Effective date: November 2, 2026. This policy covers the Sαréal618 web app (open the app), the Sαréal618 Android app (which opens that same web app), and this website.
Sαréal618 is a family app. The Android app is for ages 13 and up: it has no kid mode. On the web app, kids under 13 can join only after a parent says yes by email and then links the kid's phone with a one-time code. A kid's journal stays on that kid's phone.
Short versionWho we areAges and profilesKids' privacy (COPPA notice)TeensOn your deviceOn our serverAndroid appCalendarsGoogle dataHelping Hand and AIWho gets dataNo trackingData retention policyDeletingYour rightsChangesContact
Sαréal618 is run by Charles-Gordon Stuart Eaton, an individual in Johns Creek, Georgia, USA, doing business as Sαréal618 ("we," "us"). See Contact for how to reach us.
Planned change of owner. Charles plans to form a limited liability company (LLC) to run Sαréal618. When that happens, the LLC will take over Sαréal618 and this policy, and it will keep following this policy. We'll post the LLC's name here and tell you in the app before the change takes effect. Your data, and your kids' data, won't be used in new ways without the notice and consent described in Changes.
The first time Sαréal618 opens, it asks for your birth year, without suggesting an answer. The year is saved on your device and used only to pick the right kind of profile (under 13, 13 to 17, or 18+). It isn't added to an account.
In the Android app, an under-13 birth year gets a stop screen ("Sαréal618 is for ages 13 and up."). Nothing is set up and no one is emailed. The Android app has no kid mode, no parent-consent letters, and no kid profiles.
| Profile | How you get in | What's different |
|---|---|---|
| Adult / parent (18+) | On your own. Signing in is optional. | Can create a family, connect calendars, and run the points shop. On the web app, a parent can also say yes to a kid joining. |
| Teen (13 to 17) | On your own. Signing in is optional. | No adult rooms, private by default, and an optional link to a family. |
| Kid (under 13, web app only) | Only after a parent says yes by email, then links the kid's phone with a one-time code. | No sign-in, no AI, no purchases, no public sharing, and no contact with anyone outside the family. Not available in the Android app. |
This section is our notice to parents under the US Children's Online Privacy Protection Act (COPPA). It applies to kids under 13 on the Sαréal618 web app. The Android app is for ages 13 and up and doesn't offer kid profiles.
Family data that syncs, including the kid's profile, chores, and points, is end-to-end encrypted with the family key on the phone. Our server stores only the locked copy and can't read it.
Schools: Sαréal618 is a family app. It isn't made for schools, and we don't have agreements with schools. Families can type school dates into their own calendar.
On the kid's phone, in the web app, a parent (18+) enters the kid's nickname, the parent's own email, and a 4-number parent code, then taps Email the parent a yes link. We email the parent a letter from Sαréal618. That letter is our direct notice: it says what Sαréal618 keeps for a kid, that none of it is sold, used for ads, or sent to an AI, and how to review or delete it. No kid profile and no phone code exist until the parent opens the link and taps Yes. We then send a second letter (the FTC's "email plus" method), and the one-time phone code appears only after the parent confirms that second letter. The code works once, for 15 minutes. If the parent taps No, nothing is turned on and the request is deleted right away. Every request, answered or not, is deleted 48 hours after it was made.
When a parent says yes, we keep a consent record: a scrambled (hashed) copy of the parent's email, the kid's nickname, the date, and the method ("email plus"). It doesn't hold the plain email address. It's how we show that a parent said yes.
What a kid can do after consent: chores and chore points, the points shop, the shared family calendar and lists, a journal that stays on the kid's phone, and short notes to linked parents.
A parent can, at any time, review a kid's synced information (not the on-device journal, which we never have), stop further collection, withdraw consent, or delete the kid's information. Signed-in parents can remove one kid in Settings → Linked kids: that deletes the kid's link, the kid phone's sync access, and the consent record right away, and the kid's phone stops syncing. The kid's items inside the encrypted family board are removed from the parent's phone, because only family phones can read them. You can also email support. We'll ask a question to confirm you're the parent.
We don't make a kid give more information than the activity needs. If we learn we've collected a kid's personal information without parent consent, we delete it.
How long we keep each kind of kid information is listed in our written data retention policy below.
These are saved in your browser's or app's local storage on your phone or computer. We don't receive them:
Microphone: the mic button uses your device's or browser's own speech recognition to turn speech into text. On many Android phones and in Chrome, that service is run by Google under Google's own policies. Sαréal618 gets only the text and never records or uploads audio. Front camera: some themes may use the camera only as a light sensor, reading tiny frames on the device. Nothing is saved or uploaded. Both need your permission.
Save a file on this phone downloads a copy (Sαréal618.json) to your device. That copy is yours, and we don't receive it.
