarship, and the email address we send the plan to. Answers that are not saved to an account are deleted after 180 days.

Because that information comes from an adult and not from the child, the Children's Online Privacy Protection Act (COPPA) does not govern this collection. The Rule defines "collects" as gathering personal information from a child, and the Federal Trade Commission's published COPPA guidance asks "does COPPA apply to information about children collected online from parents or other adults?" and answers "no." We state this plainly because earlier versions of this page described a COPPA consent process that the law did not require of us and that this product never performed. There is no consent checkbox, no verification email, no confirmation link and no "pending" state for a child's health information. None of them ever existed.

9.1 What You Enter About Your Child

On a child's page you can enter:

• Basic profile: Name, date of birth, grade level, and relationship to you
• Allergies: A free-text allergy note, a set of common-allergy tags you tick, and a "no known allergies" answer
• Medical notes: Free text
• Special needs: A set of tags you tick
• Medications and dietary restrictions: Free text
• Emergency contact: Name, phone number, and relationship
• Pick-up and photos: Who else may collect the child, an optional note about that, and whether their photo may be published

Every one of those is optional. Famlo works without any of them; your child simply will not get allergy-aware or accommodation-aware handling at an activity.

9.2 Why There Is No Separate Consent Step

Entering a child's details is the act of sharing them. The reason to record an allergy in a platform for co-ops and activity providers is so the people running those activities know about it; a note nobody can read would keep nobody safe. Section 9.5 states exactly who those people are, and that is the whole answer. There is no separate sharing switch, no per-activity question, and no state in which a child's details sit waiting for an approval. Anything you would rather an organizer not see, do not enter, or clear it later.

We tell you this at the two points you type it: on the form where you add a family member, and at the attendee step of checkout.

9.3 Parental Rights

Parents and guardians may at any time:

• Review what is on the child's page
• Correct or clear any field on it — the allergy note and tags, the "no known allergies" answer, medical notes, the special-needs tags, medications, dietary restrictions, the emergency contact, the pick-up list and note, and the photo answer
• Remove the child, which erases the health and safety data as described in 9.4
• Decline to enter anything further

One limitation we would rather state than let you discover. Besides the special-needs tags you tick, there is a separate free-text special-needs note on a child's record that three organizer screens will display. Nothing in Famlo writes to it and no screen shows it to you, so for a child added through this app it is empty — but we cannot promise you that a record carried over from the previous version of Famlo holds nothing there. Email support@famlo.co and we will tell you what it says or clear it. Building the missing field, so this caveat can be deleted, is tracked internally.

To exercise any of these, open the child's page or contact us at support@famlo.co.

9.4 Erasure

When you remove a child, or ask us to erase their health data, a job that runs every day erases the following 31 days later: the allergy note and tags, the "no known allergies" answer, medical notes, the special-needs note and tags, medications, dietary restrictions, emergency contact name, phone and relationship, the pick-up note, and the list of people authorized to collect the child. Copies already inside our encrypted database backups are not edited; those backups expire on their own, the last of them 12 months later.

There is one deliberate exception. If the child is still registered for an activity that has not yet happened, the erasure waits until after that activity, because stripping an allergy off a roster for a child who is still going to walk through the door is the failure this data exists to prevent.

Signed agreements are not erased with a child's health data. They contain none: an agreement records its text, who signed it, for which child and when. They are kept for the period in Section 8, and the child's name stays on the agreements signed for them.

The child's name, date of birth, photo answer and the record that they attended an activity are kept as part of your account and the organization's attendance history until you delete the account. See our Data Deletion Policy.

9.5 Who Can See a Child's Information

One rule covers a child's safety data — the allergy note, medical notes, the special-needs note and the emergency contact. A person can see those four only if one of these is true:

• They are the account holder on the child's own family.
• They hold an organizer role in an organization your family currently belongs to.
• They hold an organizer role in an organization the child currently has an active registration with.

"Organizer role" means someone the organization has given its school settings (the owner or a co-leader), all of its classes (a class organizer), or check-in for every child (front desk). A teacher whom the organization has limited to their own classes counts too, but only for children registered in a class they are assigned to teach. It does not mean every member. Other parents in your co-op cannot see those four fields, and neither can someone whose only access in the organization is to its money (a bookkeeper) or to approving families who ask to join.

