Privacy Policy

The short version

• Parents sign in with Google. We receive your name, email address and profile picture to create your account.
• If you choose to connect Google Calendar, we read the calendars you pick and write back the events your family adds, changes or deletes in Base Command.
• We use Google data only to run those features. We never sell it, never use it for ads, and never use it to train AI models.
• Your family’s information is visible only to the parents in your family and to the tablets you pair.
• You can disconnect Google Calendar at any time, export your data, and ask us to delete everything.

1. What we collect

1.1 Information from Google sign-in

Parents sign in with their Google account. With your permission (the openid, email and profile permissions), Google shares your Google account ID, name, email address and profile picture with us. We use them to create and recognize your parent account, to show who is signed in, and to show the other parents in your family who has joined.

1.2 Google Calendar data (only if you connect it)

Connecting Google Calendar is optional. If you connect it, we access your calendar list and the events on the calendars you turn on. Section 3 describes exactly what we access and what we do with it.

1.3 Information you add about your family

To run your family’s Base Command, parents enter information such as:

• your family’s name;
• the names, nicknames (“callsigns”), avatars, colors and grade levels of family members;
• kids’ 4‑digit PINs and the Command PIN;
• duties (chores), schedules and completion history;
• homeschool subjects, courses, lessons, reading logs and progress;
• Merits, ranks, medals, rewards, reward requests, trades and objectives;
• calendar events created in Base Command; and
• settings such as your time zone.

Kids add to this when they use the wall tablet, for example by checking off a duty or requesting a reward.

1.4 Paired tablets, sessions and codes

When you pair a wall tablet, we store the name you give it, when it was paired and when it was last used. Each signed-in phone, browser or tablet has a session (see section 7). We also keep short-lived codes for inviting another parent (good for 7 days) and pairing a tablet (good for 10 minutes).

1.5 Technical information

Like most online services, our hosting provider, Cloudflare, processes technical information for each request, such as IP address, browser type, the address requested and the time. We use request and error logs only to keep Base Command running and secure.

We may also use Cloudflare Web Analytics to count page views and measure how quickly pages load. It doesn’t use cookies, doesn’t track you across other websites, gives us only aggregated statistics, and never includes your family’s data or your Google data.

1.6 Messages you send us

If you email us, we receive your email address and whatever you include in your message.

What we don’t collect: we don’t use advertising trackers or cross-site tracking, we don’t collect your location, and we don’t access your Gmail, contacts, Drive files or anything else in your Google account beyond what this policy describes.

2. How we use information

We use the information above only to:

• provide Base Command’s features: your family’s calendar, duties, schoolwork and rewards, kept in sync across every screen;
• sign you in, and keep your family’s data separate from every other family’s;
• sync with Google Calendar, if you connect it;
• keep Base Command secure, prevent abuse and fix problems;
• respond when you contact us; and
• tell you about important changes to Base Command or to this policy.

We don’t sell your information, we don’t use it for advertising, and we don’t build profiles of you or your children for any purpose outside Base Command.

3. Google user data

Base Command uses Google APIs for two things: signing parents in and, if a parent chooses, syncing Google Calendar. This section describes exactly what we access, how we use it and how we protect it.

3.1 What we access

Google permission	What Base Command accesses and why
Sign-inopenid email profile	Your Google account ID, name, email address and profile picture, to create your parent account and recognize you when you sign in.
See and download any calendar you can accesshttps://www.googleapis.com/auth/calendar.readonly	Your list of calendars (names, colors and IDs), so you can choose which calendars appear in Base Command. For each calendar you turn on, the events from 31 days ago to 180 days ahead: title, start and end time, whether it’s all-day, location, description (the first 2,000 characters, as plain text) and event IDs. These events are shown on your family’s calendar in Base Command.
View and edit events on all your calendarshttps://www.googleapis.com/auth/calendar.events	Events that your family creates, edits or deletes in Base Command. When an event is created in Base Command, we add it to the Google calendar you choose. When an event is edited or deleted in Base Command, including an event that came from Google, we make the same change in Google Calendar.

Google may include other details with an event, such as its guest list. Base Command discards those details and doesn’t store them.

So that calendar sync keeps working when nobody has the app open, Google gives us a refresh token. We encrypt it with AES-256-GCM before storing it, and we use it only to sync your calendar.

3.2 How we use it

We use Google user data only to provide and improve the user-facing features described above: signing you in, showing your calendar events in Base Command, and keeping Base Command and Google Calendar in sync. Base Command checks Google for changes every 15 minutes, and whenever someone in your family asks it to sync.

3.3 Who can see it

Events from the calendars you turn on are shown to your family inside Base Command. That includes the other parents you invite and anyone who can see your paired wall tablets, which are often in a shared room. Anyone using your family’s tablets or signed-in devices can also add and change events, and those changes are written to your Google Calendar. Choose your calendars with that in mind; you can turn any calendar off at any time. Your name, email address and profile picture are visible to the other parents in your family.

3.4 What we never do with Google data

• We don’t sell it.
• We don’t use it to serve ads, including personalized, retargeted or interest-based ads.
• We don’t transfer it to anyone else except as necessary to provide Base Command (for example, to our hosting provider, Cloudflare, which stores it for us), to comply with applicable law, or as part of a merger, acquisition or sale of assets after notifying you.
• We don’t use it to develop, improve or train generalized artificial intelligence or machine-learning models.
• We don’t use it to determine creditworthiness or for lending.
• No one at Base Command reads your Google data unless you give us permission for specific data (for example, to help with a support request), it’s necessary for security purposes such as investigating abuse, or it’s required to comply with applicable law.

