We’re real humans —
and our kids use this too.

We built Hi Fam AI for our own families, so we wrote this to be read by parents — not lawyers. Here’s the short version; the full details are below.

The full policy

Last updated 29 September 2026

Hi Fam LLC (“Hi Fam AI,” “we,” “us,” or “our”), a limited liability company based in the Commonwealth of Pennsylvania, United States, runs the Hi Fam AI app on the web (app.hifam.ai), on iPhone and iPad, and on Android, and the website at hifam.ai (together, the “Service”). This Privacy Policy explains what information we collect, how we use it, who we share it with, how long we keep it, and the choices you have. Hi Fam AI is built for families, so we wrote this policy for parents and guardians. By creating an account or using the Service, you agree to this Privacy Policy and our Terms of Service.

1.Who this policy applies to

Hi Fam AI is designed to be set up and managed by a parent or legal guardian (the “Account Holder”), who must be at least 18 years old. Children use the Service only through a profile the Account Holder creates, either on the parent’s device or on a child’s own device linked by the parent (“kid mode”). Children cannot create their own accounts. An Account Holder may invite another adult (a “co-parent”) to share the family; co-parents have their own sign-in and are covered by this policy too.

2.Information we collect

Information the Account Holder provides

• Account information — your name, email address, and sign-in details. Sign-in is handled by Google Firebase Authentication, using an email and password or your Google or Apple account. Your password is stored by Firebase; we never see or store it ourselves.
• Child profiles — for each child: first name (required), and optionally date of birth, gender, interests, growth goals, notes about the child, a profile photo, a name pronunciation, and an avatar or colour.
• Family values and guidance — the values, preferences, house rules and free-text instructions you give to shape how Hi Fam AI responds, including your family’s and each child’s faith or religious tradition, if you choose to share it.
• Learning needs — if you choose to add them, labels such as ADHD, dyslexia, autism or anxiety. These are health-related and sensitive. They are optional, used only to shape how Hi Fam AI helps your child, and never announced to the child.
• Controls and settings — topic filters, schedules and daily limits, how much conversation detail you see, whether photo and document uploads are allowed, how long chat history is kept, your email preferences, and your parent PIN (stored only in hashed form).
• Co-parent invitations — the email address of someone you invite to share your family.
• Subscription information — your plan, subscription status, trial dates, and which store or processor bills you. Payment details are collected by Stripe (on the web), or by Apple or Google (in the apps). We never receive or store your card number or card digits; for web subscriptions we keep only a Stripe customer reference.
• Messages to us — feedback, bug reports, “Report this response” submissions, and emails to hello@hifam.com.

Information created when your family uses the Service

• Conversations — the messages a child sends and Hi Fam AI’s replies, plus a short topic label for each, any safety flag, and anything you save or annotate.
• Voice — when a child speaks to Hi Fam AI, the audio is sent to OpenAI to be transcribed or to run the voice conversation. We do not store the audio recordings; the resulting text is saved as part of the conversation. When a reply is read aloud, its text is sent to OpenAI to generate the speech.
• Photos and documents shared in chat — if a child attaches a photo or PDF, it is sent to our AI provider so Hi Fam AI can look at it. We do not keep a copy of the file on our servers; the conversation text is saved as usual. Uploads are on by default and you can turn them off for each child.
• Study materials and projects — notebooks and notes a child studies from, saved documents and projects, and homework assignments you set, with summaries of completed sessions.
• Pictures made by Hi Fam AI — when a child asks for a picture, their description is sent to OpenAI to create the image, which is shown in the chat. We do not store generated images on our servers.
• Hi Fam AI’s memory — a short, automatically written summary about each child (for example, current interests) so conversations stay coherent. You can see what we hold in your data export.
• Safety signals — the result of automated checks on each message and reply, and whether a conversation was flagged for your attention.
• Usage information — screen time, when the app was last opened, which features were used, and a record of AI usage per feature (used to run limits and manage costs).
• How you found us — if you arrived from a link with campaign tags (UTM parameters) or from another website, we record those tags, the referring page and the first page you landed on, once, when you sign up. We keep this to understand which of our channels work. If you came from an ad, the ad click id in that link is also read by the ad measurement tags described under “On your device, and on our website” below.
• Notification tokens — if you allow notifications, a push token for your device, so we can send alerts through Google Firebase Cloud Messaging.
• Technical and log data — IP address, device and browser type, and timestamps, used to secure the Service and limit abuse (for example, rate limiting), and technical error logs to fix problems. Error logs are not used to read conversations.

