Children's Privacy

Effective September 30, 2026 · Last updated September 30, 2026

To the parent or legal guardian: before your child can use Family Rumpus, we need your consent. This notice explains what we collect from your child, how we use it, who helps us, and the choices you have — including saying no.

You do not have to consent. If you do not consent, we will not create the child profile or collect personal information from your child, although you may continue to use any adult-only features available to your account. Your consent covers the collection, use and disclosure described in this notice.

Who we are: Kerfuffle Labs LLC, 2 Bridgeview Cir, Ste 8 #267, Tyngsborough, MA 01879 · [email protected] · (351) 345-9190

1. What we collect, and why

A child can never sign up for Family Rumpus. You create your child's profile inside your family account, and you decide what it can do.

What you tell us about your child: a first name or nickname, and — only if you choose — an age or age range, pronouns, a photo, interests, and a short bio. We use these so the assistant can talk to your child appropriately (a 7-year-old and a 12-year-old get different answers). We recommend an age or age range rather than a full birth date; your child can use the Service without one. An email address or phone number only if you add one.

What your child creates: messages to the assistant; pictures, songs, stories and projects they make; lists, tasks and calendar entries; and facts the assistant remembers to be helpful (like "allergic to peanuts"). If your child talks instead of typing, their speech is turned into text on the device or by the device's speech service, and only the text reaches us. We never receive or keep recordings of your child's voice.

Collected automatically: technical logs for security and reliability, usage records for plan limits, and cookie-free page-view counts (which page loaded, browser type, country; not linked to your child). No advertising identifiers, no location tracking, no tracking across other sites or apps.

We don't ask for more than a feature needs, and your child can use the Service without giving any of the optional details above.

2. How we use it

Only to provide Family Rumpus to your family — answering your child, keeping their lists and calendar, making what they ask for, remembering preferences (once a week the assistant tidies what it remembers about your child, which you can review and undo), and keeping the Service secure. We never use your child's information for advertising or marketing, never sell or rent it, and never build profiles of your child for anyone. We do not use your child's information to train our models, and our contracts with the AI providers that process it for us do not let them use it to train or improve their general models.

3. Who else receives it

We use contracted service providers to operate specific features. Depending on the feature you enable, they may receive the child's prompt or conversation needed to answer, an image to create or edit, text to speak or sing, a page address and page content, or contact information needed to send a message. They may process that information only to provide, secure and support the feature for us, subject to contractual restrictions described in the Privacy Policy. These providers are: AI services that write the assistant's replies, make pictures, and speak or sing; a web-browsing service; hosting, storage and key-management services; and email and texting services. The Privacy Policy names each one.
A search query or page interaction may include words from the child's request, including a name, school or place if the request includes it. We minimize the information sent and do not send the rest of the conversation unless needed to answer.
Features that start off. For your child, web browsing, scheduled watches, sharing outside the family, photo upload and editing, precise location, and new email or text connections start switched off. Before you turn one on, we explain what data leaves the family account, who receives it, and how to turn it off again.
Inside your family. Private chats are ordinarily visible only to the child unless you turn on parent check-ins. Even when check-ins are off, after we verify you are the parent or legal guardian, you may request and receive all personal information collected from your child, including private chats. We may reauthenticate you and notify the child before providing access. Things your child shares with the family are visible to the family.
We don't disclose your child's information to anyone else, except where the law requires it or to protect someone's safety.

4. How we keep it safe

Your child's content is encrypted with a key that belongs to your child alone. That key is itself locked by a master key held in Google Cloud's key management service, outside our database. Files such as photos, pictures, songs and audio are encrypted in private storage and are available only through short-lived access links. We limit and log administrative access where technically available and delete files with the related item, child profile or family account.

5. How long we keep it

Until you delete it, or delete your child's profile or the family account. Some supporting records have shorter fixed periods: technical logs and detailed assistant traces are kept up to 30 days, forwarded email bodies and attachments and watch-check history up to 90 days, and backups up to 30 days. Remembered facts marked as short-term fade about 30 days after they last come up. The Privacy Policy gives the complete schedule. We keep each type of child information only as long as reasonably necessary for its stated purpose, then delete it securely.

When you delete something, we promptly remove it from active systems and instruct our service providers to delete it. Backup copies, kept only to recover from an outage, expire within 30 days, and if we ever restore one, we reapply prior deletion requests. We keep a record of your consent — who gave it, when, which version of this notice, and the transaction that verified it — so we can show consent was given; it contains none of your child's content.

6. Your rights

At any time, in Settings, you can:

review what your child has made and what the assistant remembers about them. Private chats are ordinarily visible only to the child unless you turn on parent check-ins, but after we verify you are the parent or legal guardian, you may request and receive all personal information collected from your child, including private chats, whether or not check-ins are on;
correct or delete any item, including remembered facts;
export all of your family's information;
stop further collection by switching features off for your child;
delete your child's profile, or the whole family account;
withdraw consent and stop further collection by deleting the child profile in Settings or contacting us. We then disable the profile and delete the child's information as described above, except for the limited consent and transaction record we keep to demonstrate compliance.

You can also ask us by email at [email protected]. We'll verify you are the parent on the account before acting.

7. How we get your consent

You first review this notice and affirm that you are the child's parent or legal guardian and consent to the practices described here. You then complete a payment-card transaction that provides notice to the cardholder. We link your consent to that transaction. If the transaction or account information does not reasonably verify your relationship (for example, the card is in someone else's name, or no card was charged), we will ask you to verify another way: by returning a signed consent form (familyrumpus.com/legal/consent-form) by email or mail, or on a short video call with us. No child profile is created until verification is complete.

If we ever want to use your child's information in a new way, we'll ask for your consent again first.

8. Questions or complaints

Questions? [email protected]