Tribe-OS Privacy Policy

Effective Date: July 24, 2026
Last Updated: August 18, 2026

1. Introduction

Tribe-OS ("Tribe-OS," "we," "us," or "our") is a family management platform available at tribe-os.com and through our mobile application (collectively, the "Service"). The Service is operated by TRIBE-OS, a company organized under the laws of Australia, with a registered address at 10 Canny Ct, Altona Meadows, Melbourne 3028, Australia ("Company").

This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use the Service. Because Tribe-OS is offered to a global user base, this Policy is written to address multiple legal frameworks, including the EU/UK General Data Protection Regulation ("GDPR"), the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), Brazil's Lei Geral de Proteção de Dados ("LGPD"), Canada's PIPEDA, and other applicable data protection laws.

By using the Service, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use the Service.

2. Who This Policy Covers

Tribe-OS is used by households. An adult ("Family Admin") registers the family account and may invite other members with their own logins, or create managed child profiles — display-only profiles with no login, no email address, and no personal information beyond a chosen display name and colour. This Policy applies to the Family Admin, invited members, and the handling of managed child profiles as described in Section 8 (Children's Privacy).

3. Information We Collect

3.1 Information You Provide Directly

• Account & profile information: name, email address, optional phone number, password, and profile photo — for members who register their own login. Managed child profiles hold no personal information: only a display name and a colour chosen by the Family Admin.
• Family & household data: family group structure and roles/permissions configured by the Family Admin.
• Chore Core data: chores created, assigned, completed, and any associated point values or rewards.
• Provisions data: shared shopping lists and pantry/inventory entries.
• Finance data: budgets, expenses, and financial entries you choose to log in the app. Finance is a self-managed budgeting tool — we do not access external bank accounts unless you separately connect one through a supported integration.
• Payment information: collected when you subscribe to a paid plan. Payment details are processed by our third-party payment processor(s); Tribe-OS does not store full card numbers on our own servers.
• Communications: support requests and feedback you send us, and messages exchanged between family members within the app.

3.2 Information Collected Automatically

• Device & usage data: device type, operating system, unique device identifiers, IP address, browser type, app version, crash logs, and feature-usage patterns.
• Location data: Tribe-OS does not collect, request, or store location data. The Service has no location-tracking features and never asks for a location permission on your device.
• Biometric authentication: Tribe-OS supports optional biometric app-lock (e.g., Face ID, Touch ID, Android biometric APIs). This runs entirely on your device via the operating system's own biometric APIs. Tribe-OS does not receive, transmit, collect, or store biometric data, templates, or identifiers on our servers — the device only reports a local pass/fail authentication result to the app.
• Cookies and similar technologies: used on our website for functionality, analytics, and (where enabled) advertising, as described in Section 11.

3.3 Information from Third Parties

• Payment processors: transaction confirmations and limited billing metadata.

4. How We Use Information

We use personal data to:

• Create and administer accounts and family groups;
• Provide core features (Hearth, Chore Core, Provisions, Finance, Family & Trust);
• Process payments and manage subscriptions;
• Send transactional push notifications and emails you enable (Section 12);
• Maintain security and prevent fraud or abuse;
• Comply with legal obligations; and
• Improve the Service, including through aggregated or de-identified analytics.

We do not use family content (chores, lists, budgets, messages) to train generative AI models, and we do not sell personal data to third parties for their own marketing purposes.

5. Legal Bases for Processing (EEA/UK Users)

Where GDPR/UK GDPR applies, we rely on:

• Contract — processing necessary to provide the Service you signed up for.
• Consent — for optional features such as push notifications and non-essential cookies/marketing. You may withdraw consent at any time.
• Legitimate interests — for security, fraud prevention, and core service analytics, balanced against your rights.
• Legal obligation — where processing is required by applicable law.

