Privacy Policy
Grandma Famous stores information about your family, so we try to be plain about what we keep and who can reach it. The app is operated by Mitch Frei.
The short version:your family’s information is visible only to you. We do not sell it, we do not advertise, we do not show it to other users, and we do not use it to train AI models.
What we collect
- Your email address, used to sign you in and to contact you about your account.
- What you type in: household and person names, birthdays and anniversaries, clothing and shoe sizes, interests, allergies and dietary notes, gift ideas and purchases, calendar events, recipes, and memory captions.
- Photos you upload for profiles, gifts, and memories. They are resized on your phone before upload, stored privately, and shown only to your account while you are signed in.
- Updates relatives send you through a family update link, until you review them.
- Push notification subscriptions, if you turn reminders on — an anonymous address issued by your browser, plus which reminders you chose.
- A record of AI generations you have used, and the ideas each one returned — to apply plan limits, and so reopening a page of ideas shows them again instead of using up another.
Some of this — allergies and dietary needs — is health-related, and some is about children. We treat it as sensitive and keep it locked to your account.
What we do not collect
- Card numbers. Payments go directly to Stripe. We never see or store your card details — only whether your subscription is active.
- No advertising or cross-site tracking cookies.
- No location data, no contacts, and no camera access beyond the photo you deliberately choose.
How we use it
- To show you your family information and run the app’s features.
- To send birthday and anniversary reminders you asked for.
- To generate gift and dinner ideas when you tap the button.
- To take payment and apply your plan’s limits.
- To fix problems and keep the service secure.
Information about children
Grandma Famousis used by adults. Children do not have accounts and we do not knowingly collect anything directly from a child. Information about grandchildren is entered by the adults who use the app — you, or a parent responding to an update link. If you believe a child’s information is in the app without an appropriate adult’s knowledge, email us and we will remove it.
What we send to the AI
When you ask for gift or dinner ideas, we send only what the request needs to a third-party AI provider (Anthropic): the child’s first name, age, interests, sizes, the gifts they have already been given, any dietary or allergy notes relevant to a meal, your budget, and any extra considerations you type. We do not send photos, contact details, your email address, or information about anyone unrelated to the request.
The AI provider may run a web search to find current products or recipes; search queries are derived from that same information. Under our agreement with the provider, your inputs are not used to train their models.
Who else processes your data
We use a small number of established providers to run the service. They process data on our instructions only:
- Supabase — database, photo storage, and sign-in.
- Vercel — hosting, server logs, and the cookieless page counts described below.
- Stripe — subscription payments.
- Anthropic — the AI that writes the suggestions.
- Resend — sending sign-in code emails.
- Apple, Google, or Mozilla — delivering push notifications to your device, depending on your browser.
We do not sell or rent your information, and we do not share it for advertising. We will disclose data if the law requires it.
Family update links
An update link contains a long, hard-to-guess token and does not require a sign-in. Anyone holding that link can see the household’s name and the first names of the people in it, and send updates for you to review — nothing is changed until you accept them. The link never shows sizes, interests, birthdays, allergies, or photos. Send these links privately. If a link is shared too widely, ask us to reset it.
How your data is protected
Every row in the database is tied to your account and protected by database-level security rules, so one account cannot read another’s data even if the app had a bug. Traffic is encrypted in transit, and data is encrypted at rest by our providers. No system is perfectly secure, but we do not keep anything we do not need.
Cookies and counting visits
We set one kind of cookie: the session cookie that keeps you signed in. There are no advertising cookies and no cross-site tracking, so there is nothing to opt out of.
We do count page views, so we can see which parts of the app people actually reach. This is done without cookies and without any identifier that follows you: what is recorded is the page visited, the site you arrived from, your country, and the general type of device — never your name, your email, or anything you have typed into the app. It cannot be traced back to you, and it is not shared with anyone.
How long we keep it
We keep your data for as long as your account exists. If you delete something in the app it is removed from the live database, and from backups within 30 days. If you close your account we delete your data within 30 days, except records we must keep for tax and accounting — payment records are retained by Stripe for up to 7 years.
Your rights
You can view and edit everything in the app directly. You may also ask us to send you a copy of your data, correct it, or delete your account entirely. Email support@grandmafamous.com and we will respond within 30 days. Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA. We honour those requests for everyone, wherever you are, and we will not treat you differently for making one.
Changes
If we change this policy in a way that materially affects you, we will email you or show a notice in the app before it takes effect.
Contact
Questions, or a request about your data: support@grandmafamous.com.