Privacy Policy

The short version

• Unify accounts are for adults 18 and over. Kids use Unify only through a login their parent or legal guardian makes for them.
• Your family's information stays with your family. We never sell it, share it for advertising, or use it to profile you.
• Unify shows no ads of its own and does no tracking. (The one exception is outside Unify's control: a YouTube Training video a parent adds to an exercise may show YouTube's own ads when a grown-up plays it; kids' accounts never load YouTube. See YouTube below.) Its cookies only keep you signed in and remember your choices on that device (like light or dark, which hub is open, and that this device signed in before).
• Each person sees only what they're allowed to. Kids only reach their own things, and parents decide what each kid can see.
• In a Unify set up for yourself, or for you and a partner or housemates, each adult's own receipts, reading, and events and tasks just for them stay theirs. Others see them only if that person shares them, and can never change them.
• Each hub (your family, or a personal or work hub) is seen only by the people in it. A personal hub is yours alone: the people in your family can't see it, its name or anything in it.
• Grown-ups can download a copy of their family's information at any time (Settings → Download my data), so you're never locked in.
• You can delete your account, or your whole family, inside the app at any time. Deleting your account also erases the hubs where you're the only adult.

What Unify keeps

• Accounts: a parent's or helper's email and password (the password is stored scrambled, never readable). If a grown-up forgets their password, Supabase emails them a link to set a new one. Kids sign in with a username and password a parent sets; kids don't give an email. To slow password guessing, Unify counts sign-in tries for up to an hour, kept as scrambled fingerprints of the email or username and the network address (never the name or address itself), and usually clears them within two days. A device that signed in recently keeps a signed note (a cookie, for 30 days, with no name in it) so your own phones can still get in if someone else is guessing. To keep the Claude features within a daily limit, Unify counts how many times each person used the assistant or photo reading each day, with a rough count of how much text that took (never what was asked or read); only Unify's server reads it, and it's usually cleared within about five weeks. If you allow Smart Capture to use Claude in the phone app, Unify keeps that you allowed it, when, which version of the permission screen you saw, and when you turned it off; only you can see it, and it goes with your account. To keep costs and limits on the outside services it uses (maps, weather, food, books, calendars, notifications, AI), Unify counts how many times a day it asked each one, for each household, as numbers only (never what was looked up: no addresses, searches or words); only Unify's owner sees them, never with a household's name, and they go after about 13 months or with the household.
• What your family adds: names, the calendar, schoolwork, grades and points, your own courses, class times, assignments, exams, scores, study time and weekly goals (My studies: just yours, or a kid's seen by them and their parents), which money, coding and investing lessons you finished and how many tries the check took (an adult's just theirs; a kid's seen by them and their parents), Learning games rounds (which skill and game, when, and each answer with whether it was right; an adult's just theirs; a kid's seen by them and their parents), Spark quizzes (the questions and answers a parent writes or makes from practice problems and Study Cards sets, seen by parents, and the ones a kid starts by picking a subject and a level, made from Unify's own practice and Spin & Know questions; which subject and level, seen by that kid and their parents; each play: every answer, whether it was right, how long it took, the points, the place against pretend players and the “how do you feel” answer; an adult's just theirs, a kid's seen by them and their parents; worked out by Unify's own rules, never sent to an AI), Study Coach's spots to work on (made by Unify's own rules when a kid's test or quiz grade comes in under the family's cutoff, and, where practice tests are turned on, from a kid's Study Cards practice tests on sets a parent made for them: the topic, the subject, the assignment, the scores, each practice test's score, number of questions and missed cards (marked as scored on the kid's device), a log of what changed and why, and what a parent did about it and when, such as a follow-up note or “Back on track”; seen by parents, and by that kid only if a parent allows it, without the scores unless they can see grades and never the practice details; never sent to an AI), a kid's Study Coach study rounds (each answer goes into the learning record above; for each finished round, the day, how many cards, how many were right the first time and the points; seen by that kid and their parents), a kid's Study Coach requests where “Study anything” is turned on (asking a parent for a chapter's cards or to check a book's edition: which book and chapter, when, and whether a parent made