Children's Privacy
Last updated August 2026
Draft — under legal review. These terms describe how Family Rumpus works today and how we intend to be held to it; the final reviewed version will replace this page before Family Rumpus is offered beyond friends and family.
This notice tells you, the parent or guardian, what Family Rumpus collects from a child you add to your family account, how it's used, and the choices you have.
A child can't sign up alone
Every child profile is created by a parent inside an existing family account, and the parent controls what that profile can do.
What you provide about your child: a first name (a nickname is fine), their role, and optionally birthday, pronouns, photo, interests and a short bio. Email or phone only if you add them.
What your child creates: messages to the assistant, images, songs and stories they make, lists and tasks, and facts the assistant remembers to be helpful ("allergic to peanuts").
Collected automatically: technical logs for security and reliability, and usage records for plan limits. No advertising identifiers, no precise location, no tracking across other sites or apps.
How it's used
Only to provide the Service to your family. We do not use children's information for advertising or marketing, do not sell or rent it, do not build advertising profiles, and do not use it to train AI models.
Who else sees it
The vendors listed in our Privacy Policy that make features work — the AI provider that generates a reply, the image service that draws the picture your child asked for. They receive only what that feature needs and may not use it for their own purposes.
If your child asks the assistant something it needs to look up, the words of that search query go to our AI provider's search service. The rest of the conversation does not.
Within your family, private chats are visible to the child and — when you turn on parent check-ins — to family admins. Your child sees an indicator when check-ins are on. That's deliberate: transparency, not surveillance.
Your rights as a parent
At any time, from Settings, you can review everything your child has said and made, correct or delete individual items including remembered facts, export all of your family's data, delete your child's profile (which destroys their encryption key so their content can't be recovered), or delete the entire family account. You can also refuse further collection by turning off features or deleting the profile.
How we obtain your consent
Child profiles can only be created inside a family account with a completed, paid subscription. Before you pay, we show you a summary of this notice and ask you to confirm you're the parent or legal guardian. Because the payment is then made by an adult through a card system that notifies the account holder, that transaction — together with your confirmation — is how we verify that a parent has consented.
We keep a record of that confirmation: who gave it, when, which version of this notice they saw, and the payment that verified it.
You may withdraw consent at any time by deleting the child's profile or the family account. The consent record itself (who confirmed, when, which version of this notice) is kept after deletion — it contains nothing your family said or made, and the law requires us to be able to show consent was obtained.
Security
Your child's content is encrypted with a key unique to them, managed in Google Cloud KMS and stored separately from the data. Deleting the profile destroys that key.
Contact
Kerfuffle Labs LLC, a Massachusetts limited liability company [MAILING ADDRESS — not set] [email protected] · [PHONE — not set]
You can also contact the Federal Trade Commission about children's privacy at ftc.gov/privacy.
Questions? [email protected]