Privacy Policy

When you visit our website (www.mycookiefam.com) or any mobile applications, online licensed products, or other platforms (collectively, the “Website”) or use our services, you trust us with your data. COOKIE FAMILY MANAGEMENT CO, a Delaware corporation with its principal place of business at 100 Powell Place, #1091, Nashville, TN 37204 ("COOKIE," "we," "our," or "us"), is the organization accountable for the personal information described in this Privacy Policy and values your trust. Protecting information about an identifiable natural person ("Personal Information") is a high priority. COOKIE is committed to your privacy. This Privacy Policy explains what Personal Information COOKIE and its affiliates (collectively, “COOKIE” or "us" “we” or "our") collect, how Personal Information is collected, the purposes and lawful bases for which we use that Personal Information, what Personal Information is shared with whom, and how COOKIE protects your Personal Information when you use our products and services or otherwise interact with us (“Services”).

Please read this Privacy Policy carefully as it will inform you as to what we collect and how we use it.

1. When This Privacy Policy Applies

Our Privacy Policy applies to all the Services offered by COOKIE, and its affiliates, including Services offered on other sites, but excludes Services that have separate privacy policies that do not incorporate this Privacy Policy, and Services that you may receive as a result of your participation in a program that expressly supersedes this Privacy Policy.

Our Privacy Policy does not apply to services offered by other companies or individuals, including products or sites that may be displayed to you in search results, sites that may include services, or other sites linked from our Services. Our Privacy Policy does not cover the information practices of other companies and organizations who advertise our Services, and who may use cookies, pixel tags and other technologies to serve and offer relevant ads.

2. Information We Collect

The Personal information COOKIE collects varies based on the type of Services you use and the manner in which you access them. We do not sell any identifiable or sensitive information (“Personal Information”) about you at this time.  Depending on these factors, COOKIE may collect the following information about you:

The Personal Information COOKIE collects varies based on the type of Services you use and the manner in which you access them. Depending on these factors, COOKIE may collect the following information about you:

1. Identifiers. Including name, email address, and phone number.
2. Mobile Device Contacts. If you grant the Services permission through your device settings, we access and upload the contacts stored in your mobile device's address book. This includes the name, phone number, and email address (to the extent saved in your device) of each contact, whether or not that person is a COOKIE user. We use this information to (a) match your contacts against existing COOKIE accounts so we can suggest connections within the Services, and (b) enable you to invite your contacts to join COOKIE. Contact information we collect in this way is retained on our servers as described in Section 8 (Retention of Collected Information) below. You may disable the Services' access to your device contacts at any time through your device settings, though previously uploaded contact information will remain on our servers until you request its deletion as described in Section 12 (Your Privacy Rights) below. If you upload another person's contact information to the Services, you confirm that you have that person's permission to do so and that you have informed them of how their information will be collected and used, consistent with Section 3 (From Third Parties) below.‍
3. Third-Party Information. Which includes the information described in this Privacy Policy and provided by a third party relating to a child, service provider, family member, and other through the Services.
4. ‍Calendar Information.  We collect the content you enter into the Services for task lists, calendar events, and reminders, including event titles, dates, times, locations, and notes. Depending on what you choose to enter, calendar entries may include sensitive information, such as details about medical or health-related appointments or information about a child. We collect this information because you choose to input it into the Services in order to use their task and calendar functionality.‍
5. Inferred Household Data. We use information about the devices and user accounts linked to a single household, such as the number of users on a shared device and the roles assigned to each user (e.g., parent, child, grandparent, or nanny), to infer your household structure. We use these inferences to organize shared calendars, tasks, and permissions within the Services for your household.‍
6. Usage Data. Including information on how you interact with our Services, such as the frequency of use, feature preferences, and system performance logs.‍
7. Device Information and other Unique Identifiers. Including device identifier, internet protocol (IP) address, cookies, beacons, pixel tags, mobile ad identifier, or similar unique identifiers.
8. ‍Communications and Interactions. When you send email, text message, call, or otherwise communicate with us and with members of our team, we collect and maintain a record of your contact details, communications, and our responses.‍
9. Commercial Information. Including records of products or services purchased, subscription status, and billing information. Payments made through the Services are processed by Stripe, whose collection and use of your information is governed by its own privacy notice, available at https://stripe.com/legal/dpa.