On your device, and on our website

The app uses your browser’s or device’s storage to keep you signed in, remember settings, briefly keep the current conversation on screen (for up to a day), and hold campaign tags until you sign up. Our website at hifam.ai does not use cookies or analytics; it loads fonts from Google Fonts. On the parent sign-up page of the web app only, we load the Google Ads tag and the Meta Pixel to measure whether our ads led to a sign-up. These tags set cookies and send Google and Meta the fact that a parent signed up, along with the ad click id, IP address and browser details. They never load in the iPhone or Android apps, in kid mode, or anywhere a child uses Hi Fam AI, and nothing a parent or child types is sent to them. The Service shows no advertising and contains no other third-party analytics tools.

3.Children’s privacy (COPPA)

We take children’s privacy seriously and design the Service with the U.S. Children’s Online Privacy Protection Act (“COPPA”) in mind.

• The parent is the account holder. Only an adult can create an account. When creating the account, the Account Holder confirms that they are the parent or legal guardian of the children who will use Hi Fam AI and consents to their use of it. Each child profile is then created by the Account Holder, and the information in it is under the Account Holder’s control.
• Only what’s needed. We collect personal information from or about a child only to provide the Service the parent has asked for. Apart from a first name, every profile detail is optional, and we do not require a child to disclose more than is reasonably necessary to use the Service.
• No ads, no sale. We do not sell children’s information, and we do not use it for advertising of any kind.
• What you see. By default the Account Holder (and any co-parent) can read a child’s full conversations in the parent dashboard. You can switch any child to summaries only, so you see topics and the timeline rather than every word. Conversations flagged for safety are always shown to you in full.
• Your rights as a parent. You can review your child’s information and conversations, export it, correct it, delete individual conversations, delete the child’s profile and everything in it, or delete your whole account. You can refuse further collection at any time by deleting the child’s profile or your account. You can also email us at hello@hifam.com; we may need to confirm you are the Account Holder before acting.

4.How we use information

• To provide and personalise the Service, including generating Hi Fam AI’s replies according to your family’s values, each child’s age, and the guidance you set.
• To run safety features: checking messages and replies, redirecting sensitive moments, and alerting you when a conversation is flagged.
• To show you your family’s dashboard, summaries and insights, and (if you turn it on) a weekly email digest.
• To apply the controls you set, such as filters, schedules, time limits and history length.
• To manage subscriptions and free trials, prevent fraud and abuse, and enforce usage limits.
• To answer your support requests and send you account, billing and service emails.
• To keep the Service secure, fix problems, and understand in aggregate which features and sign-up channels are working.
• To comply with the law and enforce our Terms.

We do not sell personal information, we do not show ads, and we do not use what your family types for advertising or marketing.

5.How AI processing works

To answer a child, we send their message to an AI provider together with the context needed to answer well: the child’s first name, age, gender (if provided), your family’s values, faith and guidance, any learning needs you’ve added, the recent conversation, and Hi Fam AI’s memory for that child.

• Anthropic (Claude) generates most replies, reads photos and PDFs shared in chat, and writes summaries, insights, the weekly digest and the per-child memory. For children aged 8 and over, Hi Fam AI can search the web and read web pages to answer a question; those searches run through Anthropic on our servers, and the child never leaves the app.
• OpenAI checks every message and reply with its moderation service, powers voice (transcription, spoken conversation and read-aloud), creates pictures, and answers as a backup if Anthropic is unavailable.

Both providers act as our service providers and process this content to return a result to us. Under their commercial API terms, they do not use it to train their models. They may keep it for a limited time (typically up to 30 days) to monitor for abuse, under their own policies.

6.Who can see your family’s information

• You and your co-parents. Co-parents you invite can see the family’s children, settings and conversations, subject to each child’s privacy level.
• Our team, as little as possible. We don’t browse families’ conversations. Conversations flagged for safety can be reviewed by authorised Hi Fam staff so we can make sure our safety features are working; they appear with the child’s first name only. Our internal tools also show staff a short topic line (the first few words of a question) for recent conversations, to monitor that the Service is working. Beyond that, a team member looks at a specific conversation only when you ask us to investigate a problem, or when the law requires it.
• No one else, except the service providers and situations listed in the next section.