the cards or chose Not now; seen by that kid and their parents; no notification is sent) and which Study Cards sets a parent added to a chapter of a kid's book, the skills a kid has mastered or is practicing (worked out from their worksheets, plus a parent's “already knows this” or “start over” marks) and guided-lesson quizzes (the problems, the answers and the score; an adult's just theirs, a kid's seen by them and their parents), Study Cards sets and how each person is doing with them (the cards and any card pictures, which are shrunk on your device and kept privately: the person who added a picture can always see it, anyone else only through a set they can see, and parents can see and clear their kids' pictures; removing a set, or a kid, removes its pictures; Learn progress, practice test scores and “I was right” taps; an adult's progress and scores are always just theirs; their own sets are seen by the other parent in a family, and are just theirs in a “myself” or household setup unless they share one; a kid's sets, progress and scores are seen by them and their parents), Study's history (each card practice session, practice test, set made or given, Spark game and Study Coach round: when, which set or quiz, and how many cards or answers were right; an adult's just theirs, a kid's seen by them and their parents), a learning record for studying (each answer: what it was about, right or wrong, how it was asked, how long it took, and the words typed or chosen, at most 40 letters, which are erased after 30 days; for each thing being learned, how well it's known and the day it's due for review; the starting point, goal, test date and daily review limit chosen; and any “I was right” note a kid sends with a parent's answer, which is kept as it was decided; worked out by Unify's own rules, never sent to an AI; an adult's just theirs, a kid's seen by them and their parents), a pretend investing portfolio (made-up companies and pretend money: what you bought and sold and the reasons you picked; an adult's just theirs, a kid's seen by them and their parents), school IDs (the school's name, a grade and an ID number, seen by parents and, if a parent allows, that kid; the photo is the profile picture, or a photo a parent uploads just for the ID, which only parents and that kid see), yearbooks (the photos, captions and words a parent puts on each page, including copies of Feed photos the parent picks; seen by parents, and only if a parent shares a finished yearbook, by the family's kids and its trusted helper accounts, look only; a kid's note for the signing page and their own “All about me” answers show only after a parent approves them; until then only that kid and the parents see them), your homeschool books (and which kid uses each) and lesson plans, what kids hand in for schoolwork (a typed answer or a photo of their work, seen only by that kid and their parents), a record of each catch-up plan a parent approves (which lessons moved, from which day to which; seen only by parents), where “View as” is turned on, a record each time a parent looked at Unify as one of their kids (which parent, which kid, when it started and ended; look only, nothing can be changed meanwhile; seen only by parents), a kid's “I need help” requests on a lesson (the reason and an optional note, seen only by that kid and their parents), chores and allowance, sports, meals, groceries and what's in your pantry and kitchen, your dinner-planning answers (ZIP code, store, budget, diet, kitchen equipment), receipts and their photos, packages you track (the tracking number, a name you give it, and the carrier's updates with city and state only, plus, when the carrier gives them, the shipping service, the weight, the name of whoever signed for it and the city and state it came from and is going to; seen only by the person who added it unless they share one with the other grown-ups, or turn on sharing for packages they add from then on; never by kids, except that the person who added a package can let a kid see just its name, where it is and when it should arrive (never the shop, tracking number or carrier); only grown-ups find packages in search; delivered packages are deleted once they were delivered and last changed over 90 days ago, and put-away ones 90 days after being put away, shared ones included; with Packages email, your private forwarding address, the email addresses allowed to forward to it (your sign-in email and up to 3 you add), what the last forward did, and for automatic forwarding from Gmail the latest code Gmail sent (shown for a day), the Gmail address that asked, and which of your Gmail addresses Gmail confirmed and you turned automatic forwarding on for, seen only by you), places you save to try (the name and an optional note, seen by the grown-ups in your family, never by kids or helpers), boards and lists, Workspace pages and trackers (an “Only me” one is seen by nobody else), posts, photos and videos, comments, clips (short videos up to a minute, with their cover picture, length and any words; seen by everyone on the family's Feed, kept until the person who posted it or a parent removes it; no view or like counts are kept; a kid can post clips only when a parent turns on Can post clips), the posts you save (seen only by you, not even a kid's