Privacy Policy

1. Who we are

Emmy ("Emmy," "we," "us," "our") is a family assistant that helps parents manage school, camp, activities, meals, shopping, and household coordination. This Privacy Policy explains what personal information we collect when you use Emmy (the "Service"), how we use it, who we share it with, and the choices you have.

2. Who Emmy is for (and children)

Emmy is for parents, guardians, and caregivers who are 18 years of age or older. Emmy is not directed to children, and children do not create accounts, sign in, or interact with Emmy directly.

To help you coordinate your family, parents may add information about their children — for example first name, age, grade, school, interests, allergies, routines, drop-off/pick-up times, sizes, or preferences. This information is entered by you as the parent. It lives in your family's private household and is only visible to members of your household (and any co-parents or caregivers you invite by email). We do not knowingly collect information directly from children under 13. If you believe a child has provided information to us directly, contact privacy@heyemmy.com and we will delete it.

3. Information we collect

3.1 Information you give us

• Account: name, email, password (hashed) or Google sign-in identifier.
• Household & family profile: household name, invited co-parents/caregivers, children's first names, ages, grades, schools, interests, allergies, dietary notes, and routines.
• Preferences: onboarding answers (trust mode, communication style, favorites, dislikes) and preference signals inferred from actions you take on cards (accept, snooze, delegate, dismiss, bookmark).
• Location for local suggestions: ZIP code, used to fetch weather and Bay Area / local activity picks.
• Delivery information: your delivery address and instructions, saved so Emmy can prepare shopping lists (nothing is purchased without your approval).
• Content you paste, drop, upload or send in: emails, screenshots, invitations, permission-slip PDFs, notes, and brain-dumps. Emmy turns them into cards, plans, editable PDFs, or reminders.
• Voice input: if you use Emmy's voice onboarding or dictate to Emmy, the audio and transcript.

3.2 Information from connected services (only if you connect them)

• Gmail: we read up to the last ~30 days of family-relevant messages on first sync, then only new messages. Emmy filters out security alerts, SaaS notifications, and marketing before AI processing. You can add sender-level ignore rules from the inbox at any time.
• Google Calendar: events and availability for calendars you pick. Used to detect conflicts and to add events you explicitly confirm.
• School & childcare apps (e.g., Brightwheel, ClassDojo, Seesaw, ParentSquare, Remind, Konstella) — messages and updates about your child, if you connect them.

You connect each source with OAuth and can disconnect at any time from Settings → Connections (per-account). Access tokens are stored encrypted; email bodies and attachments are encrypted at rest.

3.3 Information we collect automatically

• Product analytics: page views, dwell time on each page, and clicks on tracked elements, tied to your account so we can improve the product and debug issues. We do not use third-party ad networks.
• Card & action telemetry: which cards you accept, snooze, share, or dismiss (used to make Emmy's suggestions more relevant).
• Device & log data: IP address, browser, OS, timestamps, and error logs.
• Cookies & local storage: to keep you signed in and remember preferences. No advertising cookies.

4. How we use your information

• Read family-relevant emails and messages and turn them into "glow cards," reminders, and one-tap actions.
• Read and let you edit attachments such as permission-slip PDFs before you send them.
• Draft replies, shopping lists, meal plans, and calendar events for you to review — nothing is sent, purchased, or scheduled without your explicit confirmation (based on your Trust Mode).
• Suggest local activities near your ZIP based on your children's ages and interests, with a "Fit Score" explaining why.
• Detect calendar conflicts and surface them before you commit an event.
• Build a private household profile so Emmy's suggestions get more relevant over time.
• Share cards, plans, and reminders with co-parents and caregivers you invite.
• Provide, secure, debug, and improve the Service, and communicate with you about your account.

5. AI and how your data is processed

Emmy uses large language models, vision models, and voice models — routed primarily through the Lovable AI Gateway and providers such as Google (Gemini), OpenAI, and ElevenLabs — to summarize emails, read screenshots and invitations, transcribe voice, generate plans, and rank suggestions.

• We send only the fields needed for the task (e.g., an email body plus the relevant family profile).
• Providers are contractually required not to use your content to train their foundation models.
• We do not sell your data, and we do not use your family's data to train third-party AI models.
• AI-generated summaries live inside your household and are visible only to members of your household (and, minimally, to Emmy staff for support and safety).

