INFORMATION WE COLLECT

We collect information provided directly when you create an account and use the app:

• Parent account information: Email address and password (encrypted via Supabase Auth) used to create your account
• Child profile data: Names, ages, and profile settings entered by the parent when creating child profiles. Parents control all child profile creation and configuration.
• App data entered by parents: Goals, behavioral notes, chore assignments, schedules, school grade inputs, Parent Hub settings, and other parent-managed configuration data
• App data entered directly by children: Certain sections of YourLifeCC.com allow children to interact directly with the app under parental supervision. This includes journal entries, quiz responses, chore completion check-offs, goal progress updates, and similar self-directed inputs. This data is stored in the parent's account and is accessible only to the parent account holder.
• Usage data: How you interact with the app (sections visited, features used) to improve the service. This is non-identifiable aggregate data.
• Error and diagnostic data: Technical error reports via Sentry to help us identify and fix app issues. These reports contain technical diagnostic data (error type, browser, device, page URL) only — not your personal app content such as journal entries, grades, or child profile data.

We do not collect social security numbers, payment card numbers (Stripe handles payments separately and we never see your full card number), precise GPS location data, biometric data, photos or images, or any data from children who have not been added to a parent-created account.

HOW WE USE YOUR INFORMATION

• To provide, maintain, and improve the YourLifeCC.com service
• To sync your data securely across devices via our cloud database
• To send account-related transactional emails (activation links, password resets, billing notices, security alerts) and — with your consent — marketing and promotional communications. You may unsubscribe from marketing communications at any time; see Section 7B of our Terms of Service for full details on communication types and opt-out rights.
• To respond to support requests
• To detect and prevent fraud, abuse, or unauthorized access
• To comply with applicable legal obligations

DATA STORAGE & SECURITY

Your data is stored and processed primarily in the United States. By using the Service from outside the United States, you consent to the transfer and processing of your data in the United States, where data protection laws may differ from those in your country of residence. Your data is stored securely using Supabase, a SOC 2 Type II compliant database platform hosted on AWS. All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). We use row-level security (RLS) policies so that authenticated users can only access their own data — no user can read another family's records, even with a valid session token.

Despite our security measures, no internet-based system is 100% secure. In the event of a data breach that affects your personal information, we will notify you by email within 72 hours of discovery, as required by applicable law. We encourage you to use a strong, unique password for your account and to contact us immediately if you suspect unauthorized access.

PARENTAL RIGHTS (COPPA)

Parents and guardians have the following rights with respect to their children's data:

• Review all personal information collected about their child at any time by logging into the app
• Request correction of inaccurate information
• Request deletion of their child's personal information without deleting the parent account
• Refuse further collection or use of their child's information by removing the child profile
• Export all data stored in their account in JSON format

To exercise these rights, contact us at info@kingdom-creatives.com. We will respond within 30 days. For urgent child safety or data matters, we will respond within 48 hours.

AGE REQUIREMENTS & CONSENT FRAMEWORK UPDATED

If you are a parent who did not set up a child's profile but believe your child is using YourLifeCC.com, contact us at info@kingdom-creatives.com immediately. We will help you locate and, if desired, delete the associated data.

DATA RETENTION

We retain your data for as long as your account remains active. When you delete your account, your profile data and all associated app data — including all child profile data — are immediately flagged for deletion and removed from active databases within 24 hours. Encrypted backup snapshots may retain data for up to 30 days before being permanently purged. We do not retain data beyond 30 days following account deletion.

Marketing suppression records (unsubscribe and SMS opt-out records) are retained indefinitely even after account deletion, as required by law, to ensure you are not re-added to marketing communications in the future.

DATA DELETION REQUESTS

You have the right to request complete deletion of all personal data associated with your account at any time, regardless of your subscription status. To submit a deletion request:

• Email info@kingdom-creatives.com with the subject line "Data Deletion Request"
• Include the email address associated with your account
• We will confirm deletion within 30 days

California residents may also exercise rights under the California Consumer Privacy Act (CCPA), including the right to know, the right to delete, and the right to opt out of sale (we do not sell data). Contact us at the email above to exercise CCPA rights.

