Effective October 24, 2026
Homeroom for Family, LLC, doing business as Homeroom HQ, based in Charlotte, North Carolina (“homeroom,” “we,” “us” or “our”), provides homeroom for family and homeroom for students. This policy describes information handled through our websites, applications and related services.
The family edition lets an adult manage a “Household,” including information about other people. The student edition lets an adult student manage their own “Student Space,” alone or with adult peers who have their own sign-ins. A student member's information is not treated as a dependent's information merely because another member administers the space.
Both editions require adults aged 18 or older to create accounts. The student edition is directed to adult college students, not children or teens. Family children may use the limited adult-managed task-completion function described below without independently registering.
Questions and requests may be sent to privacy@homeroomforfamily.com. Contractual account and billing terms appear in the Terms of Service and Subscription & Billing Terms.
For independently signing-in users, we handle the email address used for passwordless authentication and account information such as a name or nickname, assigned color, account membership and sign-in/session records. Family information also includes the Household's name and timezone.
Family Account Holders enter member first names or nicknames, assigned colors and cook, kid or pet flags. Students enter their own information; invited adult peers have their own sign-ins and their own entries.
The information you choose to enter can include:
• Scheduling: Event titles, dates, start and end times, locations or rooms, participants and free-text notes.
• Tasks and study organization: Tasks, chores, deadlines, Remember items, completion history, study records, term information and related settings.
• Household organization: Meal plans, assigned cooks, grocery lists, celebrations or Wins, home-service providers, visit dates and household notes.
• Preferences and sharing: Private-item choices, reminder and personalization settings, invitations, calendar subscriptions and share-link settings.
The available fields depend on the edition and features you use. A field is not a request to supply unnecessary sensitive information.
Student setup includes a school-type selection and an optional, skippable school-name field. The school name is stored with the account as information about whom the product is reaching.
We do not use the school name for marketing segmentation, audience building or campaign targeting. The application does not export it or send it to our marketing-email provider. It is not shown through Share my week or disclosed to other parties for their independent purposes; it remains in our hosted account database. Database hosting by our service provider is described separately below.
Stripe collects and processes payment details. Homeroom does not receive or store full payment-card details. Subscription administration involves the selected plan, billing status and related transaction information; payment records are addressed under “Deletion and payment records.”
If you contact us, we receive the information you choose to include, such as your email address, request and relevant account details. Please do not email payment-card numbers, passwords or unnecessary sensitive information.
Student age eligibility is checked on the device before the signup form, email collection, account creation or sign-in session. If a birthday is entered for this check, the device converts it to a yes-or-no eligibility result and discards the birthday. The birthday is never transmitted to homeroom and is never stored; we receive only confirmation that the applicable eligibility requirement was met. We do not maintain a birthdate or numeric-age field.
A rejected applicant in this normal flow has not supplied us an email address and has no new account, sign-in session or applicant profile. To deter immediate retries with a different birthday, the device stores a marker containing only a timestamp. It contains no birthday, age or email. On iPhone, that marker persists despite clearing website data.
If an exceptional route reaches the age check after an account was created, the application deletes that account and its email before displaying a successful removal statement. If deletion fails, the failure is recorded and the application does not falsely say the data was removed.
An eligibility result is not a stored birthday or proof of government-verified identity. The 18+ student eligibility rule is separate from an App Store content rating.
We use authentication/session tokens and functional device storage to provide access and remember relevant account or device choices. Family functional storage includes the device-to-member assignment and Supabase authentication session. These are service functions, not advertising identifiers.
Our hosting and authentication providers generate standard operational logs in providing their services. These records are distinct from a user profile and from the limited share-link metric described next. We do not describe all network activity as anonymous or promise that every infrastructure provider holds no technical records.
Each Share my week link records how many times it has been opened and when it was last opened. Its creator sees the count, such as “opened 3 times.” The last-opened timestamp is stored but is not displayed in the application.
The share-count feature records no viewer identity, IP address, device information or location. It cannot distinguish different people or recognize the same person returning. Only the link creator can see their link's opening count; one member cannot inspect another member's link metrics.
Both editions offer address suggestions when a user enters an event address. Google receives the address-search text through the Google Places API. Homeroom does not attach your name, account identity, device identifier or IP address to the lookup.