parents), profiles (a picture, a status, a cover photo, “All about me” answers, featured photos picked from your own posts or uploaded, the schoolwork, books, Study sets, Spark games and Learning games rounds someone picks to show (only that person picks them; their titles and subjects only, never a grade, score, points or answers), and which sections show: seen by the family, except that a section someone or a parent hid is seen only by that person and, for a kid, their parents, and a grown-up's answers, featured photos and picks are just theirs in a “myself” or household setup), notes, birthdays and the special days you add (with their backgrounds, notes and reminders), reminders you set for a time (seen by the person they're for and whoever set them, and in a family by the parents), responsibilities on a day of an event (who drives, picks up or brings what, and whether it's confirmed or done; seen by the parents, and by a kid when it's theirs or on their event), which game-day template a parent used on which game and day (so it's never added twice; seen only by the parents), each grown-up's own Sports tools switches (just theirs), Team jobs a team parent keeps for their team (which job is on which game or practice, and the first name typed for whoever does it; no phone numbers or emails; seen only by the parents, never by kids, helpers or anyone on the team, and Unify contacts nobody on it), where Feed challenges are turned on, each challenge (what to play, who was challenged, and only whether each person took it, worked out from their own play; never a score; seen by everyone on the family Feed, with a Spark's or Study set's name shown only to people who can open it; a count of the challenges each person posted, kept two days only to limit them to 20 a day), birthday wishes (sealed from the birthday person until their birthday), and emergency cards (allergies, medications and similar details a parent enters).
• Competitions (Sports): a competition weekend's name, division and level, place, days and each of its times (on the family calendar like any practice or game), the scores for each day (seen by the parents and the kid on the team), the final placement (a 1st place can post a win on the family Feed, like a game win, when automatic wins are on), fees and tickets with how many and what each costs (parents only), and the hotel: its name, address, check-in and check-out and confirmation number, seen only by the parents, never by kids, helpers or anyone on the team. Its times and place go only where any calendar event's do (a connected Google or Outlook calendar, and the map and weather look-ups for its place); scores, fees and the hotel are never sent anywhere. Deleting it takes its times, scores and hotel with it.
• Discover (if you add it): your hub's Discover settings (on or off, how stories reach each kid, each kid's reading level and the topics you block), which stories a parent approved or skipped for each kid, the stories each person saved, and any “Something's wrong?” reports (the reason and an optional note). The stories themselves are written and checked by Unify, the same for everyone. Unify's owner sees reports only as the story, the reason and how many people sent one, never who sent it or their note. Nothing about your family is sent anywhere for Discover.
• Location, only if switched on: location sharing is off by default. When a parent turns it on for a person, Unify keeps only that person's latest spot, updated when they open Unify, and forgets it when it's turned off. A kid's location is only shown to parents. A family home address (optional, parents only) is used for leave-time alerts and for the drive time on parents' Sports pages.
• Drive time and team logos on Sports (parents only): the Next game card and a practice or game's page show the drive from your home address and when to leave. Unify keeps the last estimate for each event (the minutes, the place it was for, your home's map position rounded to about 100 meters, which service worked it out and when), seen only by the parents, never by kids or helpers. Working it out sends just two map points (home and the field), no names, to Apple Maps with the time you'd leave for live traffic, or to TomTom or Google Maps if Apple doesn't answer, or to OSRM without live traffic. Team logos are pictures a parent adds (our team's and the other teams'); they're kept privately in Unify's storage for your family (kids see them only with Sports on; helpers never), never fetched from GameChanger or anywhere else, and removed with the team or your family's account.
• Messages: what you write in family chats and one-on-one chats, reactions, links to things in Unify you share (a Feed post you send goes as a link that says who posted it; its words and photos stay on the Feed, where only people who can see the Feed open it), and how far each person has read. Only the people in a chat see it; no one outside your family can message you. Messages are off for each kid until a parent turns them on and chooses who that kid can message. Parents can read a kid's one-on-one chats only while that kid's “Parents can read” switch is on (on for 12 and under unless a parent switches it off, off for 13 and up), and the kid is told which way it's set. A chat between two kids can be read by parents only while both kids' switches are on. Kids have quiet hours (8 PM to 7 AM unless a parent changes them) when they can't send messages and get no message alerts. A new message makes an alert for the people in that chat, showing who wrote and the start of the message (on a phone, that goes through the phone's notification service like any other alert). Helpers never see messages.
