1. Introduction

The Hive Network, LLC ("Famlo," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our software-as-a-service ("SaaS") platform, including any related services, websites, and applications (collectively, the "Platform").

By using the Platform, you agree to the practices described in this Privacy Policy.

2. Information We Collect

We collect information from users in the following categories:

2.1 Information You Provide

• Account registration data (name, email, password)
• Profile information (including family member data, images, addresses)
• Event creation details
• Messages, posts, and other submitted content (including images, videos, and other media)
• Payment details (processed by third-party provider; we do not store full credit card numbers)

2.2 Information Collected Automatically

• IP address, browser type, device info
• Usage data (clicks, page views, actions)
• Cookies and tracking pixels
• Location information (via IP or browser, if permitted)

2.3 Information from Third Parties

• Payment processors (e.g., Stripe)
• Analytics platforms (PostHog, and Google Analytics on our public pages)
• Authentication providers (if using SSO or OAuth)

2.4 Notice at Collection

The categories below use the labels defined by California law. We do not sell any of them, and we do not share any of them for cross-context behavioral advertising except as described in Section 11.2.

3. How We Use Your Information

We use collected data for:

• Account creation and management
• Delivering and improving our services
• Event registration and communications
• Processing payments and sending receipts
• Sending transactional messages (RSVP confirmations, waitlist updates, etc.)
• Monitoring usage patterns and platform performance
• Investigating and preventing abuse, fraud, and violations of our Terms
• Analyzing de-identified or aggregated data for service optimization

4. Cookies and Tracking

We use cookies and other tracking technologies to:

• Keep you logged in
• Remember your preferences
• Understand how users engage with the Platform
• Support marketing and analytics through trusted tools like PostHog and Google Analytics

You can control cookies through your browser settings. Disabling cookies may affect functionality.

5. Sharing Your Information

We have never sold personal information for money, and we do not sell children's information under any definition. Some of our analytics and advertising-measurement technologies may qualify as "sharing" under state privacy laws, as explained in Section 11.2. We may share data:

• With service providers under strict data processing agreements (e.g., Amazon Web Services, Stripe, PostHog, Google Analytics, Sentry)
• With the organizers of organizations your family belongs to, and of organizations you register a child with, so they can run their activities — Section 9.5 sets out exactly which fields about a child this covers and who counts as an organizer
• If required by law (e.g., lawful subpoenas or court orders)
• As part of a merger, acquisition, or asset transfer
• With your explicit consent

6. Analytics

We use analytics in two distinct ways, and they are controlled differently.

In your browser. PostHog records which pages you view. On our public pages only — never on signed-in pages — Google Analytics does the same, so we can understand how visitors find us. You control both from "Privacy Preferences" in the website footer, and we honor Global Privacy Control and Do Not Track signals.

On our servers. Separately, we record certain events in your account when they happen — for example that a booking was paid, or that an organizer opened their management console — and send them to PostHog under contract. These records identify your account by an internal identifier. They never include a child's name, age, birthdate, health, allergy or special-needs information, and never record which specific child attended which activity; this is enforced in our code, not only by policy. They are never used for advertising and are never sold or shared for cross-context behavioral advertising. Because our servers create them rather than your browser, they are not switched off by the Analytics preference. See our Cookie Policy, Section 3.6. To ask us to stop, or to have them deleted, email support@famlo.co.

We also use Sentry to receive diagnostic reports when something breaks. Those reports exclude your email address, your IP address, and any health information, and error monitoring is necessary to operate the Platform safely, so it is not switched off by the Analytics preference. We do not use session recording.

If we introduce advertising in the future, we will update this Privacy Policy and provide appropriate opt-out mechanisms.

7. Data Security

We implement reasonable physical, administrative, and technical safeguards to protect your personal data. This includes:

• Encrypted HTTPS access, and encryption of all stored data at rest at the storage layer
• Additional application-layer encryption on these free-text fields, so they are unreadable even to someone holding a copy of the database: allergies, medical notes, special needs, medications, dietary restrictions, and the pick-up note. Emergency contact name, phone and relationship are not in that set — they rely on storage-layer encryption alone. We would rather say so than imply a protection that is not there
• Role-based access control, with a child's allergies, medical notes, special needs and emergency contact visible to their own family and to organizer-role holders in the organizations that family currently belongs to or is currently registered with — see Section 9.5, which also lists the fields on a child's record that this rule does not cover
• Third-party vendor privacy and security practices are reviewed before we adopt them and when their terms materially change

No method of data transmission is 100% secure. You use the Platform at your own risk.

