1. Introduction
Welcome to FML Genie ("we," "us," or "our"). FML Genie is a household operating system that helps families coordinate the work of running a home — tracking responsibilities across categories like Home, Out, Caregiving, Magic, Curveballs, and Me Time.
We take your family's privacy seriously. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. By using FML Genie, you agree to the practices described here.
Questions? Contact us at kirkmeldrum1@gmail.com.
2. Who This Policy Applies To
This policy applies to:
- Adults who create or manage a family workspace (Family Admins and Members)
- Teens and Children added to a family workspace by a parent or legal guardian
- External Helpers (babysitters, tutors, caregivers) granted time-bounded access
- Visitors to our marketing website
Children's data: FML Genie is designed to be used by families and may include children under 13. Accounts for minors must be created and managed by a parent or legal guardian. We do not knowingly collect personal information directly from children without parental consent. See Section 9 for details.
3. Information We Collect
3.1 Information You Provide
- Account information: Email address, display name, family name, and avatar.
- Family workspace data: Family member names, roles, and the relationships you set up.
- Task and domain data: Responsibilities you create, assign, complete, or annotate.
- Notes, reminders, and attachments: Any text, images, documents, or files you add.
- Calendar and scheduling data: Due dates, recurring schedules, and shared calendar entries.
- Vault documents: Files you upload (bills, statements, EOBs, policy documents). We store their contents so you can retrieve and search them. We do not transmit them to third parties for training.
- Communications: Messages you send to support, feedback you submit, and interactions with our AI agents.
What we discourage: entering full credit-card numbers, bank account numbers, Social Security numbers, or other government IDs as free-text notes. Use the Vault for sensitive documents instead, where access is family-scoped.
3.2 Information Collected Automatically
- Usage data: Pages visited, features used, click events, session duration.
- Device and technical data: Browser type, operating system, device type, IP address (city-level retention only), time zone, language.
- Cookies and similar technologies: Used for authentication and preferences. See Section 8.
- Error and performance data: Stack traces and timing data via Sentry, with PII scrubbed before transmission.
3.3 Information from AI Agent Interactions
FML Genie includes built-in AI agents that help families plan, summarize, and stay coordinated. When you use these agents:
- We collect the prompts and instructions you send.
- We retain conversation history within the session and, optionally, across sessions.
- We process this content through third-party LLM providers via OpenRouter (see Section 6).
You can clear agent conversation history at any time from your account settings.
3.4 Information We Do Not Collect
- We do not collect biometric data.
- We do not access your device's contacts, photo library, or microphone unless you explicitly grant permission for a feature that requires it.
- We do not track your location unless you enable a feature that uses it.
4. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the FML Genie platform.
- Authenticate users and protect family workspaces.
- Sync data across your devices.
- Power AI agent assistance, search, and recommendations.
- Send transactional emails (sign-in links, account notifications, feature updates).
- Improve features, debug issues, and conduct internal analytics.
- Communicate with you about updates and changes to our terms (you can opt out of non-essential communications).
- Comply with legal obligations and enforce our Terms.
We do not sell your personal information. We do not use your family's task data, notes, or AI conversations to train third-party AI models without your explicit consent.
5. How Information Is Shared
5.1 Within Your Family Workspace
By design, family members can see information based on their role:
- Family Admins and Parent Members see all family data.
- Teens see their own assigned tasks and any tasks parents have made visible.
- Children see only what parents explicitly assign, in a simplified view.
- External Helpers see only the tasks and time-bounded data parents grant access to.
Parents control what each family member can see. Always review role permissions before adding someone to your workspace.
5.2 With Third-Party Service Providers
We share limited data with vendors who help us run the service. These providers process data only on our behalf:
- Hosting and edge compute: Vercel
- Database and storage: Neon (PostgreSQL), Vercel Blob
- Email delivery: Resend
- LLM gateway: OpenRouter, which routes prompts to underlying model providers (Anthropic, OpenAI, others)
- Error monitoring: Sentry
- Uptime and log aggregation: Better Stack
- Rate limiting and edge cache: Upstash
5.3 Legal and Safety Disclosures
We may disclose information when we believe in good faith that disclosure is required to:
- Comply with applicable law, regulation, subpoena, or legal process.
- Protect the safety of any person, including reports of suspected child abuse.