• Spin & Know (the family trivia game): each game's moves and scores, the questions each person has seen and answered (so they aren't repeated and the Know-it Book can show what was learned), sparks, Family Challenge results, and any thumbs or “something's wrong” reports on a question. The questions are written and checked ahead and ship with Unify; nothing about a game is sent to any outside service. When a person is removed, their games, answers and Know-it Book go with them. Players see their own game; a parent who may read a kid's chat can watch that kid's game; the Family Challenge shows who played, never who got what. A turn alert works like a message alert.
• Notes you send us: when a grown-up uses Settings › Send us a note, Unify keeps what kind of note it is, the words written, and four plain facts: which of Unify's pages it was sent from (never anything on it), the app version, phone app or browser, and the screen size (phone, iPad or computer). Only Unify's owner reads notes, without your family's name or yours; your sign-in email is shown to the owner only if you tick “You may reply to me”. Kids and helpers can't send notes. A note is deleted with your account, or when you leave that household, and isn't part of Download my data.
• Training (workouts): each kid's sports and goals, test results and levels, the sessions they finish and the points they earn; never anything about weight or calories. A kid sees their own; parents see their kids'. A parent can film or pick a short clip showing an exercise: it's kept in your family's private storage, plays for your family's grown-ups and kids with Training on (never helpers or anyone outside your family), and goes when the parent removes it or your family is deleted. A parent's “Watch how” web links are for grown-ups only; kids can't see them. YouTube videos on exercises play for grown-ups only and are described further down. A grown-up can train too: their own sports, goals, tests and sessions are theirs alone. No other grown-up, kid or helper in your family sees them, and they never earn points.
• Reports and blocks: when someone reports a kid's post, comment or chat message, Unify keeps who reported it, the reason, an optional note and a copy of the words (so parents can see what it was even after it's removed). The family's parents see reports, and each report makes an alert for them that shows the first words of what was reported (on a phone, through the phone's notification service like other feed alerts); the kid it's about isn't told who reported it. Who you've blocked is seen only by you (and, for a kid, their parents); the person blocked isn't told. A block covers the Feed, chats and Spin & Know: no one-on-one chat or game between the two, and the blocked person's messages and alerts stay away from whoever blocked them. Kids can block other kids, not parents; parents can't block their own kids (they use Messages settings instead). Both go when the reporter or the person they're about leaves the family.
• Trusted helpers and babysitter links: a parent can invite a helper (like a grandparent, with their own email and password) or make a babysitter link (no sign-in). Either one sees only what the parent picked, for the kids the parent picked: for example emergency cards, the calendar, chores or schoolwork. A finished yearbook a parent shares with helpers is seen by helper accounts (never babysitter links). Helpers can never change anything, and never see messages, the feed, receipts, notes or locations. Anyone who has a babysitter link can open it until it ends (at most 90 days) or a parent turns it off, so only send it to the sitter. Parents turn off a link or remove a helper in Settings → Trusted helpers.
• Phone notifications: if you allow them, the address your phone gives for delivering notifications, and your notification settings.
• The phone app asks before using your camera (scanning barcodes, taking photos and videos: for posts, receipts, food labels, schoolwork, training clips, profile pictures and Smart Capture), your photos (choosing pictures and videos to post, pictures of receipts and labels, and photos for Smart Capture), your microphone (only the sound of a video you take to post or a training clip you film) or your location (weather, leave-time alerts, location sharing), and only uses them when you use those features.
• Your phone: Unify saves copies of some pages on your phone so they open without signal. They're erased when you sign out. Changes you made with no signal that haven't been sent yet stay on the phone, keeping only what's needed to send them (for a grocery add, the item's name), until you sign in there again and they send; nobody else who signs in sees or sends them. If that list of waiting changes is ever damaged, Unify tells you and copies it to a recovery copy on the phone instead of deleting it; clearing Unify's website data on the phone removes it.