Nothing is sent until at least three characters have been entered and typing has paused for six tenths of a second. Repeated text can be answered from memory without another request. An address already available in the Household's own history can be suggested without a Google lookup. If Google suggestions are unavailable because of configuration, the application does not automatically send the text to another provider.
Typed address queries are not written to homeroom's server logs. An address you save as event content is different from a transient search query and becomes part of the event information described in this policy. The text of an address may itself identify a place or person; not attaching account identifiers does not make every address anonymous.
Google's handling of information it receives is governed by its Privacy Policy, incorporated for this functionality. Our own information practices remain governed by this policy.
Homeroom does not use ads, advertising identifiers, ad SDKs, third-party analytics tools or behavioral advertising/tracking. We do not sell or rent personal information or disclose it for other parties' marketing.
We do not collect photos, video, audio, biometrics or automatic precise device geolocation. We have no dedicated fields for health conditions, allergies or medications, and do not ask you to supply them. We do not retain birthdays or numeric ages.
This does not mean no information is processed: functional sessions, standard provider logs, local age-screen markers and aggregate link-open counts are described above. Nor does the absence of a dedicated field prevent a person from voluntarily typing a phone number, health detail or other sensitive information into a note. Please avoid doing so unless genuinely necessary and lawful.
Event address entry means the Service does handle user-supplied addresses. We do not make a blanket claim that no addresses can be collected.
We use the information described above to provide the edition and features you select; authenticate access; coordinate schedules and shared entries; apply eligibility and access controls; display information to recipients you authorize; manage subscriptions; respond to requests; and operate and protect the Service.
Optional school names are stored as described above, not used to create marketing audiences. Share-opening counts provide feedback about a link's use without identifying viewers.
Kit is used for marketing email separately from product data. Household content, student school names and student signup/payment information are not routed to Kit as a student marketing audience. You may ask us to stop marketing email at support@homeroomforfamily.com; essential account, billing and legal communications are separate.
We may process information as necessary to comply with binding legal obligations and to establish, exercise or defend legal claims. This is not an unrestricted authorization to use content for unrelated purposes.
Shared account content is available through the edition's member permissions. In a family Household, the adult administers profiles and household participation. In a Student Space, adult members are peers with their own sign-ins and access to shared information; inviting a parent does not create a dependent relationship.
Private-item settings are different from shared entries. Do not put information in a shared area if you do not have authority for the other members to see it.
Share my week is a read-only web page for the creator's week. It can show that person's name, color and initials, events with their titles, times and locations or rooms, and Remember items with completion state. It excludes items marked private, notes, school information, email, other weeks and other members' personal items.
A link confers no membership, sign-in or editing rights. Its creator alone may see, alter and revoke it, and its ownership cannot be transferred. Links are excluded from search-engine indexing, but a person possessing a working link can open or forward it; indexing exclusion is not recipient verification.
Revoked or expired links stop working immediately. Expiry availability depends on the plan. Revocation cannot remove information that a recipient already copied or retained outside homeroom.
An invitation admits a person as a member with member privileges, rather than as a read-only viewer. Configured expiry and approval requirements apply to all join routes, including iPhone and pasted links; student joining also requires the eligibility check. Resetting the invitation invalidates old invitations, while removing an existing member ends that person's established access.
A calendar-subscription address gives read-only access to a calendar feed and cannot be used to join the account. Invitation and calendar credentials have separate purposes. Treat both kinds of link as private.
Providers receive information needed for their functions, not necessarily every category in this policy. A provider may have independent legal obligations, particularly for payment processing. We do not promise that every provider acts solely as a processor or retains no information independently.
| Provider | Function |
|---|---|
| Supabase | Postgres database and authentication; US-East hosting for the reported database deployment |
| Vercel | Application hosting |
| Stripe | Payments and subscription processing |
| Resend | Transactional email, including authentication communications |
| Kit | Marketing email, maintained separately from product data |
| Cloudflare | DNS |
| Google Places API | Event-address suggestions from typed search text as described above |
We may disclose information where reasonably necessary to comply with binding legal process, investigate unlawful misuse, protect the rights or safety of affected people, or establish or defend legal claims, subject to applicable law. An administrative request from a member is not automatically valid legal authority.
