Privacy Policy
Effective Date: November 2026 · Designed for households in Canada, the United Kingdom, Australia, New Zealand, the European Union, the United States, and globally.
1. Client-Side Encryption (Family Peace Binder)
Sensitive household notes entered into the Family Peace Binder are encrypted directly inside the user’s browser using the Web Crypto API (AES-256-GCM) with a family passphrase before syncing encrypted ciphertext. Our servers cannot read plaintext binder entries or passphrases.
2. Voice Legacy Audio & Scam Shield Redaction
- Voice Recordings: Stored privately in Cloudflare R2 object storage solely for playback within the family’s authenticated session and QR album links.
- Family Scam Shield: Never connects to bank accounts or asks for banking passwords. Before evaluating any pasted SMS or email snippet, automated filters strip credit card numbers, account patterns, phone numbers, and email addresses.
3. Data Collected & Cookies
- Account & Billing Records: Buyer email, name, country code, language block preference, and subscription reference returned by our Merchant of Record.
- Session Cookie: An HMAC-signed
HttpOnly; Secure; SameSite=Laxsession cookie (180 days) keeps families signed in without password friction. - Checkout Attribution: When visitors click a purchase CTA, technical browser parameters (
_fbp,_fbc, UTM tags, IP, and User-Agent) are associated with a checkout session ID so purchases are measured accurately without duplicate pixel firing.
4. Emails & Data Deletion Requests
Transactional access emails and Day 24 renewal reminders are delivered via Resend. Families may request full export or deletion of stored family data anytime at support@senior-global-pending.example.