Privacy Policy
Here’s exactly what Family Scoop reads and keeps, and why.
About this policy
Family Scoop is a personalized daily family newsletter service. This policy explains how we handle account and family information, Google data, optional AI features and support conversations. It applies to the app and its newsletters. Contact the Family Scoop operator at support@familyscoop.app with privacy questions or requests.
Information you provide
We store your account email and the family details you enter, such as names, children, schools, locations, time zone, chores, newsletter preferences and recipient addresses. These details personalize and deliver your newsletter. Only provide information you are authorized to share, and choose recipients carefully. The service is intended for adult account holders; children do not need accounts to receive a kid-friendly newsletter.
Connecting Google is optional
Google connection is separate from signing in to the app. With your authorization, we use openid and email to identify the connected Google account and show its email address in Settings. We request Gmail read-only, Calendar read-only and Calendar event permissions for the features below. You can use the app without connecting Google.
Gmail: read-only, listed senders and opted-in grade alerts
The gmail.readonly permission technically allows reading mail, but our application limits its queries and processing to recent messages from teacher and school email addresses your family explicitly lists, and — only if your family turns on Grades & missing work — recent grade, progress-report and missing-assignment alert emails from known school systems (such as Skyward, PowerSchool, Infinite Campus or Canvas) or with those alert subjects. We use subjects, senders, dates and snippets to include school updates; optional summaries and school-date extraction read the message text. We do not read unrelated mail for these features. We cannot send, delete, label or modify messages with this permission. Attachments are not downloaded or sent to AI.
Calendar: your selected schedule
The calendar.readonly permission lets us list available calendars so you can select them, and read event details from your selected calendars to build daily schedules and weekly look-aheads. Event details may include titles, dates, times and locations. We do not change your existing events as part of newsletter preparation.
Optional school-date auto-add
The calendar.events permission lets Plus families enable school-date auto-add in Settings, choose a destination calendar, and review or automatically add dates found in listed-sender school emails. This feature is off until you turn it on. Dates are extracted by text rules, without AI. Although Google’s event permission is broader, the app’s write operations are limited to creating its own school-date events and deleting only events it can verify it added. Undo checks the app’s event marker before deleting; unrelated events are never edited or deleted. We store addition records including titles, dates and source email metadata, not raw email bodies.
Connecting Microsoft is optional
If you connect an Outlook.com, Hotmail, Live or Microsoft 365 account, we request read-only permissions (Mail.Read, Calendars.Read, plus openid, email, profile and offline_access to stay connected). We read only recent mail from the teacher and school addresses you list (plus recent school grade-alert emails if you turn on Grades & missing work) and events from the calendars you select. We never send email as you or change your Microsoft calendar. The Microsoft refresh token is encrypted at rest; Disconnect deletes it, and you can also remove access in your Microsoft account’s app permissions.
Forwarding address
Each family can get a private forwarding address. Email you choose to forward there is treated as school mail: we keep the sender, subject, a short preview (about 160 characters) and, for Plus families with AI summaries on, a summary. The full message text is used only to make that summary and is not stored. We never ask for your email password. Replacing the address stops the old one immediately; deleting your account removes the address and stored previews.
Grades & missing work (optional, every plan)
If you turn on Grades & missing work in Connections, we look for recent (7-day) grade, progress-report and missing-assignment alert emails from known school systems in your connected Gmail or Outlook inbox and in mail forwarded to your private address. We first read them with text rules; if that finds nothing, the subject and plain text (up to about 4,000 characters) are sent through our AI gateway to Google’s Gemini Flash Lite model to pull out class names, grades, scores and missing assignments, within a monthly per-family limit. We store only the extracted class, grade, score and assignment details and the message identifier, not the email body; only the latest entry per class is kept. These details appear in parent newsletters, never in kid-friendly emails. Turn the setting off to stop future reading; deleting your account removes stored grades.
Google API Services User Data Policy and Limited Use
Family Scoop's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide or improve the user-facing features described here. It is not sold, used for advertising, transferred to advertising platforms, or used for creditworthiness or lending decisions. We do not use Google user data to develop, train or improve generalized AI or machine-learning models. Transfers are limited to what is necessary to provide or improve these features through service providers, to comply with applicable law, or for security purposes. Human access is limited to your affirmative consent for specific data, necessary security investigations, legal obligations, or Google’s permitted aggregated/anonymized internal-operations exception. The operator does not routinely read your school mail or calendar.