Who else handles it, and why

Unify uses a few services to work. Each gets only what it needs:

• Supabase stores the information and photos and handles sign-in. Vercel runs the website and measures how fast its pages load (for each visit: the page address, load and tap timings, and the kind of device and browser; never names, family information or what's on the screen). GitHub, where Unify's code is kept privately, also keeps a weekly backup copy of the information, photos, videos and files, locked with a password only the app's owner has, for up to 8 weeks.
• Anthropic (Claude), only for the features listed here and below (receipts, food labels, book pages, the ✨ assistant and morning briefing, Smart Capture, What can I make?, and Snap to cards); inside the phone app only Smart Capture, and only after you allow it there (see below). Everything else here works on the website only. Reading a receipt (the receipt image, today's date and the names of your receipt categories are sent, with Unify's own list of dinner ingredients when you use Meals, so it can tell which lines are eggs, milk or chicken; the prices it learns are kept with that receipt, seen by whoever can see the receipt, and deleted with it), reading a food label you photograph when a product isn't in the food database (just the label photo), reading a homeschool book's contents page or lesson schedule you photograph (just those pages and the book's title; the photos aren't kept) or its front cover when a search finds nothing (just the cover photo, not kept; the title, level and publisher read from it are then searched for like words you type), and the ✨ assistant (your question and the parts of your family's schedule, chores, schoolwork, meals and, for parents, spending that you can already see). The assistant never gets emergency cards, the feed, messages, profiles, notes or locations, and chats aren't saved. If you turn on the morning briefing, Claude writes a short summary of your day once each morning from the same things; it's kept with your account so Today opens fast, only you can read it, and it goes when your account does. Under Anthropic's commercial terms this isn't used to train their models.
• Google or Microsoft, only if you connect your Google or Outlook calendar: Unify adds its own calendar to your account and keeps events in step both ways, and shows the calendars you pick.
• GameChanger, only if a parent connects a team schedule: Unify's server reads that team's calendar link (the “Schedule Sync” link you paste) about every 20–30 minutes and copies its games and practices onto your family calendar. The link is stored locked, never shown again or shared, and nothing about your family is sent to GameChanger. Unify never asks for your GameChanger password.
• YouTube (Google), only for Training videos a parent adds to an exercise, and only for grown-ups: kids' accounts never load YouTube. Where a video would be, a kid sees the exercise drawing and “Ask a grown-up to watch this video with you.” Unify keeps just the video's short id and its title (the title is shown to grown-ups only). To check a pasted link, Unify's server asks YouTube for that video's title, sending only the video's id. Nothing loads from YouTube until a grown-up taps Play; then YouTube's player script comes from youtube.com and the video from YouTube's privacy-enhanced mode (youtube-nocookie.com). Google receives that the video was played, along with the device's internet address and browser details, under Google's own privacy policy, and YouTube may show its ads in the video. Unify sends Google no names or family information. The player can't open YouTube or other videos: Unify's own buttons play, pause and restart it, and Unify covers it when it's paused or done.
• OpenStreetMap finds places you type (for posts and event places), names the town around your home for Today's weather card (from your home's map position rounded to about a kilometer), shows maps, and lists grocery stores near your ZIP code (only the ZIP code is sent; Zippopotam.us turns it into a map position, and that position goes to Google Maps or to OpenStreetMap's free services, including Photon by Komoot and the public Overpass servers, to list stores; Kroger and Walmart get the ZIP code to list their stores near you). Apple Maps, TomTom, Google Maps or OSRM work out drive times from a starting point to an event's place (just the two points and the time you'd