DRAFT: not published. Every highlighted item is something only you can fill in or confirm. Before publishing: resolve every highlight, have a lawyer or a reputable policy service review this page, remove the noindex line in privacy.html, and delete this box.

How Ometto handles your family's information

Effective [date] · Last updated [date]

Ometto is a household operating system: a shared family screen for the calendar, to-dos, allowance, habits and photos. This policy explains what information we collect, how we use and share it, and the choices you have. It covers this website (myometto.com) and the Ometto app (together, the "Services").

Ometto is operated by [your name or company's legal name, and city/state/country] ("Ometto", "we", "us"). Questions about privacy go to privacy@myometto.com.

1. Information we collect

Information you give us

Your account. Your name, email address and profile photo from Google when you choose "Sign in with Google". You must be at least 13 years old to create an account.
Your household. Names or nicknames of family members, the names and email addresses of people you invite, and the content you add: events, to-dos, allowance balances and transactions, practice and habit streaks, and timer settings.
Photo album link. If you connect a shared photo album, we store the album's link and the details its feed gives us about each photo, such as its caption, date and size. We don't store the photos themselves. [Update this if you ever let people upload photos directly.]
The sign-up form. Your email address and anything else the form asks for. The form is provided by Tally, under its own privacy policy.
Support messages you send us, and our replies.
Payment details, if and when Ometto becomes a paid service. A payment processor would handle these, and we would not store full card numbers. [Update when you add billing, and name the processor.]

Information from services you connect. If you connect Google Calendar, we receive your calendar events (see Google user data). If you connect a photo album, we receive its list of photos and their details, and your screen loads the photos directly from the album's provider.

Information collected automatically. Your IP address, device and browser type, app version, error logs and timestamps, used to keep the Services secure and running. We also use the location you give us (such as coordinates or a city) to show the weather and the right time zone.

2. Google user data

If you connect your Google account, we access the following, only with your permission:

Basic profile: your name, email address and profile picture, to create and identify your account.
Google Calendar: [list the exact scopes, e.g. read-only access to your calendar events, and confirm they match your Google Cloud consent screen].

How we use it. We use your calendar events only to show your family's schedule on your Ometto screen. We don't use Google user data for advertising, and we don't sell it.

How we store it. Your Google sign-in credentials (access tokens) are stored [where, e.g. in our database provider, encrypted at rest. Confirm.]. Calendar events are [fetched when your screen refreshes and not kept afterwards / cached for up to X hours. Confirm what actually happens.]

Who can see it. Only you, the people you invite to your household, and the service providers who host the data for us (see section 5). No one at Ometto reads your calendar content unless you ask us for help, it's needed for security or to investigate abuse, the law requires it, or it's combined and anonymized for internal operations.

Limited Use. Ometto's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting. You can remove Ometto's access at any time at myaccount.google.com/permissions, or by asking us. We delete the stored Google credentials when you do.

3. How we use information

To provide, maintain and improve the Services and show your household's content on your screens.
To respond to your requests and support questions.
To email you about Ometto, such as beta news and service updates. You can opt out at any time.
To keep the Services secure and to prevent fraud and abuse.
To comply with the law.

4. Photos and family content

Photos you connect stay with the service that hosts them, such as an iCloud shared album. Ometto doesn't copy or store the photos. Your screen loads them from the album's provider over an encrypted connection, and we keep only the album link and details such as captions and dates. We show them only on your household's screens and accounts, and we don't sell them or use them for advertising.

We don't sell your personal information, and we don't share it with advertisers. We share information only in these ways:

Service providers that help us run Ometto, under terms that limit their use of your data to providing their service to us: Vercel (hosting), [Supabase / other database provider] (accounts and household data), Tally (the sign-up form), our weather provider, Open-Meteo, which receives approximate coordinates to return a forecast, and [a payment processor, if and when you charge].
Google and Apple, only if you choose to connect Google Calendar or an iCloud shared album. Your screen loads shared-album photos directly from Apple's servers, so Apple can see those requests.
People you invite to your household, who can see the household content you choose to share.
Legal and safety. Courts, government agencies and others when the law requires it, or to protect people and the Services from harm or fraud.
Business changes. A buyer, if Ometto is sold or merged, with notice to you.

6. Cookies and analytics

This website has no advertising trackers and no analytics of its own, and its fonts are served from the site itself. Our hosting provider keeps standard server logs, such as IP address, browser type and the pages requested, for security and reliability. The embedded Tally form may set its own cookies; see Tally's policy. We don't track you across other websites, so browser "Do Not Track" signals have nothing to switch off. [If you add analytics or ad tools later, update this section first.]

7. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit and limiting access to the people and providers who need it to run Ometto. [Confirm what you actually do; add or remove items.] No system is completely secure, so please keep your passwords safe.

8. How long we keep it, and deleting it

We keep your information for as long as your account is active and as needed to provide the Services or meet legal obligations, then delete or anonymize it. You can ask us to delete your information or close your account at any time at the address below. Some information may stay in backups for a limited time or be kept where the law requires. Sign-up form entries are kept until you ask us to remove them or the beta ends. [Confirm.]

9. Your choices and rights

Ask what we hold about you, correct it, or delete it.
Disconnect Google or other connected services at any time.
Opt out of marketing emails with the link in them, or by asking us.

To make a request, email us. We may need to verify that it's you. If you live in the European Economic Area, the United Kingdom or Switzerland, you may also have the right to restrict or object to how we use your information, take a copy of it, withdraw consent, and complain to your data protection authority. California residents, see the next section. We don't treat anyone differently for using these rights. [Lawyer: confirm which regional laws apply to you yet.]

10. Additional information for California residents

This section applies to California residents and supplements the rest of this policy.

Information we collect, where it comes from, and who gets it. In the past 12 months, we collected or disclosed the following categories of personal information for the business purposes described in this policy:

Identifiers and contact details (name, email address, profile photo, IP address). From you, from Google sign-in, and from your device. Used to run your account, support you, send updates and keep the Services secure. Disclosed to our service providers.
Family and household information (names or nicknames, invited members, events, to-dos, allowance and habit records). From you and the people you invite. Used to show your household's content on your screens. Disclosed to our service providers and to the members of your household.
Calendar events and photo-album details from services you connect, such as Google Calendar and iCloud shared albums. From those services, with your permission. Used to show your schedule and photos on your screens. Disclosed to our service providers.
Device and usage information (device and browser type, app version, logs, timestamps). Collected automatically. Used to keep the Services secure and working. Disclosed to our service providers.
Location (the coordinates or city you give us). From you. Used to show the weather and time zone. Disclosed to our weather provider.
Support messages. From you. Used to respond to you. Disclosed to our service providers.
Payment information, if and when we charge. From you. Used to process payments. Disclosed to our payment processor. [Update when you add billing.]

Your rights. You can ask us to tell you what categories of personal information we collect or disclose, where it comes from, why we collect it, and which categories of third parties receive it. You can ask for access to, or a copy of, certain personal information we hold, ask us to correct it, and ask us to delete it. Some information may be exempt from these requests, for example where we need it to provide the Services or the law lets us keep it. We won't discriminate against you for using these rights.

How to make a request. Email privacy@myometto.com. We take reasonable steps to verify your identity first, which may include matching at least two pieces of information you give us against our records, and we may ask for more if that isn't enough. An authorized agent can make a request for you through the same address, and we may ask for proof that they're authorized.

Sale and sharing. We don't sell personal information, and we don't share it for cross-context behavioral advertising.

"Shine the Light." California residents can ask how we share certain personal information with third parties for their own direct marketing. We don't share personal information with third parties for their own direct marketing without your consent.

Financial incentives. We don't offer financial incentives in exchange for personal information. [Confirm.]

[Lawyer: confirm California's privacy law applies to you yet, and that the categories above match what you actually collect.]

11. Children's privacy

Ometto is built for families, so a household's data often includes information about children, such as names, allowance and habit records. Ometto is meant to be set up and managed by a parent or guardian, and you must be at least 13 years old to create an account [confirm: or should account holders be 18+?]. Ometto is not directed to children under 13. Children under 13 can't create accounts, and we don't knowingly collect personal information directly from them. Information about children is entered by an adult in the household and used only to run that household's screen. We don't use it for advertising or sell it. A parent or guardian can ask us to review or delete it at any time at the address below. If you believe a child has given us information on their own, contact us and we'll delete it. [Confirm with a lawyer: whether US children's privacy law (COPPA) applies to how Ometto is offered, and add any required parental-consent wording.]

12. International transfers

Ometto is operated from [country], and our providers may process your information in the United States and other countries where they operate. Privacy laws in those countries may differ from yours. Where the law requires it, we use safeguards for these transfers.

13. Other websites and services

This policy doesn't cover the outside services you choose to connect, such as Google, or websites we link to. Their own policies govern how they handle your data.

14. Changes to this policy

We may update this policy from time to time. We'll change the date at the top and, for meaningful changes, tell beta users by email. Using Ometto after a change means you accept the updated policy.

15. Contact

Email privacy@myometto.com [and a postal address. Marketing emails to your beta list generally must include one, so you'll want it somewhere anyway.].