3.5 Limited Use

Base Command’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3.6 Disconnecting and revoking access

• In Base Command: go to Command → Settings → Google Calendar and choose Disconnect. We immediately delete the stored token and remove every event that came from Google from your family’s Base Command. Events your family created in Base Command stay in Base Command and in your Google Calendar.
• In your Google Account: go to myaccount.google.com/connections, choose Base Command and remove its access. Calendar sync stops. To also remove the events already copied into Base Command, disconnect in the app as well, or ask us to delete your data.

When you turn a calendar off, or an event is deleted in Google or falls outside the sync window, its copy is removed from Base Command at the next sync.

4. How we share information

We share information only in these cases:

• Within your family. The other parents in your family and your paired tablets can see your family’s information, as described above.
• Service providers. Cloudflare hosts Base Command and stores its data on our behalf. Google provides sign-in and, if you connect it, Google Calendar, at your direction.
• Legal reasons. If the law requires it, or if it’s necessary to protect the rights, safety or property of our users, the public or Base Command.
• Business transfers. If Base Command is part of a merger, acquisition or sale of assets, information may be transferred as part of that deal. We’ll tell you before that happens, and this policy, including the limits on Google data, will continue to apply to the information transferred.

We don’t sell or rent personal information, and we don’t share it for cross-context behavioral advertising.

5. Children’s privacy

Base Command accounts are for parents and guardians who are at least 18. Children don’t sign in, don’t have accounts, and aren’t asked for email addresses or other contact information. They use Base Command on a wall tablet their parent has paired, with a PIN their parent sets.

Information about children in Base Command, such as names, grade levels, chores, schoolwork and rewards, is entered and controlled by their parent and is used only to run that family’s Base Command. It is never used for advertising, and it isn’t shared outside the family except with our service providers as described above.

Parents can review and change their children’s information at any time in Command → Roster and the other Command screens. To have a child’s information deleted, email us (see section 9). If you believe a child has given us personal information without a parent’s involvement, contact us and we’ll delete it.

6. Storage and security

• Base Command runs on Cloudflare. Account information is kept in one database, and each family’s data is kept in its own separate database. Every request is checked so that a signed-in parent or paired tablet can reach only its own family’s data.
• All connections use HTTPS. Google refresh tokens are encrypted before storage, sign-in session tokens are stored only as one-way hashes, and Cloudflare encrypts stored data at rest.
• Each device keeps a working copy of your family’s data in its browser storage, so the wall tablet keeps working when the internet drops (see section 7).
• Your information may be stored and processed in the United States and in other countries where Cloudflare operates.
• No system is perfectly secure. If we learn of a security incident that affects your information, we’ll notify you as the law requires.

7. Cookies and local storage

• One essential cookie. The app uses a single cookie, bc_session, to keep you or your tablet signed in. Scripts can’t read it. A parent’s session ends after 60 days without use, and a tablet’s after a year without use, or when you sign out or unpair.
• Local storage. The app stores a copy of your family’s data, your signed-in profile and any changes that haven’t synced yet in the browser’s local storage on that device. Clearing the browser’s site data removes it.
• No tracking cookies. We don’t use analytics, advertising or tracking cookies, in the app or on this website. This website sets no cookies of its own; our hosting provider may set a strictly necessary security cookie to protect against bots and abuse.

8. How long we keep information

• Your account and your family’s data: for as long as your account is active, until you delete it or ask us to.
• Events copied from Google Calendar: only while they’re within the sync window on a calendar you have turned on. They’re removed at the next sync otherwise, and all of them are removed right away when you disconnect.
• The Google refresh token: until you disconnect Google Calendar or your family’s data is deleted.
• Sessions: until you sign out, or 60 days after last use for parents and one year for tablets.
• Invite and pairing codes: deleted after they expire (7 days and 10 minutes).
• Request and error logs: deleted automatically, generally within 30 days.
• After deletion: we remove deleted data from our live systems within 30 days. Copies in Cloudflare’s automatic backups expire within 30 days after that.

9. Your choices and rights

• Review and update. Parents can see and edit their family’s information in Command. Your name, email address and photo come from your Google account and update when you sign in.
• Export. Command → Settings → Data → Export JSON downloads a copy of your family’s data.
• Disconnect Google. Command → Settings → Google Calendar → Disconnect, or remove access at myaccount.google.com/connections.
• Remove a tablet. Command → Settings → Family & devices.
• Delete your account or your family’s data. Email support@familybasecommand.com from the email address on your account. Tell us whether to delete just your account or your whole family’s data. If you’re the only parent in your family, deleting your account also deletes your family’s data. We’ll confirm once it’s done, within 30 days.

Depending on where you live (for example, California, other US states, the European Union or the United Kingdom), you may have the right to access, correct, delete or receive a copy of your personal information, and the right not to be treated differently for using these rights. We honor these requests for every user, wherever they live. To make a request, email us. We may need to confirm that the request comes from you.

10. Changes to this policy

If we change this policy, we’ll post the new version here and update the date at the top. If a change is significant, especially to how we use Google data, we’ll tell you in the app or by email before it takes effect, and we’ll ask for your consent where the law or Google’s policies require it.

11. Contact us

Questions, requests or concerns about privacy: support@familybasecommand.com.

Base Command · familybasecommand.com