Access follows current standing. Leave an organization and its organizers stop seeing your child. Cancel or refund a registration and the organizers of that activity stop seeing your child, unless your family is still a member of that organization.

A registration does not lapse on its own. It counts as active while it is confirmed, or once the child has been marked as attended, and nothing about the date of the activity narrows that. So an organization you registered with for a single class keeps this access after the class is over, until the registration is cancelled or refunded, or you leave and ask us to remove it. We would rather tell you that than claim an expiry the software does not implement.

What an organizer with that access sees:

• The allergy note, or "No known allergies" where you have said so
• Medical notes
• The free-text special-needs note described in 9.3
• Emergency contact name, phone and relationship

What is shown on a child's record without passing through that rule:

These are visible to anyone who can open the management console of an organization your child is currently registered with — which includes people whose only access is to the organization's money or to approving families, not just the organizer roles above:

• The child's name, age, grade level and your family name
• Your own name and phone number, as the guardian
• The list of people authorized to collect the child, and your pick-up note
• Your photo answer
• Which of that organization's activities the child is enrolled in, and their attendance

We list those separately rather than folding them into the rule above, because they are not governed by it. Treating them as gated when they are not is the kind of statement this page exists to stop making.

What no organizer screen shows, even though you can enter it:

• Medications
• Dietary restrictions
• The name of any common-allergy or special-needs tag you tick. Ticking an allergy tag does put the child on an organizer's allergy list, labelled "Allergy recorded" with no detail; ticking a special-needs tag surfaces nothing at all
• Any severity rating. There is a severity field behind the allergy tags, and no screen anywhere displays it

Medications and dietary restrictions do reach organizers in one place: the class roster spreadsheet described below, filled in for the people who pass the rule above. If an organizer needs to know how severe an allergy is, put it in the allergy note.

On the management console, the allergy, medical, emergency-contact and pick-up panels start hidden and an organizer has to press a button to reveal them. Each reveal is recorded with the organizer's name, the time, the child, and which panel — never the value itself. Activity rosters and check-in sheets are not hidden this way; those show the allergy line directly to organizers who open them.

Organizers agree, under Terms Section 39, to use what they see only for running their group's activities and keeping participants safe, not to share it with unauthorized third parties, to protect it with reasonable security, to report any incident to us, and to delete or return member data on request or when a member leaves. That is a promise they make to us. It is not something we can enforce technically once a person has read a screen, and we will not pretend otherwise.

Signed agreements and registration forms. The agreements you sign for a child, and your answers to an organization's registration questions, are visible to that organization's organizer roles above and to a teacher for their own classes. An organization can also download them:

• Signed agreements. A PDF or a zip of the signed agreements for a class or a date range, each with its full text, who signed, how and when.
• The registration-forms download. One page per child in a class, listing only: the class and its schedule; the registration status and the date registered; the child's name, age and grade; your family name; the allergy note, "No known allergies", or "Allergy recorded" where only a tag is ticked; medical notes; the free-text special-needs note; the emergency contact; the parent or guardian's name and phone; the people allowed to pick the child up and your pick-up note; your photo answer; your answers to that class's registration questions; the status of each agreement for the class (version, who signed, how, when and its record code); that Famlo's terms were accepted at checkout; and attendance so far. Medications and dietary restrictions are not in it, and neither is the date of birth, any note only you can see, your email address, your home address or any payment detail.

Only someone who passes the organizer rule above for every child in a registration-forms download can create it, so a teacher can download the forms for their own classes and no others; if one child fails the rule, the whole download is refused. Whoever creates any download must confirm their password or an emailed code right before. It is built on our servers into private, encrypted storage, and the link is sent by email only, never as an attachment. Opening it requires signing in, the permission check runs again at that moment, and the link expires 72 hours after the download is ready, when the file is deleted. Each download is recorded — who, when, which children, by record number only, never the values — and the organization's owner is emailed whenever someone else creates one. Every page carries a confidentiality watermark naming who downloaded it. What happens to a copy once an organizer has saved it is up to them, under Terms Section 39.