7.1 If There Is a Breach

If we determine that a breach of security has compromised your personal information, we will notify you as required by applicable law, and in any event no later than 30 days after that determination, unless a law enforcement agency directs us to delay. Notice will describe what happened, the categories of information involved, and the steps we are taking. Where the law requires it, we will also notify the Florida Department of Legal Affairs and, where applicable, consumer reporting agencies and the authorities in your state of residence. If a breach involves a child's health information, we will notify the parent or guardian on the account directly.

8. Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. Retention durations vary depending on the type of data:

• Account Information: Retained for the duration of the account’s active use and up to 12 months after deactivation.
• Analytics Data: Browser analytics data is retained by Google Analytics for up to 14 months. Server-side product analytics events are retained by PostHog for the period set out in our agreement with them; you may request deletion of analytics data associated with your account at any time by emailing support@famlo.co. We do not retain analytics data longer than we need it for performance monitoring and service improvement.
• Support Logs and Communications: Retained for up to 36 months to ensure quality assurance, dispute resolution, and compliance documentation.
• Children's Health and Safety Data: Retained while the child is on your account, so you do not retype it for every activity. Erased within 30 days of your removing the child or asking us to erase it, by a job that runs once a day. One exception: if the child is still registered for an activity that has not happened yet, the erasure waits until after that activity, so an organizer is not left running it without an allergy they were told about. See Section 9.4.
• Payment and Transaction Records: Retained for up to 7 years as required by tax and financial reporting regulations.

You may request the deletion of your account and associated data at any time by contacting support@famlo.co. We will process such requests in accordance with legal obligations and verification requirements.

9. Children's Privacy

Famlo is not directed at children under 13, and children may not create accounts. A child gives us nothing directly. A parent or guardian enters information about their own child, from the guardian's own account, and that is the only way a child's information reaches us.

Because that information comes from an adult and not from the child, the Children's Online Privacy Protection Act (COPPA) does not govern this collection. The Rule defines "collects" as gathering personal information from a child, and the Federal Trade Commission's published COPPA guidance asks "does COPPA apply to information about children collected online from parents or other adults?" and answers "no." We state this plainly because earlier versions of this page described a COPPA consent process that the law did not require of us and that this product never performed. There is no consent checkbox, no verification email, no confirmation link and no "pending" state for a child's health information. None of them ever existed.

9.1 What You Enter About Your Child

On a child's page you can enter:

• Basic profile: Name, date of birth, grade level, and relationship to you
• Allergies: A free-text allergy note, a set of common-allergy tags you tick, and a "no known allergies" answer
• Medical notes: Free text
• Special needs: A set of tags you tick
• Medications and dietary restrictions: Free text
• Emergency contact: Name, phone number, and relationship
• Pick-up and photos: Who else may collect the child, an optional note about that, and whether their photo may be published

Every one of those is optional. Famlo works without any of them; your child simply will not get allergy-aware or accommodation-aware handling at an activity.

9.2 Why There Is No Separate Consent Step

Entering a child's details is the act of sharing them. The reason to record an allergy in a platform for co-ops and activity providers is so the people running those activities know about it; a note nobody can read would keep nobody safe. Section 9.5 states exactly who those people are, and that is the whole answer. There is no separate sharing switch, no per-activity question, and no state in which a child's details sit waiting for an approval. Anything you would rather an organizer not see, do not enter, or clear it later.

We tell you this at the two points you type it: on the form where you add a family member, and at the attendee step of checkout.