THIRD-PARTY SERVICES

We use the following third-party services, each of which has its own privacy policy governing their handling of data:

• Supabase — database, authentication, and cloud storage. Your app data including child profile data is stored here. (privacy policy)
• Stripe — payment processing for parent subscription billing only. No child data is transmitted to Stripe. We never see, store, or have access to your full payment card number. (privacy policy)
• Brevo (formerly Sendinblue) — transactional, onboarding, and (where consented to) marketing email delivery to parent accounts. Your parent email address is stored in Brevo to facilitate account communications. If you have opted in to SMS, your mobile number may also be transmitted to Brevo's SMS platform. Child data is not transmitted to Brevo. (privacy policy)
• Vercel — web hosting and content delivery. Standard server logs (IP addresses, request timestamps) are retained per Vercel's data retention policy. (privacy policy)
• Sentry — error monitoring and crash reporting. Error reports contain technical diagnostic data only (error type, browser, device, page URL) — not your personal app content. (privacy policy)
• Google Fonts — typography delivery. Google may log your IP address when fonts are loaded. This applies to all visitors.

We do not authorize any of these third parties to use your data for their own marketing purposes. We do not use advertising networks, behavioral tracking pixels, or data brokers.

COMMUNICATIONS DATA — EMAIL & SMS NEW

This section explains specifically how we collect, store, and use your contact information in connection with communications we send you. It should be read alongside Section 7B of our Terms of Service, which governs the types of messages we send and your opt-in and opt-out rights.

Email address: We collect your email address when you create your account. It is used to:

• Authenticate your account (sign-in links, password resets)
• Deliver transactional communications required to operate the Service (receipts, security notices, legal notifications)
• Send onboarding and feature communications to help you get value from the app
• Send marketing and promotional messages where you have consented (consent is established at account creation; you may withdraw it at any time via the unsubscribe link in any marketing email)
• Administer the Sponsor a Family program and contest notifications where applicable

Your email address is stored in Supabase (our primary database) and in Brevo (our email delivery platform). It is not shared with any other third party for marketing purposes.

Mobile phone number (SMS): We collect your mobile phone number only if you affirmatively opt in to SMS communications from us. Phone number collection is never required to create an account or use any feature of the Service. If provided, your phone number is used solely to send the category of SMS messages you consented to (transactional, marketing, or both, depending on your opt-in). Your phone number is:

• Stored securely in our Supabase database, associated with your account
• Transmitted to Brevo's SMS platform only when an SMS message is sent to you
• Never sold, rented, or shared with third parties for their marketing purposes
• Retained for as long as your account is active or until you withdraw SMS consent, whichever comes first
• Deleted from active systems within 30 days of an account deletion request or SMS opt-out

Marketing suppression lists: When you unsubscribe from marketing email or opt out of SMS (by replying STOP), we add your email address or phone number to a suppression list to ensure you are not contacted again for marketing purposes. This suppression record is retained even after account deletion, as required by law, to prevent you from being re-added to marketing lists in the future.

Admin-initiated communications: YourLifeCC.com includes an internal administrative tool that allows Kingdom Creatives LLC staff to send email or SMS messages to users individually or in groups (for example, to notify all users of a new feature). All such communications are subject to the same rules described in this section and in Section 7B of the Terms of Service — transactional messages may be sent without additional consent; marketing messages require and rely on the consent established at account creation and are always sent with an unsubscribe option.

How to exercise your communication rights:

• Unsubscribe from marketing email: Click the unsubscribe link in any marketing email, or email info@kingdom-creatives.com with the subject "Unsubscribe"
• Opt out of SMS: Reply STOP to any SMS message from us
• Request deletion of your phone number: Email info@kingdom-creatives.com with the subject "Delete My Phone Number"
• Request your consent records: Email info@kingdom-creatives.com with the subject "Communications Consent Records"

We will process all opt-out and deletion requests within 10 business days for email and immediately (by return confirmation message) for SMS.

COOKIES & LOCAL STORAGE

We use minimal cookies and browser localStorage only to keep you signed in and save your app preferences locally. We do not use advertising cookies, cross-site tracking pixels, or behavioral analytics cookies. You may clear your browser's local storage at any time, which will log you out of the app. Your data will automatically re-sync from our cloud database when you sign back in.

YOUR RIGHTS

The following rights apply to all users. Additional jurisdiction-specific rights for California (CCPA) and EEA/UK (GDPR) users are listed below.

• Access: Request a copy of all data we hold about you by contacting info@kingdom-creatives.com
• Correction: Update your information directly in the app at any time
• Deletion: Request full account and data deletion as described above
• Portability: Request a data export in JSON format
• Restriction: Request that we limit processing of your data while a dispute is resolved
• Objection: Object to processing of your data for certain purposes
• Communications opt-out: Unsubscribe from marketing emails or opt out of SMS at any time as described in the Communications Data section above

California residents — CCPA rights: If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, our business purposes for collecting it, and the categories of third parties with whom we share it
• Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions required by law
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt Out of Sale or Sharing: We do not sell or share personal information for cross-context behavioral advertising. No opt-out is required, but you may confirm this by contacting us.
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information beyond what is necessary to provide the Service
• Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA right

To exercise CCPA rights, email info@kingdom-creatives.com with subject "CCPA Request." We will respond within 45 days. We may need to verify your identity before processing your request.