- Investigate fraud, security incidents, or violations of our Terms.
- Defend our legal rights.
5.4 Business Transfers
If FML Genie is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you and update this policy if such a transfer occurs.
6. AI Agents and Third-Party LLM Processing
FML Genie's AI agents send prompts to large language models via OpenRouter. This means:
- Your prompts and the relevant family context needed to answer them are transmitted to OpenRouter and the underlying model provider.
- Different agents may use different models depending on the task.
- OpenRouter and the model providers have their own privacy and data-retention policies.
- We configure our integrations to disable training on customer data where the provider supports it. We will not knowingly use providers that train on your data.
You can disable individual agents or AI features entirely from your family settings.
7. Data Retention
We retain data for as long as your family workspace is active. When you delete your account or workspace:
- Your personal data is marked for deletion within 30 days.
- Backups containing your data are purged within 90 days.
- Anonymized, aggregated analytics may be retained indefinitely.
- We may retain certain records longer if required by law.
You can export your family's data at any time from Settings → Family Settings → Export my data (admin only). The export is a JSON document containing every family-scoped row.
8. Cookies and Tracking
FML Genie uses cookies and similar technologies for:
- Essential cookies: Authentication, session management, security. These cannot be disabled.
- Functional cookies: Remembering your preferences and settings.
- Analytics cookies: Understanding how the product is used (aggregate only).
We do not use third-party advertising cookies. We do not participate in cross-site tracking.
You can control cookies through your browser settings. Disabling essential cookies will prevent the app from functioning.
9. Children's Privacy
FML Genie is intended to be used by families, including minors. However:
- Family workspaces must be created by a person who is 18 years or older (or the age of majority in your jurisdiction).
- Parents and guardians are responsible for adding minors to their workspace and managing their access.
- We follow a parental-consent model: by adding a child to your workspace, you confirm you are the parent or legal guardian and consent to our processing of that child's information for the purpose of family coordination.
- Children's data is restricted to what is necessary for the service to function (display name, avatar, tasks they are assigned).
- Parents can review, edit, or delete a child's information at any time from family settings.
- If you believe a child has been added to FML Genie without parental consent, contact us at kirkmeldrum1@gmail.com and we will investigate and remove the data promptly.
This service is not directed at children using it independently of a parent or guardian. We comply with applicable laws including the Children's Online Privacy Protection Act (COPPA) in the United States and equivalent regulations in other jurisdictions.
10. Your Rights and Choices
Depending on where you live, you may have the following rights:
- Access: Request a copy of the personal information we hold about you.
- Correction: Update or correct inaccurate information.
- Deletion: Request that we delete your account and personal data.
- Portability: Export your data in a machine-readable format.
- Restriction or objection: Limit certain types of processing.
- Withdraw consent: Withdraw any consent you previously gave.
To exercise these rights, contact us at kirkmeldrum1@gmail.com. We will respond within the timeframe required by applicable law (typically 30 days).
Residents of the EU/UK have rights under GDPR. Residents of California have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising.
11. Data Security
We use industry-standard practices to protect your data:
- Encryption in transit (TLS 1.3) and at rest.
- Multi-tenant isolation between family workspaces.
- Magic-link and OAuth authentication (no password reuse risk).
- Rate limiting on authentication endpoints.
- Application-level audit logging of privileged operations.
- Regular security review of our codebase.
Per-family envelope encryption with customer-managed keys (so a single family's data can be cryptographically isolated and revoked) is on our roadmap and will arrive in a future update.
No system is perfectly secure. If we become aware of a data breach affecting your personal information, we will notify you and applicable regulators as required by law.
12. International Data Transfers
FML Genie is operated from the United States. If you are located outside the United States, your information may be transferred to and processed in the United States, which may have different data-protection laws than your country. Where required, we use safeguards such as Standard Contractual Clauses to protect your data.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will:
- Update the "Last Updated" date at the top.
- Notify you via email or in-app notification for material changes.
- For significant changes, give you the opportunity to review before they take effect.
Continued use of FML Genie after changes take effect constitutes acceptance of the updated policy.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your data, contact:
FML Genie — operated by TBD: legal entity name
Email: kirkmeldrum1@gmail.com
Mailing address: TBD: mailing address
For EU/UK residents, our data-protection contact is the same email above; an EU representative may be appointed before broader EU availability.