Information may be transferred in a merger, reorganization or sale of the relevant business, subject to applicable law and required notice. Such a transaction does not itself authorize materially different uses contrary to this policy or required consent.
Family accounts are created by adults; children do not independently register or provide an email or password through the family child-access function. Adults may enter a child's name or nickname, color, profile flags, assigned tasks, events and other household content. A child's tap to mark a task complete generates task-completion activity associated with the Household.
Limited child access uses a session token. “Anonymous” authentication means no child email or password is required; it does not mean the resulting activity cannot be associated with the child's household profile.
The adult responsible for a child must have authority to provide that child's information and authorize participation. The adult may correct the child's entries through available account controls and remove the child's profile and personal content. A parent or legal guardian may contact privacy@homeroomforfamily.com about access, correction or deletion, including where they are not the administrator.
We do not show advertising or use behavioral tracking for children. This family function is distinct from the adult-only student edition. An adult signup requirement does not make the family child's completion activity disappear from the data description.
In-app deletion is available on every supported platform, including iPhone. It removes the account and its contents, including people, events, tasks, meals, grocery lists, celebrations, service records, household notes and attached sign-ins. It applies to both editions.
In a shared account, whole-account deletion affects everyone attached to that account. It is not the same as removing just yourself or one person's information. Consider that effect before using whole-account deletion.
Removing a person ends their access immediately and deletes their sign-in and personal events, tasks, celebrations, study records and notes. Shared shopping lists, meal plans and other household-level entries remain with the removed person's name cleared. Events involving several people remain with the removed person detached.
Deleting the account cancels its subscription and deletes Stripe's customer record, including the associated email and stored payment method. Stripe independently retains invoice and transaction records for legal, tax, accounting and fraud-prevention purposes under its own retention requirements; homeroom's customer-deletion operation does not erase those records. (Stripe Privacy Policy)
Account content remains available while the account continues, including where a family account becomes read-only after the app trial. Canceling billing does not itself delete that content; use account deletion or contact privacy support for a deletion request.
We do not promise that deleting an account removes copies already made by other members, share recipients or independent calendar services. Nor does deletion override a binding legal requirement that prevents particular information from being erased. If such a requirement affects a request, we will explain the applicable limitation to the extent law permits rather than describe the deletion as unconditional.
For email-based family deletion requests, the previously stated 7-business-day handling commitment remains applicable following verification. For other rights requests, we respond within applicable legal time limits. This policy does not invent a fixed retention period for every infrastructure log or independently retained payment record.
You may review and correct information through the account functions available to you, revoke your share links, use account/member deletion, or contact privacy@homeroomforfamily.com. You may also request access to or a copy of your own information without relying on a self-service “download everything” feature.
We may need to verify identity and authority before acting. Requests concerning another person require appropriate authority, and we will protect other members' information rather than disclose an entire shared account solely because one person asks.
Family household administration does not eliminate a member's independent rights. A Student Space member need not be treated as a dependent or ask a parent to exercise adult privacy rights. If you cannot act directly through the app, contact us; an administrator's role does not automatically defeat a legally valid request.
Rights to access, correction, deletion, portability and appeal depend on applicable law and its scope. You may request review of our decision through the same privacy email. We will not unlawfully discriminate against you for exercising a privacy right.
The reported database hosting is Supabase US-East, with family Household separation enforced by Postgres Row Level Security. Share-link ownership and invitation controls operate as described above. We do not claim a security certification, a particular encryption standard or absolute protection that has not been established.
No system is completely secure. Use appropriate device and email security and share access links carefully. A US database location does not, by itself, establish that every provider processes all information exclusively within the United States.
We will update this policy when information practices change. For a material change, we will provide appropriate notice before it takes effect and obtain any consent required by law. A policy revision does not retroactively authorize an incompatible use of information.
3540 Toringdon Way, Suite 200, Charlotte, North Carolina 28277
• Privacy requests and parents' inquiries: privacy@homeroomforfamily.com.
• Account and billing assistance: support@homeroomforfamily.com.
• Legal matters: legal@homeroomforfamily.com.