Who we are
The Family Stack (“we”, “our”, “us”) is operated by Jason M. Netherland as sole proprietor. For this policy, the data controller is:
- Name: Jason M. Netherland / The Family Stack
- Contact: privacy@thefamilystack.co
- Mailing: Available on request
This policy covers two products:
- Cordoma — the family app at
app.thefamilystack.co, which includes an AI learning companion module called Quinn - The Family Stack website — the marketing site at
thefamilystack.co
If you use either of these, this policy applies to you.
An earlier prototype of Quinn ran as a separate single-page web app on Supabase. That prototype is being retired and replaced with a Quinn module inside Cordoma, hosted entirely on Google Cloud. This policy covers the Cordoma-hosted Quinn. The retired prototype is not part of our commercial service.
A note on families and children
Our products are designed for households. A parent or legal guardian creates the account. Children use the products through profiles the parent sets up — not through separate accounts.
We never knowingly collect personal data from a child under 13 without verifiable parental consent. We also apply parental consent controls for every user under 18, even when the law does not require it. That is a product decision: kids change fast, laws change slower, and the conservative default is easier to explain to a 10-year-old's parent than a 12-year-old's.
If you believe a child under 13 has given us data without a parent's permission, email privacy@thefamilystack.co and we will delete it.
What we collect
From parents (account holders)
- Email address
- Display name (first name or a name the parent provides)
- Hashed password (via Firebase Auth) or Google OAuth identifier
- Family name (what you call your household)
- Subscription tier and billing status (held in Stripe; we store only the customer ID and tier)
- IP address and basic device metadata for abuse prevention and sign-in security
From children (profiles created by a parent)
- First name or nickname
- Age or age range
- Neurodivergence flags the parent sets (dyslexia, ADHD, autism, sensory processing) — used to adjust font, pacing, and content inside the modules
- A 4-digit PIN (hashed) the parent sets for the child's profile
- Device pairing records (which tablet or phone the child uses)
From using the Quinn module
- The text of chat messages between the child and Quinn
- Session summaries (what was discussed, what was learned, how long the session ran)
- Engagement signals (session count, streaks)
All Quinn data is stored in Firestore (Google Cloud) alongside the rest of your Cordoma family data.
From using Cordoma modules
- Task and activity events your family logs (Ember, Pulse, Compass, Spark)
- Digest snapshots we generate for the parent dashboard
- Override actions (dismissing or confirming a suggested rule)
Collected automatically
- Standard web logs (browser, OS, timestamps, referrer)
- Aggregate usage metrics (page views, feature usage) with no personal identifiers attached
- Crash and error reports
We do not collect precise location, contact lists, microphone audio, or camera video.
How we use your data
- To run the service you signed up for
- To let a parent see what their kids are doing inside the app
- To adjust Quinn's behavior based on the child's profile (age, ND flags)
- To bill you via Stripe if you are on a paid plan
- To notify you about your account (receipts, security alerts, important product changes)
- To debug and improve the service
- To detect abuse and keep the service safe
We do not sell your data. We do not share it with advertisers. We do not use your family's conversations to train third-party AI models.
Who we share data with
We use a small set of infrastructure providers. Each one sees only what it needs.
| Provider | What it sees | Why |
|---|
| Google Cloud / Firebase / Vertex AI | Parent account, family members, devices, digests, Quinn chat history, session summaries — and chat messages sent to Quinn for AI inference | Authentication, database, app hosting, and AI model inference (Claude via Vertex AI Model Garden) — all under one Google Cloud contract |
| Stripe | Email, subscription tier, payment method | Subscription billing |
| Vercel | Marketing-site traffic only | Hosting for thefamilystack.co (no account holder data passes through Vercel) |
We have or will execute a Data Processing Agreement with each provider that processes personal data on our behalf. Google Cloud's DPA covers all Vertex AI usage including Claude AI inference.
We will disclose data only if we are required to by a valid legal process, or if it is necessary to protect someone's safety.
Your rights as a parent
- See everything we have about your family — available as a JSON download from your parent dashboard under Settings → Data & Privacy → Download my data.
- Correct any data that is wrong — edit directly in the app, or email us.
- Delete your account and every child profile — available from Settings → Data & Privacy → Delete my account. This removes your family profile, all child profiles, Quinn chat history, digests, devices, and paired accounts. We process deletions within 30 days.
- Withdraw consent — cancel the subscription and delete the account at any time.
- Contact us — email privacy@thefamilystack.co.
Children do not have separate accounts, so these rights are always exercised by the parent.
How long we keep your data
- Quinn chat history: 90 days by default, then rolled into summaries. You can request earlier deletion.
- Session summaries: kept as long as the account is active.
- Account data: kept as long as the account is active. On account deletion, we delete within 30 days.
- Billing records: we keep the minimum required by tax and accounting law (7 years in the U.S.), but only the billing record — not family content.
- Backups: our providers run daily backups that may persist up to 35 days after deletion.
Security
- Data in transit: TLS everywhere.
- Data at rest: encrypted by our providers (Firebase / Google Cloud, Stripe) at the disk level with AES-256.
- Secrets and API keys: held in Google Cloud Secret Manager, never in source code or in the browser.
- Access to production data: one person (the founder), over SSH keys and GCP IAM with MFA.
- Every parent sign-in uses Firebase Auth.
No system is unbreakable. If we have a breach that affects your family, we will notify affected parents within 72 hours and tell you what to do.
Kids, COPPA, and parental consent
The U.S. COPPA statute requires verifiable parental consent for users under 13. We go further:
- Every user under 18 is covered by parental consent.
- Child profiles cannot be created without a parent signed in.
- We never ask a child for an email or a password — only a PIN set by the parent.
- We do not show ads to anyone, adults or kids.
At account creation, the parent accepts this policy and the Terms of Service, acknowledges that Quinn uses Claude AI (served via Google Cloud Vertex AI), and confirms they are the child's parent or legal guardian.
International users
We are based in the United States. If you use the service from outside the U.S., you agree that your data may be processed in the U.S.
AI disclosure
Quinn, and parts of Cordoma, use Claude by Anthropic, accessed via Google Cloud Vertex AI. That is a large language model. It can be wrong, it can be inconsistent, and it is not a doctor, therapist, teacher, or lawyer. Use what it says as a starting point for a human conversation — not as final advice.
Changes to this policy
We will update this policy when we change how we handle data. When we make a material change, we will email every parent before the change takes effect and update the “Last updated” date above.