Your household, your choices

Privacy

Updated September 25, 2026

This notice describes Kindreday, operated by Signal Forward LLC. Contact support@kindreday.com with questions, access requests, or deletion requests. Do not include passwords, PINs, or connection codes in email.

Information the dashboard uses

The dashboard stores adult sign-in information, household membership, names and settings entered by parents, device authorizations, chores, completion and approval records, allowance and goal records, and meal plans. Parents may enter children’s names and routines; children do not create sign-in accounts.

If you connect a calendar, the dashboard reads event information such as titles, times, and locations from the connected account. It stores an authorization credential for continued read-only access and caches calendar results to keep the schedule available during provider outages. Google access is limited to the calendar permission requested in the consent flow; the dashboard does not request Gmail access.

Optional weather location

You can choose a city, enter coordinates, or ask your browser for your current location. City searches run locally in your browser. Browser location is requested only when you select that option; coordinates from city search or browser location are rounded to approximately city-neighborhood precision before saving. Manual coordinates remain under your control. You can remove the saved weather location in household settings.

Visual Crossing. For weather, our server sends coordinates rounded to two decimal places to Visual Crossing. It does not send household names, child details, calendar events, or workout records to that provider. Signal Forward’s internal weather service caches forecasts by approximate location for up to six hours and can reuse the public forecast across its products. Expired cache records are marked for asynchronous database removal. Weather questions to the built-in assistant may include the forecast in the model context described below. Weather display alone does not call an AI model. See Visual Crossing’s privacy policy.

How information is used and shared

Information is used to display and manage the household’s schedule and routines. Household members, paired devices, and services authorized by a parent can access information permitted by their role or capability. Calendar titles are visible by default; turning titles off displays busy blocks instead. The underlying calendar information can remain in cached source data.

AWS hosts the dashboard, sign-in service, stored data, credentials, operational logs, and backups. Google and Microsoft process their respective calendar sign-in and API requests. Operational records are used to investigate errors and maintain the service.

If you use the optional assistant, your conversation and relevant tool results, which can include calendar information, are processed by the configured assistant service: AWS Bedrock (using GPT-OSS 20B) or Anthropic (using Claude). Each deployment uses one configured service; requests are not automatically retried with the other provider. Spoken responses use AWS Polly. Browser speech recognition may use the browser provider’s speech service. If a parent authorizes an external assistant or service, data returned to it is also handled by that service.

The dashboard does not sell household information or use it for advertising. Google user data is used for the user-facing calendar and assistant features described here, not to train general-purpose AI models. Kindreday’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Stripe (paid subscriptions). If you choose a paid subscription, Stripe receives your payment and billing information through its hosted Checkout and billing portal. We send a household identifier and selected plan to associate the subscription with your household. We store Stripe customer and subscription references, payment status, the billing contact you select, and your payment-terms acceptance. We do not send calendar contents, children’s chore records, or calendar credentials to Stripe. Full card details are handled by Stripe, not stored by Kindreday. Stripe also retains payment records under its privacy policy. Transactional subscription emails are described below.

Transactional email providers. AWS Simple Email Service processes the billing email address you select, service-notice text, and delivery-status information to send subscription notices. The same provider also processes your account email address and account-service messages, including confirmation codes, password-reset codes, and temporary passwords when applicable. Cognito encrypts these secrets before passing them to our email sender, which decrypts them only to prepare the email; our sender does not log codes, passwords, email contents, or recipient addresses. These emails do not include calendar content, children’s chore records, or calendar credentials. For subscription notices, we retain delivery records and suppress addresses after permanent bounces or other adverse delivery feedback. Account-email operational logs record the message type and provider message identifier. Before September 24, 2026, Microsoft Azure Communication Services sent these emails; the delivery reports it kept were deleted on September 25, 2026.

Connecting your own ChatGPT or Claude assistant

OpenAI and Anthropic. If you connect ChatGPT, OpenAI receives the information returned by your authorized Kindreday tools. If you connect Claude, Anthropic receives it. This is separate from the assistant built into Kindreday. Default permissions allow household name and timezone, child names and identifiers, today’s routine titles, status and listed chore values, meal plans, setup counts, routine templates, and proposals created by that connection. The connection is for parents managing a household, not a separate child account.

You choose permissions in Kindreday before connecting. Setup proposals require a parent’s separate review and approval in Kindreday. Optional meal and routine permissions allow direct meal updates, chore logging, and optional unpaid task assignment. These scoped OAuth connections do not return calendar event contents, allowance transaction history, billing information, membership administration, or home-equipment controls. Older, separately authorized service grants can have broader capabilities, including calendar tools, as described below.

Your messages and returned tool results are processed under OpenAI’s privacy policy or Anthropic’s privacy policy, and the settings and terms of your assistant account. Disconnecting in Kindreday stops new authorized requests; it does not delete messages already retained by your assistant provider. Use that provider’s controls to manage its conversation history.

Kindreday stores the connection’s parent, household, client identifier, permissions, expiry, and revocation status. OAuth secrets are stored as one-way digests. Consent requests expire after 10 minutes, access credentials after 5 minutes, and connections and refresh credentials after 30 days. Expiring request and credential records are marked for asynchronous database removal. Connection records remain available for access management until household deletion. Setup proposals expire after 24 hours; proposal history remains in household records until deletion.