The class roster. Anyone who can open a class's roster can also download it as a spreadsheet, one row per registration. It has a column each for the allergy note, medical notes, medications, dietary restrictions, and the emergency contact's name, phone and relationship, filled in only for someone who passes the organizer rule above for that child; anyone else, such as a teacher who only takes the register, gets "Not shared" in them. It downloads straight to their device, without the password check or emailed link above, and each download is recorded for each child, never the values. Once saved, it is in their hands under Terms Section 39.

We do not use children's information for advertising, do not sell it, and do not share it with third parties for marketing. Our analytics and error-reporting code refuses, by property name, to send anything named as a medical, allergy, special-need, accommodation, medication, dietary, birthdate, date-of-birth, diagnosis or emergency-contact value, or as a child's name, age, date of birth or family member. Outside production that refusal raises an error at the call site rather than dropping the value quietly. It is a guard on names, so it cannot catch a child's name typed inside somebody else's free text; we say so rather than claim it is airtight.

9.6 Signed Agreements and the Verification Page

When you sign an organization's agreement on Famlo, we keep the record exactly as it was shown to you and email you a PDF copy. Each record has a code, printed on every copy, in the form AGS-XXXX-XXXX-XXXX-XXXX. Anyone holding that code can enter it at verify.famlo.co to check that the record is genuine. The page shows only:

• whether the record is current, has been withdrawn, or has been signed again on a newer version
• the date it was signed
• the agreement's version number, and its title only where the organization has marked the title as fine to show
• the organization's name, city and state
• that it was signed by the child's parent or guardian, or by the participant themselves, and how their identity was checked (for example, signed in to their Famlo account)

The verification page never shows who signed. It never shows the signer's name, the child, any contact details, the text of the agreement, the signature, or the IP address or device it was signed from. Someone who also has a copy can paste its fingerprint to confirm the wording on it is exactly what was signed. The page sets no cookie, carries no analytics, is excluded from search engines, and limits how many codes one connection can try.

An organization can turn verification off, which makes all of its codes answer "No record found" immediately, and it can revoke a single code and issue a new one. When a record is deleted at the end of its retention period, or because its organization left Famlo, its code answers "No longer held by Famlo", so a copy you kept can still be explained. You can read your own signed agreements, and withdraw your consent to sign electronically for future agreements, in Account → Agreements.

10. Sensitive Personal Information

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), Colorado Privacy Act, Connecticut Data Privacy Act, Virginia Consumer Data Protection Act, and other applicable state privacy laws, certain categories of personal information are classified as "sensitive personal information" (SPI) requiring enhanced protections. The following data we collect qualifies as SPI:

• Health and Medical Data: Allergies, medical notes, special needs, medications and dietary restrictions — the fields listed in Section 9.1
• Children's Personal Information: Data about children under 16, including names, dates of birth, and health information
• Precise Geolocation: When you enable location services for group and event discovery

A drawn signature on an agreement is kept only as the final image, so the organization and you have a copy of what was signed. We do not use it, or anything about how it was drawn, to identify you, and we keep no stroke timing, speed or pressure.

Famlo is not a health care provider, health plan, or health care clearinghouse, and is not a business associate of one. The health information you provide is not protected health information under HIPAA. It is protected under this Privacy Policy, our Consumer Health Data Privacy Policy, and applicable state consumer health data laws.

10.1 Purpose Limitation

We use sensitive personal information only for the following purposes:

• Health/medical data: Event safety, accommodation planning, and emergency preparedness
• Children's data: Family profile management, group participation, and event registration
• Geolocation: Displaying nearby groups and events relevant to your location

10.2 Right to Limit Use of Sensitive Personal Information

Under CCPA/CPRA and other applicable state laws, you have the right to limit our use and disclosure of your sensitive personal information to only what is necessary to provide the services you have requested. To exercise this right:

• Clear a child's health fields on their page, which removes them from every organizer screen. There is no separate sharing toggle: what you have entered is what organizers in your current organizations can see, as described in Section 9.5
• Disable location services in your browser or device settings
• Email us at support@famlo.co with your specific request

We already limit our use of this information to the purposes in 10.1, and we will not deny you access to the Platform for exercising this right. Clearing a child's health fields does mean an organizer will not be told about an allergy or an accommodation.