Our Lawful Basis for Processing Your Information

We collect, use, and disclose your Personal Information only where we have a lawful basis to do so. Depending on the circumstances, our lawful basis may be: (a) your consent (express or implied); (b) the necessity of the processing to provide the Services you have requested (i.e., to perform our contract with you); (c) our compliance with a legal or regulatory obligation; or (d) our legitimate business interests, provided these are not overridden by your interests or fundamental rights.

Where we rely on your consent, we will seek express consent for the collection, use, or disclosure of sensitive Personal Information (such as mobile device contacts, or information about children), and we may rely on implied consent for non-sensitive Personal Information where appropriate in the circumstances, taking into account your reasonable expectations. Subject to legal or contractual restrictions and reasonable notice, you may withdraw your consent to our collection, use, or disclosure of your Personal Information at any time by contacting us using the details in Section 13 (Contact Us) below, adjusting your device or account settings, or, where applicable, using the unsubscribe mechanism in our communications. If you withdraw your consent, we will explain the likely consequences, which may include our inability to provide some or all of the Services to you.

3. How We Collect Information

We collect information in the following ways:

• Information You Provide. When you email us, use our Website, or interact with our Services, you will provide us with some of the information referenced above.
• Cookies and Identifiers. We use various technologies to collect and store information when you visit a COOKIE service, and this may include sending one or more cookies or identifiers to your device.
• Mobile Contacts Access. If you enable this feature and grant the required device permission, the Services access the contacts stored in your mobile device to upload them to COOKIE, as described in Section 2 (Mobile Device Contacts) above.
• Tracking Pixels. Our Website may employ software technology called tracking pixels (a/k/a web beacons/web bugs/ clear gifs) that enable us to better manage the content on the Website by informing us what content is effective. Tracking pixels are tiny graphics with a unique identifier, similar in function to cookies, and are used to track the online movements of visitors to a website. In contrast to cookies, which are stored on a user’s computer hard drive, tracking pixels are imbedded invisibly on website pages and are about the size of the period at the end of a sentence. We do not tie the information gathered by tracking pixels to your personally identifiable information.
• From Third Parties.  Some of our Services allow you to provide us with Personal Information relating to other parties, such as names, email addresses, or phone numbers of your family and friends (collectively, "Third-Party Data").  If you use any feature of the Services that allows you to communicate with other parties (such as to refer another other party to the Services or to communicate with them), either by submitting Third-Party Data to the Services or otherwise permitting the Services to automatically access Third-Party Data in your possession, you acknowledge, represent, and agree (a) that you have the authority of the relevant other party for us to access and use the relevant Third-Party Data, and (b) that you have notified these other parties and informed them how their information is collected and used by us to provide the Services. We reserve the right to identify you as the person who has made the referral in any messages that are sent to other parties. We use Third-Party Data to (a) contact such party using the Third-Party Data provides, and/or (b) provide you with an editable template message designed to facilitate communication between you and such party through the Services. We may also send reminders or related messages to you and to other parties on your behalf from time to time, as and where permitted by applicable law.
• Information You Provide. When you email us, use our Website, or interact with our Services, you will provide us with some of the information referenced above.