6. How We Share Information

• Within your family group: Chore Core, Provisions, Finance, and calendar data are visible to members with the relevant permissions, as configured by the Family Admin.
• Service providers, under contractual confidentiality and data-processing obligations, including: application infrastructure and hosting — Tribe-OS is built and hosted on the Base44 platform (Base44, Inc., a Wix company); payment processing providers; cloud storage and analytics providers; communications providers (for push notifications and SMS delivery).
• Third-party integrations you authorize, governed by that provider's own terms.
• Legal and safety reasons: to comply with law, valid legal process, or protect the rights, property, or safety of Tribe-OS, our users, or the public.
• Business transfers: in connection with a merger, acquisition, financing, or asset sale, subject to standard confidentiality protections.

We do not sell personal data as "sale" is defined under the CCPA/CPRA, and we do not share personal data for cross-context behavioral advertising.

7. International Data Transfers

Tribe-OS may process and store data outside your home country, including in the United States. Where we transfer personal data out of the EEA, UK, or Switzerland, we rely on recognized mechanisms such as the EU Standard Contractual Clauses, adequacy decisions, or the EU–U.S. Data Privacy Framework (and its UK/Swiss extensions), as implemented through our service providers' data processing agreements.

8. Children's Privacy

Tribe-OS does not collect personal information from children, and children cannot register for or log in to the Service.

• Managed child profiles only: a Family Admin may create a managed child profile so the household can assign chores and track reward points. A managed child profile is display-only: it has no login, no email address, no phone number, no date of birth, and no other personal information — only a display name and a colour chosen by the Family Admin.
• No data collected from children: because child profiles have no login, no data is ever collected directly from a child. All content associated with a child profile (chore assignments, reward points, calendar entries) is entered and controlled by adult members of the family group.
• No advertising: we do not use any household data for behavioral advertising, and content in your family group is never visible outside it.
• Parental controls: a Family Admin may rename, edit, or delete a managed child profile and all its associated records at any time from the Family page, or by contacting legal@tribe-os.com.

9. Data Retention

We retain personal data for as long as the relevant account or family group is active, and for a reasonable period afterward to meet legal obligations, resolve disputes, and enforce our agreements. When a Family Admin deletes the family account (Trust & Security → Data & Legal), every record belonging to the family group — schedules, chores, shopping lists, expenses, reports, notes, and profiles — is erased immediately, and any active subscription is cancelled. Limited billing records may be retained where legally required (e.g., financial transaction records).

10. Your Privacy Rights

10.1 EEA / UK / Switzerland (GDPR / UK GDPR)

You have the right to access, rectify, erase, restrict, or object to processing, and the right to data portability. You may withdraw consent at any time without affecting prior lawful processing, and you may lodge a complaint with your local supervisory authority.

10.2 California (CCPA/CPRA)

California residents have the right to know what personal information is collected, to request deletion or correction, to opt out of "sale" or "sharing" (we do not sell or share personal information as defined by the CCPA/CPRA), to limit use of sensitive personal information, and to be free from discrimination for exercising these rights.

10.3 Other Jurisdictions

We extend comparable rights, where applicable, to users in Brazil (LGPD), Canada (PIPEDA), Australia, and other jurisdictions with data protection laws. Contact us using Section 15 to exercise these rights; we will respond within the timeframe required by applicable law.

11. Cookies and Tracking Technologies

Our website uses cookies and similar technologies for essential functionality, analytics, and (where enabled) advertising measurement. You can manage preferences through our cookie settings tool and your browser settings. Where required (e.g., in the EEA/UK), we obtain consent before setting non-essential cookies.

12. Push Notifications & Email

With your consent, we send push notifications and emails related to chores, bills, reminders, and family activity. You can opt out of push notifications at any time through Trust & Security → Permissions or your device settings, and manage email reminders in-app.

13. Security

We use administrative, technical, and physical safeguards designed to protect personal data, including encryption in transit and access controls, and we rely on the security practices of our infrastructure providers. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

14. Third-Party Links and Services

The Service may link to or integrate with third-party services (e.g., payment processors). We are not responsible for their privacy practices; please review their own privacy policies.

15. Contact Us

TRIBE-OS
10 Canny Ct, Altona Meadows, Melbourne 3028, Australia
Email: legal@tribe-os.com

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last Updated" date and, for material changes, provide additional notice (e.g., in-app or email) as required by law.