11. Your Rights and Choices

Depending on your state of residence, including under laws such as the California Consumer Privacy Act (CCPA/CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA) and the Connecticut Data Privacy Act (CTDPA), you may have the right to:

• Access or correct your personal data
• Delete your account or request data erasure
• Object to or restrict certain data uses
• Withdraw consent for analytics and marketing cookies, in the Privacy Preferences panel described in 11.3. There is no separate consent for a child's health data to withdraw — see Section 9.2 — but you can clear any of those fields yourself at any time
• Opt out of the sale or sharing of your personal information
• Opt out of targeted advertising

To exercise these rights, email us at: support@famlo.co

Agreements you signed for an organization. Famlo keeps those records on the organization's behalf, as its processor. A request to see, correct or delete one goes to that organization, which decides; if you send it to us, we will pass it on. Deleting your Famlo account does not delete them: each is kept until its retention date in Section 8, with your typed name and the email you signed with, but no longer linked to your account.

11.0 If We Deny Your Request

If we decline to act on a privacy rights request, we will tell you why within the time limits described in Section 15. You may appeal that decision at no cost by emailing support@famlo.co with the subject line "Privacy Appeal." We will respond in writing within 45 days (60 days in Colorado and Connecticut), explaining our decision. If we deny your appeal, we will provide you with a method to contact your state Attorney General to submit a complaint.

Where you have given consent, you may withdraw it at any time, and we will stop the relevant processing as soon as practicable and no later than 15 days after receiving your withdrawal. If you are an Oregon resident, you may request a list of the specific third parties to which we have disclosed your personal data. You may use an authorized agent to submit a request on your behalf; we may ask you to verify your own identity and to confirm that you gave the agent permission. We will not discriminate against you for exercising any of these rights.

11.1 Global Privacy Control (GPC)

We honor Global Privacy Control (GPC) signals as a valid opt-out of the sale or sharing of personal information, as required by California, Colorado, Connecticut, Texas, Oregon, Montana, Delaware, Nebraska, New Hampshire, New Jersey, Minnesota and Maryland (list current as of July 2026). When we detect a GPC signal from your browser, we automatically disable analytics and marketing tracking, and the Privacy Preferences panel displays an acknowledgment confirming the signal was honored.

11.2 Do Not Sell or Share My Personal Information

We do not exchange personal information for money. However, under the broad definitions in the CCPA/CPRA and other state privacy laws, using Google Analytics with advertising features enabled can qualify as "sharing" personal information for cross-context behavioral advertising. We run Google Analytics only on our public marketing pages, only for visitors who are not signed in, and only with advertising storage and personalization switched off unless you have turned on the Marketing preference. We never run it on signed-in pages, and we never share information about a child. You may opt out of any such sharing by:

• Enabling Global Privacy Control (GPC) in your browser
• Clicking "Privacy Preferences" in our website footer and disabling analytics and marketing
• Emailing support@famlo.co

11.3 Privacy Preference Center

You can manage your tracking and cookie preferences at any time by clicking "Privacy Preferences" in the website footer. This allows you to control analytics and marketing technologies independently. Strictly necessary technologies cannot be switched off, because sign-in and security depend on them.

12. Third-Party Links

The Platform may contain links to third-party websites. These links may open in a new browser tab or window and are not governed by this Privacy Policy. We are not responsible for the content or privacy practices of those external sites, and we encourage you to review their privacy policies before providing any personal information.

13. International Users

Famlo is operated in the United States and is intended for use by residents of the United States only. We do not market or offer the Platform to individuals in the European Economic Area, the United Kingdom, or Switzerland, and we do not knowingly collect personal data from individuals located there. If you access the Platform from outside the United States, you do so on your own initiative, and your information will be transferred to and processed in the United States.

14. Updates to This Policy

We may update this Privacy Policy periodically. When material changes occur, we will notify users through in-app banners, login alerts, or direct email communication, as appropriate. When we do, we will revise the “Last Updated” date above. Material changes will be communicated through the Platform.

15. Contact Us

If you have questions or concerns regarding this Privacy Policy, or if you wish to exercise your data rights, please contact us. We will respond within the timeframes required by your state: 45 days for CCPA/CPRA requests (extendable by an additional 45 days with notice), and 45 days for VCDPA, CPA, CTDPA and comparable state requests (extendable by 45 days where the law allows).

The Hive Network, LLC
Email: support@famlo.co
Jurisdiction: Lee County, Florida, USA