Privacy Policy

1. Who we are

Togethr is operated by Togethr, LLC ("Togethr", "we", "our", or "us"). This Privacy Policy explains what personal information we collect through the Togethr website, web app and mobile apps (the "Service"), how we use it, who we share it with, and the choices you have. Togethr, LLC is the company responsible for your information.

2. Information we collect

Information you give us

• Name, email address and password (stored only as a salted hash)
• Optional phone number and profile photo
• Family, member and child profiles, including a child's name, date of birth, school, grade and emergency notes that a parent chooses to enter
• Calendar events, tasks, reminders, saved places, and notes
• Messages you post in the Service: event comments, family board posts and replies, and support tickets
• Photos of flyers you pin to the family board (we remove location and camera details from the photo when it is uploaded)

Information collected as you use the Service

• Location, only if you or a parent turn on location sharing, and only while sharing is enabled
• Device and app information such as browser, operating system, push notification token and IP address
• Basic usage and performance analytics
• Security and audit logs of account actions

Information from services you connect

If you choose to sync an external calendar (for example Google Calendar or Apple iCloud), we receive the events and tasks you authorize and send back the ones you choose to sync. You can disconnect at any time in Settings, which stops syncing.

Payment information

Payments are processed by Stripe. Your card details go directly to Stripe and are never stored on our servers. We keep only your subscription plan, status, and Stripe customer and subscription identifiers.

3. How we use information

• Provide the Service and enable family coordination features
• Send reminders, alerts, safety notifications and service emails
• Process subscriptions and prevent fraud
• Respond to support requests
• Keep the Service secure, debug problems and improve it
• Comply with legal obligations

We do not sell your personal information and we do not use it for third-party advertising.

4. Location data

Location sharing is off by default. When it is on, your location is visible only to family members who are permitted to see it. People who join a family as a limited-access guest cannot see location or saved places. Location history is kept according to your plan's retention limit, never longer than 90 days, and is deleted when you turn sharing off, delete your account, or the retention period ends. You can turn location sharing off at any time.

5. Who we share information with

We share information only as follows:

• Your family. Calendar, task, board and (if enabled) location information is visible to other members of your family according to their role.
• Service providers that process data on our behalf:
  • Vercel: application hosting, analytics and file storage
  • Neon: database hosting
  • Stripe: payment processing and billing
  • Resend: transactional and notification email
  • Google Firebase Cloud Messaging: push notifications
  • OpenStreetMap-based services: map tiles and address lookup (the address or coordinates you look up may be sent to them)
  • Calendar providers you connect (Google, Apple)
• Legal and safety. When required by law or valid legal process, or to protect the rights, safety or property of users or the public.
• Business transfers. If Togethr, LLC is involved in a merger, acquisition or sale of assets, information may be transferred, and we will tell you if your information becomes subject to a different privacy policy.

6. Children's privacy

The Service is designed for families and is not directed to children to use on their own. Only a parent or legal guardian can create a child profile or a child account. A parent can create an account for a child aged 8 or older, and by doing so confirms that they are the child's parent or legal guardian and consent to the collection and use of the child's information as described here, including for a child under 13. We record that consent.

We collect only what is needed to run the Service for the child (such as name, date of birth, and the calendar, tasks and messages the family creates). We do not use children's information for advertising and do not sell it. A child's location is off by default and is enabled only by the parent. Child accounts have restricted permissions. A parent can review, correct, export or delete their child's information, or withdraw consent, at any time in the app or by contacting admin@mytogethr.com. If we learn we collected information from a child under 13 without parental consent, we will delete it.

When a child turns 18, they become an adult member with their own controls, and location sharing is reset to off until they choose otherwise.

7. Security

We use industry-standard safeguards, including encryption in transit, encrypted database storage, hashed passwords, role-based access controls, rate limiting and audit logging. No system is perfectly secure, so we cannot guarantee absolute security. Please use a strong, unique password.

8. Your choices and rights

You can:

• Access and update your information in the app
• Export your data from Settings
• Delete your account from Settings
• Turn location sharing and notifications on or off
• Opt out of non-essential email

Depending on where you live (for example California, other U.S. states, or the EU/UK), you may also have the right to request access, correction, deletion or portability of your personal information, to object to or restrict certain processing, and to not be discriminated against for exercising these rights. To make a request, email admin@mytogethr.com. We may need to verify your identity first. We do not sell or share personal information for cross-context behavioral advertising.

9. Data retention

We keep your information while your account is active. After you delete your account, we keep it for up to 30 days for recovery and then delete it, except where we must keep limited records longer for legal, tax, fraud-prevention or dispute purposes (for example, payment records held by Stripe). Archived tasks, events and reminders, board posts (including flyer photos) and comments are kept for at most 90 days, and are removed sooner when deleted by you or a family adult.

10. International users

Togethr, LLC is based in the United States and our providers may process data in the United States and other countries. By using the Service you understand that your information may be transferred to and processed in these locations.

11. Changes to this policy

We may update this Privacy Policy. When we make significant changes we will notify you by email or in the Service and update the date above.

12. Contact us

Togethr, LLC
29 Prospect Rd, Andover, MA 01810
Questions or requests about this policy or your data: admin@mytogethr.com