| Feature | What we receive | Why |
|---|---|---|
| Sign in (adults and teens only; optional) | From Google: name, email address, and account ID, plus a sign-in session. Sαréal618 has no passwords. Sign-in is with Google only. | Account, family, journal copy. |
| Parent consent for a kid (web app only) | The parent's email, the kid's nickname and age band, and the consent letters (for up to 48 hours), then a consent record with a hashed copy of the email and the date. | To prove and respect consent (COPPA). |
| Family sync | Shared calendar, lists, kid profiles, chores, points, shop asks, and family notes, encrypted on the phone with the family key. Our server can't read it. | To keep linked family phones in sync. |
| Journal copy off this phone (adults and teens) | A copy of the journal, notes, pages, and events, only when you tap to keep one. It's protected by your sign-in but is not end-to-end encrypted. The lock code is never sent. | Restoring on another phone. |
| Calendar link (feed; adults) | The family plan you choose to publish as a calendar link. Anyone with the link can see those events. | So the plan shows in other calendar apps. |
| Calendar subscriptions (ICS, Apple, Yahoo, school) | The link you paste. Our server fetches it and passes it to your phone without keeping the events. | Most calendar links can't be read directly by a browser. |
| Reminders (if you turn them on) | A push token from your phone or browser, and the reminder schedule. | So reminders can ring when Sαréal618 is closed. Turn reminders off and the token is deleted. |
| Reports, feedback, and emails to us | What you send, a screenshot if you choose to attach one, and your email address if you give it. | Safety and support. |
Our hosting provider automatically records basic technical information (such as IP address, browser type, and time) to deliver the app and protect it from abuse. We don't use it for tracking.
Reporting a problem: use the in-app feedback form, or email support.
calendar.events) and see your calendar list (calendar.calendarlist.readonly). It never asks for full calendar access (the broader calendar scope), so it can't change your calendars' settings, sharing, or create or delete whole calendars. Microsoft Outlook / Microsoft 365 asks for Calendars.ReadWrite, User.Read, and offline_access.Sαréal618's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
Microsoft data gets the same treatment.
Helping Hand is coming soon and isn't on sale. Right now nothing in Sαréal618 is sent to an AI: the journal, calendar, chores, points shop, and the rest of the app work without one, and reading photos with AI is turned off.
When Helping Hand launches, for adults and teens only, it will use xAI's API as our AI service provider. What you type or say, and any picture you add, will be sent to xAI so it can produce the answer. Under xAI's API terms, xAI doesn't use that data to train its models and deletes it after 30 days; it keeps it for those 30 days to check for abuse, and may keep it longer if the law requires or it's flagged for abuse. A photo you add may show other people's names or details (for example, a printed schedule), so crop it to just what you need. We'll update this policy before Helping Hand launches, and it will never be on kids' profiles.
We don't sell, rent, or trade personal information, we don't share it for advertising, and Sαréal618 has no ads. Kids' information isn't disclosed to any third party. We use only these service providers, and only to run Sαréal618:
We may also disclose information if the law requires it, to protect someone's safety, or to stop fraud or abuse. If Sαréal618 is transferred, including to Charles's LLC, the new owner must follow this policy.
This is our written data retention policy. We keep each kind of information only for the reason listed, and nothing on our server is kept just in case. Automatic cleanup runs on its own: it's scheduled once a day, and it also runs (at most once an hour) whenever someone uses family or parent-consent features.
| Data | How long |
|---|---|
| Anything only on your device | Until you delete it (Delete my data, clearing app or site data, or uninstalling). |
| Account (adult or teen) | While the account is open. When you delete it, the server data is held for 30 days (so a mistake can be undone), then deleted for good automatically. |
| Parent consent requests (they hold the parent's email) | 48 hours after the request was made, answered or not. Deleted right away if the parent says No. |
| Consent record (hashed parent email, nickname, date, method) | While the kid is linked. Deleted right away when a parent removes the kid, or with the parent's account (after the 30-day hold). If the one-time phone code is never used, the record is deleted a day after the code expires. |
| Kid link and kid phone's sync access | While the kid is linked. Deleted right away when a parent removes the kid, or with the parent's account (after the 30-day hold). |
| Family sync data (encrypted) | While a family phone uses it. Deleted with the family's last parent account (after the 30-day hold). |
| Family invites | 30 days. |
| Teen and kid-lock one-time codes | Until they expire (minutes to a day), then deleted. |
| Journal copy off this phone | Until you replace it, delete it, or delete your account. |
| Calendar link (feed) | Until you stop it or delete your account. |
| Reminder push tokens and widget tokens | Until you turn reminders off, disconnect the widgets, or delete your account. Widget tokens are replaced every 30 days. |
| Help improve voice | Kept only on your phone. Our server keeps none of it. |
| Safety reports and attached screenshots | 1 year, or longer if the law requires (for example, a report to NCMEC). |
| Payment notices from Stripe | 30 days (used only to avoid handling the same notice twice). Payment records, once anything is on sale, are kept as long as tax and accounting law requires, generally up to 7 years. |
| Rate-limit counters | A day after they reset. |
| Support emails | Up to 2 years. |
| Backups and hosting logs | Removed on the providers' normal schedules. |
A kid's journal never leaves the kid's phone, so we never have it.
In the app: Settings → Delete my data erases that device's Sαréal618 data, including widget data. If you're signed in, Delete my account and synced data also deletes your account and server data (held 30 days, then gone). Parents can remove a kid in Settings → Linked kids, or by emailing us. On the web, or without the app: see this website/delete-account.html. We finish emailed requests within 30 days.
All connections use HTTPS. Family data is end-to-end encrypted with the family key. Calendar tokens stay on the device. We keep a written security program for kids' data, limit who can access our systems, and delete data on the schedule above. If a breach affects your information, we'll tell you as the law requires. To report a security problem, see security.txt or email support.
We'll update the effective date when this policy changes, and give notice in the app before important changes (including the move to an LLC). We won't use data we already have in a new way without asking first. For kids, that means new parent consent. We tell Google Play about significant changes as Texas law requires.
Email support or call (678) 439-5591. Sαréal618, Johns Creek, Georgia, USA.