Draft — this policy is awaiting legal review and may change before Fambright's public launch.

Privacy

Fambright is built for families with young children, so we treat privacy as a design constraint, not a settings page. This page says what we actually do, in plain language.

Children never have accounts

There is no child sign-up anywhere in Fambright. A parent creates each child's profile and controls everything in it. For a child we store only: the name you choose to call them (a first name or nickname is fine), their birth year — never a full birthdate — their grade level, the learning preferences and supports you configure, and their schoolwork records. We never ask for a child's email, phone number, address, or photo. Children sign in with a family device code and a 4-digit PIN; the PIN is stored only as a cryptographic hash.

What we collect from parents

Your account comes from your email address and name via our sign-in provider (Clerk). We also store your family name, your timezone, and the curriculum and planning content you create.

How the AI works with your data

Curio, our AI helper, drafts learning plans and answers your child's questions using Anthropic's Claude API. What you type in setup and what your child says to Curio is sent to that API to generate a response. We do not permit your family's data to be used to train public AI models. Every AI draft waits for a parent's approval before a child can see it, every message a child exchanges with Curio is visible to you, and messages are safety-screened before Curio replies.

No ads, no trackers, no selling data

Fambright has no advertising, no third-party analytics or ad trackers, no public profiles, and no leaderboards. We do not sell or rent your data to anyone, and there is no child-to-child messaging of any kind.

Who processes data for us

We run on a small set of infrastructure providers, each processing data only to run the service: Vercel (hosting), Neon (database), Clerk (parent sign-in), Upstash (abuse rate-limiting), and Anthropic (AI generation). Data is encrypted in transit and at rest.

Sharing you control

If you turn on the calendar feed, anyone with that link can see activity titles and your children's first names — nothing else. You can regenerate or disable the link at any time, which cuts off every old copy.

Your data leaves with you

You can ask us to export your family's data or delete it entirely; deletion removes your family's records, including your children's, from our database. Until in-app export and deletion buttons ship, email support@fambright.org from your account email and we'll handle it promptly.

Questions about any of this? Write to support@fambright.org. Last updated August 2026.