Privacy Policy
Last updated: April 3, 2026
Our commitment: FamilyArmor is built with privacy first. We collect only what we need to run the app, we never sell your data, and we comply fully with COPPA for users under 13.
1. Who We Are
FamilyArmor ("we," "us," "our") is a family cybersecurity education app developed by David Kosorok. This policy covers the FamilyArmor iOS application and related services.
Contact: privacy@getfamilyarmor.com
2. Information We Collect
Account Information
- Sign in with Apple: We receive your Apple ID, display name (if shared), and email address (or Apple's relay email). We do not receive your Apple ID password.
- Age bracket: We ask users to select their age group (8-12, 13-17, 18+) to provide age-appropriate content. We do not collect exact birth dates.
Game Data
- Bolt Points, BoltRank tier, and streak count
- Scenario responses (which action was chosen, points earned)
- Game scores and level progress
- Family membership (invite code, member list)
Device Information
- FCM token: If you enable push notifications, we store your Firebase Cloud Messaging token to send daily reminders. This token does not identify you personally.
What We Do NOT Collect
- No analytics or behavioral tracking (Firebase Analytics is disabled)
- No advertising identifiers (IDFA)
- No location data
- No contacts, photos, or camera access
- No browsing history
- No social security numbers, financial information, or passwords
3. Children's Privacy (COPPA Compliance)
FamilyArmor is designed for families with members ages 8 and up. We take children's privacy very seriously.
For users who identify as ages 8-12:
- Parental consent required: A parent or guardian must provide their email address and explicit consent before a child under 13 can use the app.
- No behavioral tracking: We do not use Firebase Analytics, ad SDKs, or any behavioral tracking for any users, including children.
- Limited data collection: We collect only the minimum data needed: display name, age bracket, game progress, and Bolt Points.
- AI chat restrictions: The in-app AI helper (Bolt) is restricted to cybersecurity education topics and app support. It does not collect or store personal information from conversations.
- No third-party advertising: We do not display ads to any users.
- Parental rights: Parents may review their child's data, request deletion, or revoke consent at any time by contacting us at privacy@getfamilyarmor.com.
4. How We Use Your Information
- Providing the service: Delivering daily scenarios, tracking game progress, maintaining family groups and leaderboards
- Push notifications: Sending daily reminder notifications and streak alerts (opt-in only)
- AI help: Providing age-appropriate responses through the Bolt chat assistant. Chat messages are sent to our AI provider (Anthropic) for processing but are not stored by us or used for training.
- Subscription management: Processing purchases through Apple's App Store (we do not handle payment information directly)
5. How We Share Your Information
We do not sell, rent, or trade your personal information. We share data only with:
- Firebase (Google): Authentication, database (Firestore), and push notifications. Firebase Privacy Policy
- Anthropic: AI chat messages are processed by Anthropic's Claude API. Messages are not stored or used for model training. Anthropic Privacy Policy
- Apple: Subscription billing through App Store. Apple Privacy Policy
We do not share data with advertisers, data brokers, or social media platforms.
6. Data Storage and Security
- Data is stored in Google Cloud Firestore (us-central1 region)
- All API keys and secrets are stored server-side in Firebase Cloud Functions -- never in the app bundle
- Authentication is handled via Sign in with Apple with optional TOTP multi-factor authentication
- Data is encrypted in transit (TLS) and at rest (Google Cloud default encryption)
7. Data Retention and Deletion
- We retain your data as long as your account is active
- Account deletion: You can delete your account at any time from Settings > Delete Account. This immediately removes all your data from our systems, including: your user profile, game progress, family membership, and FCM tokens
- Deletion requests: You may also request deletion by emailing privacy@getfamilyarmor.com. Requests are processed within 30 days.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Delete your account and all associated data
- Object to or restrict processing of your data
- Data portability
To exercise any of these rights, contact us at privacy@getfamilyarmor.com.
9. California Privacy Rights (CCPA)
California residents have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To make a request, contact privacy@getfamilyarmor.com.
10. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via the app.
11. Contact Us
If you have questions about this privacy policy or our data practices:
- Email: privacy@getfamilyarmor.com
- Developer: David Kosorok