With whom we share Google user data

We share, transfer, or disclose Google user data to the following recipients for the purposes described below:

Your household and authorized services. We disclose Google calendar event information, including titles, times, and locations, to members of your household and people using its paired devices, subject to their access permissions and calendar title settings. If a parent authorizes an external assistant or service through a service grant, that service can receive Google calendar information returned by the calendar tools it is permitted to use. The recipient is the assistant or service the parent chooses; its own privacy policy also applies.

Amazon Web Services (AWS). We transfer and store Google calendar data, cached event results, and calendar authorization credentials in AWS infrastructure to host and operate Kindreday. AWS also processes operational records and backups. When the assistant uses AWS Bedrock, AWS receives your question, conversation context, and relevant calendar tool results to generate an answer using GPT-OSS 20B. These results can contain Google calendar event titles, times, and locations. This route uses the model hosted by AWS, not the OpenAI API. If you use spoken assistant responses, AWS Polly receives the response text to generate speech; that text can contain information from your Google calendar.

Anthropic. When the household assistant is configured to use Claude through Anthropic, we send your question, conversation context, and relevant calendar tool results to Anthropic to generate an answer. Requests using AWS Bedrock are not sent to Anthropic. These results can contain Google calendar event titles, times, and locations. The resulting answer is returned to your household. Calendar information is not sent to Anthropic merely because you connect a calendar or view Today or Week.

Google and browser speech providers. Google receives authorization and calendar API requests to provide the calendar connection. If you use browser speech recognition, your browser provider may process your spoken input; that input can include calendar information you say aloud. This is separate from the dashboard reading your calendar.

Signal Forward LLC. Signal Forward LLC operates the service and can access stored Google user data for authorized support and security troubleshooting. Human access to Google user data is limited to your affirmative permission for specific data, security investigations, or legal obligations, consistent with Google’s Limited Use requirements.

We do not sell Google user data or disclose it to advertisers, data brokers, or information resellers. We do not share or transfer it for purposes other than providing the features described in this notice, authorized support, security, or compliance with legal obligations. Google user data is not used to develop, improve, or train generalized or non-personalized AI or machine-learning models.

How we protect sensitive data

We use technical access controls and encryption to protect household information, including Google calendar data and authorization credentials.

Encryption in transit and at rest. The dashboard uses HTTPS with TLS to protect communication between your browser and the service, and uses HTTPS for Google authorization and calendar API requests. Household records and cached calendar results in Amazon DynamoDB, including its backups, are encrypted at rest. Calendar authorization credentials are stored separately as encrypted SecureString parameters in AWS Systems Manager Parameter Store, using AWS Key Management Service.

Authentication and household access controls. Adult accounts sign in through Amazon Cognito. The application checks household membership and permissions for protected requests. Paired devices and external services use revocable credentials with assigned capabilities; parent-only actions require parent authorization. Database access is scoped to the authorized household. Cloud service access uses AWS Identity and Access Management permissions, including permissions required to retrieve calendar credentials.

Connection controls. Hosted Google connections request read-only calendar access. Calendar credentials are used by the server and are not returned to the browser with calendar results. Parents can disconnect calendars and revoke paired devices or service access in Manage. Removing a hosted connection deletes its stored credential; Google account settings also allow you to revoke the app's access. Retained caches and backups are described below.

These measures reduce the risk of unauthorized access, loss, or disclosure; no online service can guarantee absolute security. Keep your parent PIN and device pairing codes private, revoke lost devices, and contact support@kindreday.com if you suspect unauthorized access.

Optional Flux workout planning

When this integration is enabled, a signed-in parent can choose their own connected calendars and approve sharing availability with a Flux account. Flux is also operated by Signal Forward LLC. Only merged busy start and end times are returned, without event titles, attendees, descriptions, or locations. Each calendar owner must approve their own sharing. Unselected calendars are not shared. This permission does not authorize ChatGPT, Claude, or another external assistant to receive calendar availability.

A single-use pairing code expires after ten minutes; the resulting connection expires after 30 days. Kindreday stores only credential digests and the owner-approved calendar selection. You can revoke the service in Manage. Revocation stops new authorized reads, including reads of cached availability; it does not reverse a workout time you already confirmed in Flux. Sharing records remain until household deletion, while expiring codes and policies are marked for asynchronous removal. Flux must request new approval when the connection expires.

Your controls

Parents can remove calendar connections in Manage, revoke devices and services, manage household membership, export household data, and request or initiate household deletion. You can also revoke the application’s access in your Google or Microsoft account settings. Removing a connection stops future reads once active caches refresh; it does not delete events from the provider’s calendar.

Storage and deletion

Connected-calendar credentials are encrypted in AWS Parameter Store. Removing a hosted connection deletes its stored credential. Cached calendar snapshots are marked for expiry after 21 days; actual removal is asynchronous. Other household records remain until removed through the app or household deletion. Backups, operational logs, and older manually configured credentials can remain after removal from the active application. Contact Signal Forward LLC for a deletion request that includes these retained copies and any separate sign-in account.

Privacy requests and changes to this notice are handled by Signal Forward LLC. Review this page before sharing information or enabling an optional integration.

Trial eligibility and retry protection

We keep a one-way digest of the verified parent email used to claim a free trial, the household identifier, and the claim date to prevent repeated free trials. This limited eligibility record remains after household deletion. We also keep minimal household-creation retry records to prevent duplicate setup after interrupted requests; these do not contain your PIN or raw household name. Contact support@kindreday.com with questions about these records.