Teen Privacy Notice

How you feel and the topics you pick are private. Your Tap In history and My Pulse are for you.

Your parent or guardian can't see them, and neither can anyone else in your Circle. Saying yes to FamilyBeats didn't give them access.

Only what you choose to share, each time, after you see exactly what your family will see: a signal (like "Celebrate" or "Space"), a small moment, or the word for how you feel (like "Good").

Your Family Guess answers, to the people who played that round. Your individual guesses aren't shown to others.

Your first name, role, and avatar, your name on a goal you suggest, and any goal title or milestone you type. Your whole Circle sees these. If your account is deleted, the goal titles and milestones you typed are deleted too. So keep them to things you're happy for your family to see.

Your responses to someone's share. Only that person sees them.

The person who runs FamilyBeats for Room for Tomorrow can access your information only when needed to run the app or handle requests. Railway records certain administrative activity in workspace audit logs; we do not claim that every access to personal information is logged.

They may look at family-level numbers, not what you recorded, only when needed to run the app.

Companies that help run FamilyBeats include Railway, our production host in Amsterdam, Netherlands, with any future email-delivery provider identified before use. They receive information needed to provide their services. We do not authorize them to sell it or use it for their own advertising. The Privacy Policy explains provider handling and locations; backup locations are still being confirmed. If you allow browser notifications, Apple, Google or Mozilla services may deliver them depending on your browser and device. They handle notification-subscription and delivery information, not access to your private Tap In history. The Privacy Policy explains notification payloads and browser-managed caching. Permission for notifications is separate from permission to collect your feelings data or share an item.

We may share information if the law requires it (like a court order), to keep people safe, or if FamilyBeats is bought or merged. In that case, the new owner has to keep these promises.

You can stop using FamilyBeats any time.

Deleting your account: you can ask for this yourself. You don't need your parent's permission. The adult who said yes for you can ask too. You can also ask to delete only your Tap In health data. We may remove replies linked to those items and identifiable insights derived from them, but not unrelated family content. Another parent or legal guardian may make a request if we verify their identity and legal authority. Being a Circle admin or grandparent alone is not enough. If you delete your whole account, your own replies are deleted too. If you withdraw only your feelings-data agreement, we remove replies and derived text linked to the affected feelings data where needed, not your unrelated replies or other family members’ independent content. Any AI-derived text is a future case only; AI is currently off.

Email privacy@roomfortomorrow.com. During the pilot, an authorized person can handle your request or appeal through a recorded email process and check it is really you. We use your secure account or email and a code where needed; if an adult acts for you, we also check their legal authority. You may also use authenticated account controls when available. We ask for another code only where needed to verify the request securely. We do not need an automated in-app process to handle your request. We tell you what action was taken, what was deleted and any limited information or backup copies that remain under the separate retention rules.

We aim to acknowledge your request within 2 business days and delete your live account data within 7 days after we check it’s you. Deleted information can remain in backups until they expire. Daily backups are kept for 6 days and weekly backups for 27 days from creation; older monthly backups may remain until their scheduled expiry. Backups do not run your account. If restored, your deletion will be applied again before ordinary use resumes. We keep consent records while your account exists plus 3 years and a request log without Tap In content for 24 months. Infrastructure logs have a 30-day history. The Privacy Policy explains the separate retention rules.

If your parent or guardian takes back their OK: your access is paused within 1 business day after we check it’s them, and your live account is deleted when the 30-day re-authorization window ends unless another eligible parent or legal guardian authorizes you. The separate record-retention periods above still apply. These deadlines concern live systems; existing backup copies expire under the separate backup lifecycle in the Privacy Policy. During the pilot, a parent or legal guardian can contact privacy@roomfortomorrow.com for supervised re-authorization. We check their current legal authority and record the required agreements. Your account stays paused until the process is complete within the 30-day window, and you must agree too; an adult cannot override your refusal.

If the adult who said yes leaves your Circle or deletes their account: your account is paused, you are signed out, and you cannot sign in. We tell the other Circle adults. If no other eligible parent or legal guardian authorizes you within 30 days after the pause, your account is deleted, subject to the separate record-retention periods above. These deadlines concern live systems; existing backup copies expire under the separate backup lifecycle in the Privacy Policy.

Day 14 is a check-in, not an automatic deletion. The adults in your family are asked how it went and whether to keep going. We send a reminder at least 7 days before day 14. We will never ask you to pay or show you offers to buy anything.

If your parent or legal guardian confirms that your family wants to keep going and you agree too, your stuff is kept after day 14, still private. Continuing does not create a paid subscription. Any future payment requires an adult’s explicit purchase authorization; we never charge teens or show them paid offers. If an adult wants to continue but you do not, you can tell us directly at privacy@roomfortomorrow.com. You will not continue, and we stop access and new collection and delete your live data within the 30-day pilot-decline period, or sooner under the 7-day verified-deletion-request target if you ask. The adults can continue their own use without keeping your participation active.

If no one answers, your stuff is kept unused for 90 days in case your family comes back. Your access is paused during that time, except to exercise privacy rights or request recovery; we do not collect new Tap Ins or share your information. To restart, we record a continuation decision, and both you and an eligible parent or legal guardian must agree. Otherwise, your live data is deleted within 30 days after the recovery period, with existing backups expiring separately.

If your family decides not to keep going, your stuff is deleted from live systems within 30 days, with existing backups expiring under the separately disclosed backup schedule.

You can always ask for deletion sooner.

We will tell you and your parent or legal guardian before material changes affecting you take effect and ask for any renewed agreements or consents needed. Before collecting or using your feelings data in a materially different way, we will ask for consent again.