Privacy Policy

Who we are

FamSteady is operated by Latent Ape LLC (“FamSteady,” “we,” “us”). This policy covers the FamSteady website (famsteady.com), the FamSteady applications, and our launch waitlist. Questions or requests: [email protected] or the contact form.

What we collect

• Account information. Name, email address, and optionally a phone number, for each family member who creates an account.
• Family structure. Who is in your family and each member's role (for example, caregiver or parent), so permissions work.
• Health data — only with your parent's consent. Metrics your parent chooses to share from their own device (such as steps, sleep, and heart rate via Apple Health). Sharing is opt-in, visible to the parent at all times, and can be disconnected with a tap.
• Financial data — read-only, via Plaid. Account summaries and transactions for accounts your parent connects. Bank usernames and passwords never touch our servers; Plaid handles the bank login and gives us read-only access tokens, which we store with an additional layer of encryption. FamSteady cannot move money. Plaid's own practices are described in the Plaid privacy policy.
• Alerts and activity. The alerts the system generates and what your family does with them, so the product works and there's an audit trail of sensitive actions.
• Waitlist and contact messages. If you join the waitlist we store your email to send you one launch note. If you write to us we keep the message so we can answer it.
• Technical basics. Device push tokens (so alerts can reach you) and standard logs needed to run and secure the service.
• Website analytics. On this website we use Google Tag Manager to understand how pages are used — page views and interactions like opening an FAQ or submitting a form. Analytics events never include your email, name, or message content.

We do not collect location, camera, or microphone data — the product has no such features, deliberately.

How we use it

• To run FamSteady: sync data, learn baselines, generate alerts, and show each family member what their role allows.
• To detect unusual financial activity, including patterns consistent with fraud targeting older adults.
• To power the care navigator (chat). The AI model provider receives the minimum needed context: family members are identified by first name and relationship only — never emails, last names, account numbers, or free-text transaction descriptions.
• To respond to support requests and, for the waitlist, to send one note when FamSteady launches.
• To secure the service (rate limiting, audit logging of sensitive operations).

We do not sell personal information, use it for third-party advertising, or build advertising profiles.

Who we share it with

Only service providers who process data on our behalf, under contract, to run the product: Plaid (bank connections), Google Firebase (sign-in) and Google Cloud (hosting), Resend (email delivery), our AI model provider (care navigator, minimized as described above), and — when subscriptions launch — Stripe (payments). If FamSteady is provided through your employer, the employer receives aggregate participation numbers only: never your family's membership, health, or financial information.

We may disclose information if required by law, or to protect the safety of a user — for example, responding to a valid legal request.

How long we keep it

• Health metrics: one year, then archived or deleted.
• Transaction data: two years, then archived or deleted.
• Account data: for as long as your account exists. Deleting your account removes personal data on a published schedule, using soft-deletion first so you can export what's yours.
• Waitlist emails: until launch, or immediately on request.

How we protect it

Encryption in transit (TLS 1.3) and at rest (AES-256), an extra layer of field-level encryption for financial access tokens, short-lived sign-in sessions, rate limiting on sensitive endpoints, and audit logging of sensitive operations. More detail lives on our Trust & privacy page.

Your rights and choices

• Access and export your family's data at any time.
• Correct your account information in the app.
• Disconnect any health or bank connection instantly — parents control their own connections.
• Delete your account, or ask us to delete waitlist or contact data, by writing to [email protected].

Depending on where you live, you may have additional statutory rights (for example under state privacy laws); we honor verified requests regardless of which statute applies.

Children

FamSteady accounts are for adults 18 and over. The product is not directed at children and we do not knowingly collect children's data.

Changes

As FamSteady approaches launch we'll refine this policy; material changes will be posted here with a new date, and account holders will be notified in the app or by email.