Privacy Policy

This Privacy Policy explains how SameNorth (“SameNorth,” “we,” “us,” or “our”) handles personal information when you visit samenorth.app or use the SameNorth service.

SameNorth helps adults coordinate parenting schedules across households. It is not directed to children, and children may not create accounts.

We collect information that you provide, information generated as you use SameNorth, and limited technical information needed to operate the service:

• Account information: your name, email address, authenticated account identifier, and sign-in/session information.
• Waitlist information: your email address and, if you choose to provide them, your first name, intended use, country or region, interface language, and the place in SameNorth where you opened the waitlist form.
• Family information: family-space name, time zone, co-parent names and labels, family-viewer names and relationship labels, invitations, membership details, children’s names and optional birth dates.
• Calendar information: parenting schedules, handoff times, holiday arrangements, one-off changes and reasons, approvals, and related history.
• Preferences: language, appearance, calendar-view, time-zone, holiday, and notification settings. Some preferences and unfinished preview data may be stored in your browser.
• Technical and service information: IP address, browser and device information, request and diagnostic logs, security events, and timestamps.

If you sign in with Google, our authentication provider receives the basic account information that Google and you authorize, such as your name, email address, and Google account identifier.

If you separately connect Google Calendar, SameNorth requests your basic Google identity and the narrow calendar.app.created permission. We use it to create and maintain a dedicated calendar containing your family’s published parenting-time and holiday events, including child and guardian names, assignment times, and holiday labels. We store your Google account identifier, account label, granted scopes, encrypted refresh credential, the identifier of the calendar SameNorth created, event mappings, and sync status.

SameNorth does not read events from your personal or other Google calendars. We do not use Google user data for advertising, sell it, or use it to determine creditworthiness. We use it only to provide and secure the sign-in and calendar features you choose.

People do not review Google user data except with your affirmative permission for support, when necessary for security or abuse investigation, when required by law, or when the data has been aggregated for internal operations in accordance with applicable law.

SameNorth’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

SameNorth and its authentication provider use cookies and similar browser technologies that are necessary to keep you signed in, protect sessions, remember settings, and operate the Service. SameNorth also uses local storage for preferences and some preview or unfinished setup data.

SameNorth does not use these technologies for behavioral advertising. Blocking necessary cookies may prevent sign-in or other parts of the Service from working.

We use personal information to:

• create and secure accounts and family spaces;
• manage early-access requests, send waitlist confirmations, and invite eligible participants;
• display, calculate, publish, and synchronize family schedules;
• invite authorized family members and apply access permissions;
• save preferences and provide support;
• monitor reliability, prevent abuse, troubleshoot, and protect users; and
• comply with law and enforce our Terms of Service.

We share information only as needed for the following purposes:

• Within your family space: family and schedule information is visible according to membership role. Family viewers receive only the published calendar and limited display information; they do not receive drafts, private notes, reasons, approvals, expenses, documents, birth dates, or member controls.
• Service providers: providers that support authentication, hosting, databases, security, and infrastructure process information for us under appropriate restrictions. These currently include Clerk, Vercel, and Supabase.
• Google services: when you choose Google sign-in or Calendar sync, information is exchanged with Google to perform that feature. Events exported to your dedicated Google calendar are then held by Google under your Google account.
• Legal and safety: we may disclose information when reasonably necessary to comply with law, protect rights and safety, investigate abuse, or respond to lawful requests.
• Business changes: information may transfer as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to applicable law and the Google API Services User Data Policy where Google user data is involved.

We do not sell personal information or share it for cross-context behavioral advertising.

We retain account and family information while your account or family space is active and as reasonably needed to provide the service, maintain schedule integrity and audit history, resolve disputes, enforce agreements, and meet legal obligations. Retention periods vary by data type and context.

Active or invited waitlist records are kept for up to 24 months. If you leave the waitlist, we stop waitlist availability messages immediately and delete the waitlist profile within 30 days. After admission, we delete the separate waitlist profile within 90 days; account information then follows the account retention rules. Short-lived rate-limit records expire within 24 hours.

Disconnecting Google Calendar stops future access and replaces SameNorth’s stored refresh credential. The dedicated calendar and existing events remain in your Google account unless you remove them there. You can also revoke SameNorth’s access from your Google Account permissions.

When a co-parent removes a family viewer, that viewer’s family access and future synchronization stop immediately, pending sync work becomes ineligible, and SameNorth revokes the Google connection credential associated with that family destination. Existing events in the viewer’s Google account remain until the viewer removes them there.

To request access, correction, export, or deletion of your information, contact privacy@samenorth.app. We may need to verify your identity. Some information may be retained where required by law or where deletion would affect another authorized family member’s records.

We use administrative, technical, and organizational safeguards designed to protect personal information. Google OAuth credentials and calendar identifiers stored by SameNorth are encrypted at rest, and credentials are not exposed to other family members. No system is completely secure, so we cannot guarantee absolute security.

SameNorth and its service providers may process information in countries other than where you live. Where required, we use safeguards intended to protect information during those transfers.

You may update family and preference information in the service, disconnect Google Calendar in Settings, revoke Google permissions through Google, or ask us to exercise privacy rights available under applicable law. You can remove locally stored preferences through your browser settings.

Every waitlist confirmation email includes a link that lets you leave the waitlist without creating or signing in to an account.

Because a family space is shared, changing or deleting shared information may affect other members. We may notify or account for those members when handling a request.

SameNorth is for adults coordinating care and is not intended for use by children. Adult users may provide limited information about children, such as a display name, optional birth date, and schedule. You represent that you have the authority to provide and use that information for family coordination.

If you believe a child’s information was provided improperly, contact us so we can review the request.

We may update this policy as SameNorth changes. We will post the updated version here, revise the date above, and provide additional notice when required.

Questions or privacy requests can be sent to privacy@samenorth.app.