Skip to content
Back to Home

Privacy Policy

Last updated: November 16, 2025

1. Overview

Family Porch is a private platform built for families.

We do not sell your data. We do not run ads.

Your content belongs to you.

This Privacy Policy explains what data we collect, why, and how we protect your privacy.

2. What We Collect

2.1. Account Information

  • Name
  • Email
  • Profile photo (optional)
  • Relationship tags (optional)

2.2. User Content

All content you choose to upload:

  • photos & videos
  • stories
  • messages
  • events
  • family trees
  • Porch Light communications

2.3. Technical Data

  • device type
  • IP address
  • browser information
  • activity logs (security & troubleshooting)

2.4. Payment Data

Handled by Stripe.

We do not store your full card number.

3. How We Use Data

  • Provide, maintain, and personalise your Porches
  • Display content only to authorised family members
  • Operate Porch Light and support guided communication
  • Detect safety issues or harmful conduct
  • Process payments
  • Improve platform performance
  • Comply with legal obligations

We never sell personal information.

4. AI & Sentiment Features (Porch Light)

If you use Porch Light, messages may be processed using natural language models to:

  • analyse emotional tone
  • detect risk or escalation
  • provide stabilising prompts
  • generate insights for both parties
  • recommend pacing or cooling-off

This data is not used for advertising, profiling, or external sharing.

5. Sharing & Subprocessors

We share data only with essential service providers:

Stripe

Payments and billing.

Cloudflare

Security, CDN, and performance.

(Optional future services can be added here)

We require all vendors to meet strict privacy and security standards.

6. Children’s Privacy

Minors may use Family Porch with parent/guardian supervision.

Guardians control visibility and permissions.

We do not knowingly allow unsupervised minors to create independent accounts.

7. Data Retention

We retain data only as long as necessary to operate the Services, or until your account is deleted.

8. International Transfers

Data may be processed in countries outside your residence (e.g., Cloudflare global network, Stripe).

We use Standard Contractual Clauses or equivalent safeguards where required.

9. Your Rights

Depending on your region, you may have rights to:

  • access your data
  • correct inaccurate data
  • delete data
  • export data
  • restrict or object to processing

To exercise rights:

Email: [LEGAL EMAIL]

10. Security

We use encryption, secure infrastructure, and industry best practices to protect your information.

📄 3. GDPR NOTICE (EU/UK)

Last Updated: [DATE]

1. Data Controller

[COMPANY LEGAL NAME]

[REGISTERED ADDRESS]

Contact: [LEGAL EMAIL]

2. Legal Bases for Processing

We process personal data under:

  • Performance of contract: providing the Family Porch service
  • Legitimate interests: ensuring safety, preventing misuse
  • Consent: optional features, invitations, or communications
  • Legal obligations: compliance with applicable law

3. EU/UK User Rights

You have rights to:

  • Access your data
  • Rectify inaccurate data
  • Erase (right to be forgotten)
  • Restrict processing
  • Data portability
  • Object to processing

To submit a request, contact: [LEGAL EMAIL].

4. International Transfers

We rely on Standard Contractual Clauses for data moved outside the EEA or UK.

5. Data Protection Officer (DPO)

If you appoint one later, insert here.

For now:

We have not appointed a DPO. For all privacy matters, contact us at [LEGAL EMAIL].

📄 4. CCPA/CPRA NOTICE (California)

Last Updated: [DATE]

1. Categories of Information Collected

We collect:

  • Identifiers (name, email, IP)
  • Photos and videos
  • Messages and user content
  • Relationship tags
  • Device and usage data

We do not collect:

  • Geolocation precision
  • Biometric data
  • Health data

2. No “Selling” or “Sharing” of Personal Information

Family Porch does not sell or “share” (under CPRA definition) your personal information.

We do not use third-party advertising cookies.

3. Your California Privacy Rights

You may request:

  • Access to your data
  • Deletion of your data
  • Correction of inaccurate data
  • Information about categories of information disclosed to service providers

We do not discriminate against users who exercise their rights.

Submit a request:

Email: [LEGAL EMAIL]

4. Service Providers

We share information only with:

  • Stripe
  • Cloudflare
  • (and others you add later)

5. Verification Process

We may request additional information to verify your identity before fulfilling requests.