Optional AI school-email summaries
When eligible Plus/trial families enable AI summaries, the subject and plain email text from listed school senders (up to about 4,000 characters) are sent through our third-party AI gateway to Google’s Gemini Flash Lite model to generate a gist, action items and key dates. This is inference for your newsletter, not generalized model training. Attachments, flyers, Google tokens and unrelated mailbox messages are not included. Our summary cache stores only the generated summary and its identifiers, not the original email body. Newsletter history can retain the summary, subject, sender and snippet shown in the delivered newsletter. Disable summaries in Settings to stop future AI summary processing. AI output can be inaccurate; check the original message for important instructions.
Add from photo (Plus)
When you upload a schedule photo, screenshot or PDF, we store the file privately for your family and send the image (or the PDF’s text) through our third-party AI gateway to Google’s Gemini Flash Lite model to list dated events. You review every event before it is saved. You can delete any event or the whole upload, which also deletes the stored file; deleting your account deletes all uploads. If you turn on "Also add to Google Calendar", approved events are created in your chosen auto-add calendar and tagged so we only ever change events we added.
Help chat and human support
Help sends only messages you type, with recent typed messages for context, through our third-party AI gateway to Google’s Gemini Flash Lite model. Your school-email content, summaries, calendars and Google credentials are not automatically included. Do not paste sensitive information you do not want processed. If you ask for a person or the AI cannot help, a support ticket shares a short snippet of your recent typed user messages with the Family Scoop operator; operator replies appear in your Help thread. Help messages and tickets are stored so the conversation can continue.
Who receives data
Your chosen newsletter recipients receive the information included in their edition. Co-parent copies apply your selected kid filters; kid-friendly copies exclude school-email content, grades and sibling information. Our third-party hosting provider stores account and application records; our AI gateway provider and Google, the model provider, process the text described above; Resend processes recipient addresses and newsletter content for delivery; Stripe processes billing details. These providers receive only the information needed for their role and must handle Google data consistently with Limited Use. We may disclose information when required by law or necessary to prevent abuse or protect security. We never send through your Gmail account. Contact support for details about our service providers.
Security and encryption
Google refresh tokens are encrypted at rest with AES-GCM using a server-side key; access tokens are obtained for API requests and are not exposed in the app. Connections and Google API calls use HTTPS. School portal credentials, if provided, are also encrypted; school portal sign-in is not currently live. Saved calendar links are masked in the app and restricted to your family. Account-scoped access controls protect family data. No system can guarantee absolute security; notify us promptly of suspected misuse.
Retention
Connected tokens are kept until you disconnect or delete your account. Family preferences, email summaries, newsletter history, addition records and Help conversations are retained while your account remains active; the app currently has no automatic expiry for these stored records. Raw school-email bodies are processed temporarily to extract dates or generate summaries and are not stored in the app database. Disconnecting Google stops future access but does not itself delete existing summaries, newsletter history or app-added events. Account deletion removes your family’s stored Google tokens, summary cache, calendar-addition records, newsletter history and other family records. Copies already delivered to recipients, events already created in Google Calendar, payment-provider records and service-provider backups/logs are outside this direct deletion; provider retention and legal obligations may apply.
Disconnect Google or delete your account
In your signed-in dashboard’s Google connection card, choose Disconnect to delete the saved connection and attempt to revoke authorization at Google. You can also revoke access directly in your Google Account’s third-party connections settings. Use Undo on the school’s added-date list before disconnecting if you want app-added Google events removed; deleting the local addition records does not remove events from Google Calendar. To remove family data and your login, use Delete my account in the dashboard’s account settings. This attempts Google revocation and removes your family records, including tokens, summaries and calendar additions. For assistance or a deletion request, contact support@familyscoop.app. Cancel paid renewal separately before deleting; contact support if needed.
Other optional features
Calendar links are fetched only for schedules. District lunch requests store the district and contact details you provide; public menu configurations can be reused by other families, but your contact details are not public. Stripe handles payment information; we store subscription identifiers, plan, status and renewal details, not full payment-card numbers. Necessary account emails and the newsletters you request are sent by our email provider, not your Gmail account.
Your choices and policy changes
You may change listed senders, selected calendars, AI and auto-add settings, recipient filters and family information in the app. You can request help accessing, correcting or deleting your information at support@familyscoop.app. We will update this policy when practices change and provide appropriate notice of material changes. Questions about the operator or privacy rights can be sent to the same support address.
Read the Google API Services User Data Policy, its Limited Use requirements, and our Terms of Service.