Privacy Policy

1. Information We Collect

Contact inquiries

When you submit a message through our contact form, we process your name, email address, phone number (optional), subject, and the content of your message to validate the submission and confirm that it was received. The current website does not store contact form submissions in our database.

Member accounts

Our Happy Family is an invitation-only community. When an administrator creates an account on your behalf, we store your name, email address, role, password-change status, account timestamps, and related circle assignment details. You may also update your display name. Admin users receive a temporary password by email and are required to set a new one upon first login.

Circle membership

When you join a circle, we record the date you joined and who invited you. This information is used to maintain accurate community records and to support the administration of your circle.

Invitations

When a member invites someone to join a circle, we store the invited email address, the date the invitation was sent, and the status of the invitation (pending, accepted, or expired). Invitation tokens are stored in hashed form and cannot be reversed.

Usage data

Our platform is hosted on Firebase infrastructure (Google Cloud). Firebase may automatically collect technical information such as IP addresses, browser type, and device identifiers as part of standard platform operations. This data is governed by Google's privacy practices and is not used by Our Happy Family for marketing or profiling. We also use request IP addresses for rate limiting and security checks.

2. How We Use Your Information

We use the information we collect to:

• Validate contact form submissions and prevent abuse
• Create and manage member accounts at the direction of community administrators
• Send account-related emails, including invitations and password setup instructions
• Maintain accurate records of circle membership
• Support administrators in managing the community
• Ensure the security and integrity of the platform

We do not use your information to send marketing emails, run advertising campaigns, or build behavioral profiles.

3. How We Share Your Information

We do not sell, rent, or trade your personal information to any third party. We share data only with the service providers necessary to operate the platform:

• Google Firebase — authentication and database services. Your account credentials and community data are stored on Firebase infrastructure. Google's data processing terms apply.
• Resend — transactional email delivery. Your email address is shared with Resend to deliver account invitations, circle invitations, and password setup emails. These emails may also include related delivery content such as invite links, inviter email addresses, circle names, display names, roles, temporary passwords, and login links.

Beyond these providers, your information is not disclosed to outside parties unless we are required to do so by law.

4. Data Retention

Contact form submissions are validated when submitted, but the current website does not store them in our database.

Member account data is retained for as long as your account remains active. If your account is removed by an administrator, your profile data is deleted from our active records. Invitation records are retained for administrative audit purposes and are purged periodically.

5. Data Security

We take reasonable measures to protect your information. Passwords are never stored in plain text. Invitation tokens are hashed before storage. Access to administrative functions is restricted by role and requires authenticated sessions verified through Firebase.

No method of transmission or storage is completely secure. While we work to protect your data, we cannot guarantee absolute security.

6. Children's Privacy

Our platform is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has submitted information through our platform, please contact us and we will remove it promptly.

7. Your Rights

You have the right to request access to the personal information we hold about you, to request that inaccurate information be corrected, and to request that your information be deleted where we have no lawful basis to retain it.

To exercise any of these rights, please contact us through the contact form on our website. We will respond to your request within a reasonable timeframe.

8. Changes to This Policy

We may update this privacy policy from time to time. When we do, the effective date at the top of this page will be revised. We encourage you to review this policy periodically. Continued use of the platform after a policy update constitutes acceptance of the revised terms.