leave, no names). When a grown-up types in an address box (the home address, an event's place, a hotel), what they type is sent to Apple Maps to suggest matching addresses, with the language and, when a home address is saved, your home's map position rounded to about a kilometer so nearby matches come first. Unify doesn't keep or log what you type for this; it only counts how many suggestions were asked for each day. The list shows a small Apple map of the highlighted address, drawn by Apple from that address's map position: the picture's web address carries that position, and your device loads it through Unify's own server on its way to Apple (so, as with event maps, the hosting logs can hold it for a short time). Unify doesn't save it. Kids' and helpers' pages don't ask for suggestions. An event's page shows a small map of its place. On grown-ups' event pages the picture comes from Apple Maps: Unify sends Apple only that place's map position and the picture's size and colors (light or dark), with no names, event details or family information (your device loads the picture from Apple, so Apple also sees its internet address, as any website would; the request passes through Unify's own server first, so its hosting logs can hold that map position for a short time). On kids' pages (and whenever Apple's maps aren't set up or can't draw the picture) the picture loads from OpenStreetMap's map servers, which see roughly where that place is. Either way, the map picture only shows for places we can tell aren't your home: when your home address is saved and the place is more than 150 m from it (without a saved home, no event gets a map picture), and “Open in Apple Maps” hands the place to Apple Maps only when you tap it. Open-Meteo gets a place's position for the weather forecast, and the National Weather Service (weather.gov) gets the same position to list official weather alerts there. For the weather at the top of each page, that position is your family's home rounded to about a kilometer, or (if you choose “Use where I am”) your phone's position rounded the same way; it's used for the lookup only and not saved. So official warnings (like a tornado warning) can reach grown-ups' phones, Unify's server also asks the National Weather Service about your family's home, rounded the same way, every couple of minutes. GIPHY gets the words you search for GIFs. When you track a package, EasyPost (a package-tracking service) gets only its tracking number (and the carrier, when Unify can tell): no names, addresses or emails. It sends back where the package is, which Unify keeps with city and state only, and, when the carrier gives them, the shipping service, the weight, who signed for it and the city and state it came from and is going to (never a street). A package's page can show a map of its whole trip, drawn by Apple (Apple Maps for websites): your device loads it from Apple with the map positions of the towns on the trip, including where it's going (usually your own town, never the street), and no names or tracking numbers (Apple also sees your device's internet address, as any website would). To place those towns, Unify's server asks OpenStreetMap's Nominatim for each town once, by its city and state alone, and keeps its position in a shared list of towns that isn't linked to any family or package. If you turn on Packages email and forward a shipping email to your private address, CloudMailin (an email-receiving service) receives that one email and passes it to Unify (CloudMailin may keep a short delivery record, like the sender, recipient and subject, on its side). Unify reads it only for tracking numbers and the shop's name, keeps those, and throws the email away; it's only accepted from your own sign-in email or addresses you add. If you set up automatic forwarding from Gmail, CloudMailin receives each email your Gmail filter forwards, and Gmail's confirmation email, the same way (and may keep the same short record of each on its side: sender, recipient and subject). From Gmail's confirmation Unify keeps only its code and the Gmail address that asked, for a day, never the email. Automatic forwards are accepted only from your own Gmail address once Gmail confirmed it and you turned it on, and Unify takes tracking numbers from them only when the email came from a shop or carrier it knows (other emails are skipped, not kept). Unify never connects to your inbox. When you paste a tracking