4. How We Use Information We Collect

• To Provide Services To You. We use the information that we collect about you to provide, maintain, protect and improve the Services that COOKIE provides to you.
• Analytics. We use analytics tools and other third-party technologies, such as Google Analytics and Amplitude, to collect Usage Data and Device Information (as described in Section 2 above) when you use our Services. We use this information to measure feature adoption and engagement, to identify and troubleshoot technical errors, and to understand aggregate usage trends so we can prioritize product improvements.
• To Improve Our Services. We use Usage Data and Device Information (as described in Section 2 above) to analyze how features of the Services are used, to identify errors, and to prioritize improvements to reliability, performance, and usability. Where we use de-identified or aggregated information for these purposes, that information may still be considered Personal Information under Canadian privacy law, and we handle it in accordance with this Privacy Policy.
• Analytics. We use analytics tools and other third-party technologies, including Google Analytics and Amplitude, to collect non-personal information in the form of various usage and user metrics when you use our site. These tools and technologies collect and analyze certain types of information, including cookies, IP addresses, device and software identifiers, referring and exit URLs, onsite behavior and usage information, feature use metrics and statistics, usage and demographics, and other similar information
• To Improve Our Services. We use de-identified, anonymous information that we collect about you for statistical and analysis purposes to improve our products and services, and to provide statistical analysis.
• Monitor the Services. We collect your Personal Information for monitoring purposes to help us diagnose problems with our servers, administer and troubleshoot the Services, calculate usage levels, analyze industry standards, and analyze transactions, trends, and statistics regarding the use of the Services.
• Support Business Operations. We use Identifiers and Commercial Information (as described in Section 2 above) to send you Service-related and, where you have consented, marketing communications; we use Device Information and Usage Data to help detect and prevent fraud and security incidents; and we use Commercial Information to manage billing and subscriptions. Where we send you electronic marketing communications (such as by text message or email), we do so in compliance with Canada's Anti-Spam Legislation, including by providing an unsubscribe mechanism in each message.
• Fulfill Other Purposes. We may use your Personal Information to fulfill: (a) any other purpose for which you provide it; (b) any legal or regulatory requirements and any of our internal policies; (c) other purposes disclosed at the time of collection; and (d) any other purpose with your consent.

5. What Information We Share & Third Parties

Except as otherwise described in this Privacy Policy, we do not sell, share, rent, or otherwise disclose your Personal Information that we collect from the Services to any third parties for monetary or other valuable consideration.  We may disclose your Personal Information as described below:

• Subsidiaries and Affiliates. We may disclose Personal Information about you to our subsidiaries and affiliates.
• Service Providers & Contractors. TTo help us provide the Services and run our business, your Personal Information may be shared with our service providers, contractors, and other third parties we use to support our business, including our CRM, cloud hosting, customer support, and payment processing providers. Some of these service providers are located, or process Personal Information, outside of Canada, including in the United States. Where we authorize a service provider located outside Canada to collect, use, or disclose your Personal Information, we do so for the purposes described in this Privacy Policy. For more information about our policies and practices regarding service providers located outside Canada, or to contact Privacy at support@mycookiefam.com [BS12.1]with questions about our collection, use, disclosure, or storage of Personal Information by such service providers, please see Section 13 (Contact Us) below.
• Marketing & Analytics Partners. We may share your personal information with entities that perform marketing, analytics or data aggregation services on our behalf.
• In the Event of Merger, Sale, Divestitures, or Change of Control. We reserve the right to transfer personal information to a buyer or other successor in interest that acquires rights to that information as a result of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of Civaris or substantially all of its assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about you is among the assets transferred.
• With Your Consent. We may share your information for other purposes pursuant to your consent or at your direction.
• Other Disclosures. We may disclose your personal information if we have a good faith belief that disclosure of such information is helpful or reasonably necessary to: (i) conform to legal requirements and comply with any court order, law, or legal process, including responding to any government, law enforcement, or regulatory request; (ii) fulfill the purpose for which you provide it; (iii) detect, prevent, or otherwise address fraud or security issues; or (iv) protect against harm to our, your, or third parties’ rights, property, or safety.

