What we keep about you

We keep only what we need to run your schedule.

Your first name. So you have your own column on the schedule.
Your birthday. So a grown-up knows if you need their OK. We use it for nothing else.
Your sign-in name and PIN, or your email, if a grown-up picks that. So you can sign in. The PIN and password are scrambled. We cannot read them.
Your schedule, stars and goals. So you can see your day and mark what you did.
The to-dos and homework you add. So nothing due is forgotten.
The requests you send, like "Can I go to Kai's house?", and the answers. So a grown-up can say yes or no.
The network address and browser name of a device you sign in on. To keep you signed in and keep your account safe.
A calendar a grown-up adds by its private address: the events from yesterday to 60 days ahead. We only read it. A work calendar shows you only the word "Work" and the times.
Later, when it is turned on: the questions you ask Ask, and the answers. A parent can read every question and answer.
Later, when it is turned on: photos of homework, and the words of voice notes. The sound is not kept.

What a grown-up can do

The person who runs your family's account can do these at any time:

See what kinds of things we keep about you.
Read what we keep about you, and download it.
Turn off your own sign-in. We stop keeping new things about you. Your place on the schedule stays.
Delete your information. It is deleted at once.
Or the person who runs your family's account can write to us, and we will do it for you.

We do not ask you for more than we need to use FullSched.
Nothing you add is public. You cannot make anything public, and you cannot talk to anyone outside the account.
We do not show ads. We do not sell or share your information for marketing.
We do not use your information to train AI.

Amazon Web Services. FullSched runs on a server we rent from them, so everything is stored there.
Anthropic, our AI company. When someone uses Ask, what they type and the schedule it needs to answer go to Anthropic to be worked on. Later, when photos and voice notes are turned on, a homework photo or the words of a voice note go the same way. Anthropic does not train AI on it, and deletes it within 30 days, except anything it must keep longer to enforce its safety rules or the law.
Resend, our email service. When a grown-up invites someone by email, that person's email address, first name and the name of the family account go to Resend so the invite can be sent.
Google, only if a grown-up picks "Sign in with Google". Google tells us the email address and that it is really you. We send Google nothing about your schedule.
The authorities, when the law requires it. For example, a picture that appears to show child sexual abuse goes to the National Center for Missing & Exploited Children, as the law requires.

Nothing about you is kept forever.

Your information: until the person who runs your family's account deletes you or the account. Then, at once.
Your schedule, stars, goals, to-dos and requests: with you, or with the account.
Your talks with Ask: after 12 months, and sooner if you are deleted or the account is.
A calendar's events: a day after each event ends, and at once when the calendar is removed or you are deleted.
Devices you sign in on: when you sign out, or after 2 hours without use. "Stay signed in" lasts until you sign out.
A sign-in code made by QR: a day after it is used, or a day after it runs out.
A short record that a parent agreed for a child under 13: three years after it is made, and only after the child's data or the account is deleted. It has no child's name.
Help messages: not kept in FullSched; they reach us by email.
Backups: each nightly backup is deleted after 7 days.