link or share one to Unify from your phone, Unify keeps only the tracking number in it, never the rest of the link or text. “Share tracking link” on a package hands the carrier's tracking page to your phone's share sheet, and you choose where it goes. When you paste a recipe link, that recipe website gets a request for that page (nothing about your family), and the recipe's picture loads from it. When a grown-up uses Smart Capture, Anthropic (Claude) reads the photos, PDF or text they chose, with today's date, the hub's time zone and the first names of the people in the hub that's open, so it can tell when something is and who it's for; nothing else about your family is sent. Unify keeps the list Claude sends back, with the few words each item came from (at most 200 letters each), so you can check it: a list nothing was added from goes 14 days after it was read (or after you last kept it for later), and one you added from or took back goes 30 days after you added from it or took it back. Unify never keeps the photo or PDF. Nothing is added until you check it and tap Add. Kids can't use Smart Capture. Speaking uses your phone's own typing: no sound is recorded or sent. When you use What can I make? (Meals › Kitchen), Anthropic (Claude) looks at the fridge or pantry photos you chose, with Unify's own list of dinner ingredients, to say which of them it sees; nothing about your family is sent, and the photos aren't kept by Unify (only the list you check, and only if you add it to your pantry). When a grown-up uses Snap to cards (Study Cards), Anthropic (Claude) reads the photos or notes they chose and suggests study cards; nothing about your family is sent, the photos aren't kept by Unify, and nothing is saved until the grown-up checks the cards and saves the set. Kids can't use it. Open Library (the Internet Archive's free book catalog) gets the words you search for a homeschool book or a book to read, or the ISBN you scan or type, to find its title, edition, cover and (for reading) its readers' average rating; nothing about your family or your kids is sent, and book covers load from Open Library. Google Books gets the same thing when you look for a homeschool book: the words you search for or the ISBN you scan or type, sent from Unify's server, to find its title, author, publisher and page count; nothing about your family or your kids is sent, and no pictures load from Google. Open Food Facts gets the barcode you scan or the words you search for products. Kroger gets the ZIP code from dinner setup and a scanned barcode, the name of an item on your grocery list (like "milk"), or the plain name of a dinner ingredient (like "boneless skinless chicken breasts"), to show the price and aisle at a store near you. Walmart gets the ZIP code and a product's barcode, to say whether it's sold near you, and (when Walmart is one of your stores) the plain name of a dinner ingredient, to show Walmart.com's price for it. When you tap Shop with Instacart,Instacart gets the names and amounts of the things on your list (like "Milk, 2 gallons") so it can show them at a store you pick there; you choose the store, see its prices and check out on Instacart, under Instacart's own privacy policy. Nothing else about your family is sent. Unify keeps a shared copy of public product facts (what Open Food Facts says about a barcode), of what Kroger or Walmart said about it near a ZIP code (sold there, price, aisle), and of what dinner ingredients cost at the Kroger near a ZIP code today, so pages open faster; it never records who looked them up. To tell a store's own brand (like Publix brand), Unify uses USDA's public product list (FoodData Central), copied into Unify once a month; nothing about you, and no barcode you scan, is sent to USDA. Your food preferences, scans and "found it here" marks stay with your family. Unify keeps a history of the products each person opens (the barcode, its score and when) to show how your scores are trending; each person sees their own, in a family parents see the family's, and clearing a recent scan clears its history.
• Phone notifications are delivered by Apple (the iPhone app), Google Firebase (the Android app) or your browser's notification service. In the apps, Apple and Google receive each notification's short title and text so they can show it on your phone (sent over an encrypted connection); in a browser the contents are encrypted so the service can't read them.