6. How We Protect Your Information

We take steps to secure data through administrative, technical, and physical safeguards designed to protect against the risk of accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use, including technological measures (such as encryption and firewalls), physical measures (such as secured facilities), and administrative measures (such as our internal information security policies and access controls). Access to your Personal Information within COOKIE is limited to personnel who need it to perform their roles, such as our billing, customer support, and information technology teams. Unfortunately, we cannot guarantee the security of information transmitted through the Internet, and where we have given you (or where you have chosen) a password, you are responsible for keeping this password confidential.

7. Do Not Track

Some browsers have a “Do Not Track” (“DNT”) feature that lets you tell websites and online services that you do not want to have your online activities tracked. Such browser features and industry standards are not uniform. As such, we do not monitor or respond to DNT browser requests. If a standard is adopted that we must follow in the future, then we will inform you about that practice in a revised version of this Privacy Policy.

8. Retention of Collected Information

Except as otherwise permitted or required by applicable law or regulatory requirements, we will retain all data collected through your use of our Services only for as long as we believe it is necessary to fulfill the purposes for which the data was collected (including for the purpose of meeting any legal, accounting or other reporting requirements or obligations). Where permitted by law, instead of deleting Personal Information we may anonymize it so that it can no longer identify you, in which case we will only use that anonymized information for legitimate business purposes.

9. International Transfer of Information

The Services are hosted in the United States. Please note your Personal Information will be transferred, processed, collected, use, accessed, and/or stored in the United States, a country and jurisdiction that may not have the same data protection laws or rights as the country in which you reside, and subject to U.S. laws. Where required by applicable law, before we transfer Personal Information about a Quebec resident outside Quebec, we conduct a privacy impact assessment and put in place a written contract requiring the recipient to protect the information using measures consistent with Quebec's privacy legislation. Please do not provide Personal Information to us if you do not want this information to be transferred or processed outside of your country, or if the laws in your country restrict such transfers. By using the Services, you consent to the transfer of your information to our facilities and the practices described in this Policy.

10. Children's Privacy

Our Services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13, except where a parent or guardian sets up a joint family account and adds a child as a member of that account, in which case we collect the child's information as described in this Privacy Policy with the parent or guardian's consent. For residents of Quebec, the age of consent under Quebec's Private Sector Act is 14; for residents of other Canadian provinces, it is 13 under PIPEDA and Alberta's Personal Information Protection Act. If we learn that any user of the Service is under the applicable age of consent (other than through a parent- or guardian-managed joint family account), we will take appropriate steps to delete that individual's personal information and restrict that individual from future access to the Services. If you are a parent or guardian and you learn that your child has provided us with personal information outside of a joint family account you manage, please contact us at support@mycookiefam.com.

11. Your Privacy Rights

Subject to applicable law and certain exceptions and limitations, you have the right to: (a) request access to the Personal Information we hold about you; (b) request correction of any Personal Information about you that is inaccurate or incomplete; and (c) request that we stop using your Personal Information for direct marketing purposes. To exercise any of these rights, please contact us using the details in Section 12 (Contact Us) below. We may need to verify your identity before responding to your request, and we will respond within the time period required by applicable law. We may not be able to grant every request, for example where the information is protected by solicitor-client privilege, relates to another individual's Personal Information, or where an exception under applicable privacy law applies; if we deny your request in whole or in part, we will explain why.

12. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our privacy practices, or if you wish to exercise any of the rights described in Section 11 (Your Privacy Rights) above, please contact our Privacy Office, who is accountable for privacy at COOKIE, at: support@mycookiefam.com

13. Change to the Privacy Policy

If we change this Privacy Policy, we will post any privacy policy changes on this page and, if the changes are material, we will provide a more prominent notice by sending you an email and/or posting a notice in the Services, to the extent applicable and commercially reasonable. COOKIE reserves the right to modify this Privacy Policy at any time, so please review it frequently.

Last modified: August 28, 2026

‍