6. Example / demo mode

When you explore Emmy in "Example mode," everything you see is sample data. It is stored under a separate demo scope and is never mixed with your real household. Emmy will not send emails, invite caregivers, purchase items, or write to real calendars while you are in Example mode. Exiting Example mode returns you to your real account with your real data intact.

7. Phone number & text messages

Giving Emmy your mobile number is optional and never required to use the app. We use it only to reach you about your own household. The messages we send are: pickup and drop-off changes, order and delivery updates, and reminders you asked for — typically a few messages per week, sent only when something in your household needs you. Message frequency varies.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

You will only receive text messages if you separately check the SMS consent box. When you do, we record the exact wording you agreed to and the date and time, so you can always see what you consented to. Consent is not a condition of purchase or of using Emmy, messages may be sent by an automated system, and message and data rates may apply.

We use Twilio as our messaging provider to deliver and receive these texts on our behalf; your number and message content are processed by Twilio under contract solely for that purpose.

You can opt out at any time by replying STOP to any message, or by turning text updates off in Settings. Reply HELP for help. Removing your number from Settings deletes it and the associated consent record. You can also review the opt-in wording at any time at beta.heyemmy.com/sms.

8. Legal bases (EEA / UK users)

• Contract: to provide the Service you signed up for.
• Consent: for email/calendar/school integrations, voice features, and optional features. You can withdraw consent at any time.
• Legitimate interests: to keep Emmy secure, prevent abuse, and improve the product.
• Legal obligation: to comply with applicable law.

9. Sharing your information

• Within your household: profile, children's info, cards, and plans are visible to household members and any co-parent or caregiver you invite by email.
• Service providers: hosting and database (Lovable Cloud), AI providers (as described above), transactional email delivery, text message delivery (Twilio), and analytics/error monitoring — all bound by contract.
• Connected third-party services (Gmail, Google Calendar, school apps): we exchange data with them on your behalf under their terms.
• Local activity sources: to surface "Near you" suggestions we retrieve public listings from sites such as 510families, Funcheap, and Do the Bay via a web-scraping provider (Firecrawl). We send generic queries — not your name, email, or child data.
• Legal / safety: if required by law or to protect the rights, safety, or property of Emmy, our users, or the public.
• Business transfer: in a merger, acquisition, or sale, subject to this Privacy Policy.

We do not sell your personal information and we do not share it for cross-context behavioral advertising.

10. Security

• Encryption in transit (TLS) for all network traffic.
• AES-256-GCM encryption at rest for connection tokens, email bodies, and attachments.
• Row-level access controls so household data is only reachable by members of that household.
• Least-privilege service credentials and audit logging on privileged operations.

No system is 100% secure — please choose a strong password and let us know at security@heyemmy.com if you suspect an issue.

11. Data retention

We keep your information while your account is active and as needed to run the Service. You can delete individual items (cards, meals, brain-dumps, ignored senders) in-app. When you delete your account from Settings, we permanently delete your household, children's profiles, preferences, cards, voice transcripts, connected-service tokens, encrypted email data, and AI summaries within 30 days, except where we must retain limited records for legal, tax, or security reasons.

12. Your rights & choices

• Access, correct, export: view and edit your family, children, caregivers, and preferences in Emmy at any time.
• Delete: delete individual items in-app, or delete your entire account from Settings.
• Disconnect integrations: per-account disconnect for Gmail, Google Calendar, and other integrations under Settings → Connections.
• Silence senders: tell Emmy to ignore specific email senders from the inbox.
• Opt out of marketing: unsubscribe from any product email via the footer link.
• EEA / UK / California residents may have additional rights (access, rectification, erasure, portability, restriction, objection, non-discrimination). Contact privacy@heyemmy.com and we will respond within the timeframes required by applicable law.

13. International transfers

Emmy is operated from the United States. If you access Emmy from outside the U.S., your information will be transferred to and processed in the U.S. and other countries where our service providers operate, under appropriate safeguards.

14. Changes to this policy

We'll update this page when our practices change. If the change is material, we'll notify you by email or in the app before it takes effect.

15. Contact us

Questions about privacy? Email privacy@heyemmy.com. For security issues, security@heyemmy.com.