We don't share your information with anyone else unless the law requires it.

Kids

Kids' logins are made and controlled by a parent, who chooses what each kid can see and do and can reset or turn off a kid's login at any time. Kids can only reach their own things and family-wide events, never a sibling's. Unify never shows kids ads of its own or asks them for contact details. Kids' accounts never load YouTube, so the YouTube Training videos a parent adds (which may show YouTube's ads) play for grown-ups only.

Parents' choices for their kids

Here “parent” means a parent or legal guardian, and “kid” means a child under 18 using a login a parent made. A kid's login exists only because a parent made it. When making it, the parent confirms they're that kid's parent or legal guardian and agrees to this policy for them; Unify keeps who agreed, when, and to which version. Unify collects from a kid only what the kid or their parents add while using it (the things listed above); a kid never gives an email, phone number or address.

• See it: parents see their kids' schoolwork, grades, points, chores, calendar, emergency cards, scans and location (if sharing is on). A kid's chats are readable by parents while that kid's “Parents can read” switch is on (on for 12 and under unless a parent turns it off).
• Change or delete it: parents can edit or remove a kid's things, reset or turn off their login, and remove the kid (Kids → their name → Settings), which permanently deletes the kid's login and everything kept for them. Or email us and we'll do it.
• Outside services: the ✨ assistant is off for each kid until a parent turns it on, and it then gets only what that kid can already see. A kid's look-ups (a barcode, a book search, a GIF search) send the services listed above only what that look-up needs, never the kid's name or account. A parent can say no to all of these by leaving the assistant off and switching off the plug-ins they don't want for that kid. Smart Capture and Snap to cards are for grown-ups only; kids can't use them.
• In the phone app (App Store and Google Play), nothing is sent to Anthropic (Claude) except Smart Capture, and only after you allow it on its first use there; you can turn that off any time in Settings › Privacy › Smart Capture in the app (turning it off removes nothing you already added). Receipt reading, label photos, book pages, What can I make?, Snap to cards and the ✨ assistant work only on Unify's website.

How long things are kept

• What you add is kept while your account is open, so your family's history stays there, until you (or a parent, for a kid) delete it.
• Deleting a thing, a kid or an account removes it right away. Copies in the locked weekly backups are gone within 8 weeks.
• A shared location keeps only the latest spot and is forgotten when sharing is turned off. Photos and PDFs for Smart Capture, What can I make? and book pages aren't kept. Smart Capture's list (with the few words each item came from) goes 14 days after it was read or last kept for later if nothing was added from it, and 30 days after you add from it or take it back. Assistant chats aren't saved (each day's morning briefing, if you turned it on, is kept for you until your account is deleted).
• Download my data keeps one line per person in each hub: when they last started a download (so it runs once every 10 minutes). It's replaced by the next download and goes when the person or the hub is deleted. The file itself is never kept by Unify.
• Read notifications in your bell are deleted once they're 90 days old, and unread ones at 180 days.
• Pages saved on your phone for no signal are erased when you sign out. Unsent check-offs stay on the phone, hidden from anyone else, until you sign in there again.

Who runs Unify

Unify is an independent app made by a family.

Keeping it safe

Information travels encrypted, and the database itself checks every request so a person can only reach their own family's information. Photos, handed-in schoolwork and receipts are stored privately and shown through short-lived links. Calendar sign-ins are locked with a separate key.

To run Unify, its owner sees totals only: how many households and people use it, how many used it lately and which parts they add. Never a family's name, members or anything you keep. Only the owner's account can open that page, after typing its password again and a code from its authenticator app; each opening and change there, and a look at it at most once an hour, is written to a log the app can't change or erase. The owner also sees, as counts, how many of Unify's own jobs went wrong (phone alerts, calendar and team-schedule syncs, reading receipts, package tracking). When a page can't load, Unify counts it for that page (which of Unify's pages, never anything in it about you, the app version and which household it happened in, only to count how many); those counts go after 30 days.

Downloading your information

A grown-up can download everything they can see in a hub as one ZIP file: Settings → Download my data. It holds spreadsheets (CSV) and JSON files with a README, plus the photos and files (large collections come in a few parts). The file is put together in your own browser from what your login is allowed to see, so kids' things are included for parents (with their login usernames, never their passwords), and another grown-up's private things are not. Sign-in keys, invite codes and phone addresses for notifications are left out on purpose. Unify keeps only the time you last started a download (so it can run once every 10 minutes per person, across all your hubs), never a copy of the file. Kids and trusted helpers can't download. Download your data here.

Deleting your information

Your information is kept until you delete it. Anyone can delete their own posts and many other things as they go. To delete your account, open Settings → Delete my account (helpers: Delete my account at the bottom of the page). If you're the last parent, this erases the whole family, including every photo and kid login. In a household, your own receipts and their photos, reading, and events and tasks just for you go with you. Deleted information may remain in our hosting provider's routine backups for a short time, and in the locked weekly backups for up to 8 weeks, before they're replaced. You can also delete your account here.

Questions

A contact email will be listed here. If this policy changes, the date at the top changes too. The rules for using Unify are in the Terms of Service.