7.How we share information

We share information only in these circumstances:

• Service providers who process data on our behalf to run the Service:
  • Anthropic and OpenAI — AI processing, as described in section 5;
  • Google Firebase — sign-in and push notifications;
  • Railway — application hosting and our database;
  • Stripe — web subscription payments;
  • Apple (App Store), Google (Google Play) and RevenueCat — in-app subscriptions; RevenueCat receives your account ID and purchase records;
  • Resend — sending our emails, including flag alerts and the weekly digest if you turn them on;
  • an error-monitoring service (Sentry), if we enable it, which receives technical error reports that are not linked to your name or email.
• Legal and safety — when we believe in good faith that disclosure is required by law, or is necessary to protect the safety of a child or anyone else, or to protect our rights.
• Business transfers — in connection with a merger, acquisition or sale of assets, in which case this policy continues to protect your information.

We never sell your data, and we never share your children’s information or anything your family types with advertisers or data brokers. The only thing an advertiser learns from us is the sign-up measurement described above.

8.Emails and notifications

• Account and billing emails — such as email verification, password and PIN resets, subscription confirmations, trial reminders and payment problems. These are part of the Service.
• Product emails — a welcome email, set-up tips and occasional “come back” reminders. They never use anything your child has typed. There is not yet an unsubscribe link or setting for these; to stop them, email hello@hifam.com and we will turn them off.
• Flag alerts and weekly digest — optional emails you control under Account in the parent area. Flag alerts name the child but not the conversation. The digest includes short AI-written summaries of what each child explored that week.
• Push notifications — if you allow them on your device, for example when a conversation is flagged. You can turn them off in your device settings.

9.Data retention and deletion

You choose how long conversations are kept. Each child profile has a “Keep chat history” setting: 1 week, 1 month (the default), 3 months, or forever. Conversations older than the window you choose are permanently deleted by an automatic sweep that runs twice a day. Conversations you have saved, and conversations flagged for safety, are kept until you delete them yourself.

You can delete things any time. From the parent area you can delete individual conversations, clear conversations in bulk, delete a child’s profile (which deletes that child’s conversations, memory and settings; study notebooks, homework assignments and saved documents linked to that child stay in your account until you delete them or your account), or delete your whole account under Account → Delete my account & data. Deleting the account permanently removes your account and all your children’s data from our database straight away, and removes your sign-in from Firebase. If a co-parent deletes their account, only their own account is removed; the family stays with the Account Holder. Full steps, including how to ask us by email, are on our account deletion page.

What can remain after deletion. Copies may remain for a limited time in our hosting provider’s routine database backups and in server logs until they are overwritten. Payment and purchase records are kept by Stripe, Apple, Google and RevenueCat under their own policies and legal obligations. Our email provider keeps delivery logs for a limited time, and our AI providers may keep content for up to 30 days, as described above. We may also keep information where the law requires it or to resolve disputes. Otherwise, we keep account information only while your account is open.

10.How we protect information

All connections to the Service are encrypted in transit (HTTPS). Access to production systems is limited to the few people who need it, parent PINs are stored only in hashed form, and kid-mode device links can be revoked at any time. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please keep your password and parent PIN private.

11.Your rights and choices

At any time, from your account at app.hifam.ai or in the app, you can:

• see and update your account, family and child information;
• export your family’s data as a file (Account → Export my data);
• delete conversations, child profiles, or your entire account;
• change what you see, what Hi Fam AI can do, and which optional emails you get;
• cancel your subscription.

Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA) or the EU and UK General Data Protection Regulation (GDPR), including rights to access, correct, delete, restrict or object to the use of your personal information, to data portability, and not to be discriminated against for exercising these rights. We do not “sell” or “share” personal information as those terms are defined in California law. To make a request, email hello@hifam.com. We will verify your request and respond within the time the law requires.

12.International users

We are based in the United States, and the Service is operated from the United States. If you use it from elsewhere, your information will be processed in the United States, where data protection laws may differ from those in your country.

13.Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and tell you by email or in the Service. If a change would materially expand how we use a child’s information, we will ask for the parent’s consent where the law requires it.