EEA, UK, and Swiss residents — GDPR rights: If you are located in the European Economic Area, United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) or applicable equivalent law provides you with the following rights with respect to your personal data:

• Legal basis for processing: We process your personal data on the following legal bases: (a) performance of a contract — processing necessary to provide the Service you signed up for; (b) consent — for marketing communications and SMS, which you may withdraw at any time; and (c) legitimate interests — for fraud prevention, security, and service improvement, where those interests are not overridden by your rights
• Right of access (Art. 15): Request a copy of your personal data and information about how it is processed
• Right to rectification (Art. 16): Request correction of inaccurate or incomplete personal data
• Right to erasure (Art. 17): Request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations
• Right to restriction (Art. 18): Request that we restrict processing of your data in certain circumstances
• Right to data portability (Art. 20): Receive your personal data in a structured, machine-readable format
• Right to object (Art. 21): Object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal
• Right to lodge a complaint: You have the right to lodge a complaint with your local supervisory authority (e.g., your national data protection authority)

To exercise any GDPR right, email info@kingdom-creatives.com with subject "GDPR Request — [Right Name]." We will respond within 30 days. In complex cases we may extend this by an additional 60 days with notice. We may need to verify your identity before processing your request. Some rights may be limited where they conflict with our legal obligations, the rights of third parties, or the legitimate interests described above.

CHILDREN'S DATA — ADDITIONAL PROTECTIONS

Because YourLifeCC.com is used by families and involves data about minors, we apply the following additional protections beyond standard COPPA compliance:

• Child profile data (names, ages, behavioral notes, academic records, journal entries, quiz responses) is accessible only to the parent account that created it — not to other users, not to Kingdom Creatives staff in normal operations
• We do not use child data for any purpose other than delivering the Service to the parent account holder
• We do not build behavioral profiles, advertising segments, or analytics models on minor users
• We do not display advertising to any user, including minors
• Child-entered data (journal entries, quiz responses, chore check-offs) is treated with the same confidentiality protections as parent-entered data and is never accessed by Kingdom Creatives staff except in response to a direct parent request or legal obligation
• Child data is deleted in full when a parent account is deleted, or upon a specific child profile deletion request
• We do not share child data with schools, churches, sponsors, or any third party without explicit parent consent

AI-GENERATED CONTENT NOTICE

Some educational content, quizzes, lessons, and informational material within YourLifeCC.com has been created with the assistance of artificial intelligence tools drawing on publicly available sources. This content is provided for general informational reference only and has not been independently verified by licensed professionals.

We do not use your personal data, your child's data, or your family's usage data to train AI models or to generate personalized content profiles. AI tools are used only in the preparation of general educational content available to all users — not to analyze or act on your individual family's information.

For full details on content accuracy limitations and our release of liability for content, please review Section 7A of our Terms of Service.

SPONSOR A FAMILY PROGRAM — DATA HANDLING

YourLifeCC.com operates a voluntary "Sponsor a Family" program. If you apply to our family sponsorship waitlist or make a sponsor payment, the following additional data practices apply:

Waitlist applicants (families seeking sponsorship):

• We collect your name, email address, number of children, ages of children, church or community affiliation, and a description of why sponsorship would benefit your family
• We may also collect the name and email of a person who referred you or indicated they would sponsor you specifically
• This information is used solely for matching your application with an available sponsor, communicating about your waitlist status, and administering your sponsored access once matched
• We do not share your personal story, financial situation, or application details with sponsors beyond confirming that a match was made and access was activated
• Waitlist application data is retained until your application is fulfilled, withdrawn, or the program is discontinued. You may request deletion at any time by emailing info@kingdom-creatives.com

Sponsors (individuals or organizations making sponsor payments):

• We collect your name and email address to process your payment and confirm your match
• Payment processing is handled by Stripe — we do not store your full card number
• If you designated a specific family to sponsor, we retain that information to facilitate the match
• We will confirm when a family has been matched and activated — we will not share the matched family's personal information with you

The sensitive nature of waitlist applications — which may include descriptions of financial hardship or family circumstances — is treated with the highest level of confidentiality. This data is accessed only by Kingdom Creatives LLC staff directly involved in program administration and is never used for marketing, advertising, or any purpose other than matching and program operation.

CHANGES TO THIS POLICY

We may update this policy from time to time. We will notify you of material changes by email and by posting the updated policy with a new effective date. Your continued use of the Service after the effective date constitutes acceptance of the revised policy. If you do not agree to the updated policy, you may delete your account before the effective date.

CONTACT