9.3 Parental Rights

Parents and guardians may at any time:

• Review what is on the child's page
• Correct or clear any field on it — the allergy note and tags, the "no known allergies" answer, medical notes, the special-needs tags, medications, dietary restrictions, the emergency contact, the pick-up list and note, and the photo answer
• Remove the child, which erases the health and safety data as described in 9.4
• Decline to enter anything further

One limitation we would rather state than let you discover. Besides the special-needs tags you tick, there is a separate free-text special-needs note on a child's record that three organizer screens will display. Nothing in Famlo writes to it and no screen shows it to you, so for a child added through this app it is empty — but we cannot promise you that a record carried over from the previous version of Famlo holds nothing there. Email support@famlo.co and we will tell you what it says or clear it. Building the missing field, so this caveat can be deleted, is tracked internally.

To exercise any of these, open the child's page or contact us at support@famlo.co.

9.4 Erasure

When you remove a child, or ask us to erase their health data, a job that runs every day erases the following within 30 days: the allergy note and tags, the "no known allergies" answer, medical notes, the special-needs note and tags, medications, dietary restrictions, emergency contact name, phone and relationship, the pick-up note, and the list of people authorized to collect the child.

There is one deliberate exception. If the child is still registered for an activity that has not yet happened, the erasure waits until after that activity, because stripping an allergy off a roster for a child who is still going to walk through the door is the failure this data exists to prevent.

The child's name, date of birth, photo answer and the record that they attended an activity are kept as part of your account and the organization's attendance history until you delete the account. See our Data Deletion Policy.

9.5 Who Can See a Child's Information

One rule covers a child's safety data — the allergy note, medical notes, the special-needs note and the emergency contact. A person can see those four only if one of these is true:

• They are the account holder on the child's own family.
• They hold an organizer role in an organization your family currently belongs to.
• They hold an organizer role in an organization the child currently has an active registration with.

"Organizer role" means the owner of the organization, a co-leader, or an event manager. It does not mean every member. Other parents in your co-op cannot see those four fields, and neither can someone whose only role in the organization is billing manager or member manager.

Access follows current standing. Leave an organization and its organizers stop seeing your child. Cancel or refund a registration and the organizers of that activity stop seeing your child, unless your family is still a member of that organization.

A registration does not lapse on its own. It counts as active while it is confirmed, or once the child has been marked as attended, and nothing about the date of the activity narrows that. So an organization you registered with for a single class keeps this access after the class is over, until the registration is cancelled or refunded, or you leave and ask us to remove it. We would rather tell you that than claim an expiry the software does not implement.

What an organizer with that access sees:

• The allergy note, or "No known allergies" where you have said so
• Medical notes
• The free-text special-needs note described in 9.3
• Emergency contact name, phone and relationship

What is shown on a child's record without passing through that rule:

These are visible to anyone who can open the management console of an organization your child is currently registered with — which includes people whose only role is billing manager or member manager, not just the organizer roles above:

• The child's name, age, grade level and your family name
• Your own name and phone number, as the guardian
• The list of people authorized to collect the child, and your pick-up note
• Your photo answer
• Which of that organization's activities the child is enrolled in, and their attendance

We list those separately rather than folding them into the rule above, because they are not governed by it. Treating them as gated when they are not is the kind of statement this page exists to stop making.

What no organizer screen shows, even though you can enter it:

• Medications
• Dietary restrictions
• The name of any common-allergy or special-needs tag you tick. Ticking an allergy tag does put the child on an organizer's allergy list, labelled "Allergy recorded" with no detail; ticking a special-needs tag surfaces nothing at all
• Any severity rating. There is a severity field behind the allergy tags, and no screen anywhere displays it

If an organizer needs to know about a medication, a diet, or how severe an allergy is, put it in the medical notes or the allergy note.

On the management console, the allergy, medical, emergency-contact and pick-up panels start hidden and an organizer has to press a button to reveal them. Each reveal is recorded with the organizer's name, the time, the child, and which panel — never the value itself. Activity rosters and check-in sheets are not hidden this way; those show the allergy line directly to organizers who open them.

Organizers agree, under Terms Section 39, to use what they see only for running their group's activities and keeping participants safe, not to share it with unauthorized third parties, to protect it with reasonable security, to report any incident to us, and to delete or return member data on request or when a member leaves. That is a promise they make to us. It is not something we can enforce technically once a person has read a screen, and we will not pretend otherwise.

We do not use children's information for advertising, do not sell it, and do not share it with third parties for marketing. Our analytics and error-reporting code refuses, by property name, to send anything named as a medical, allergy, special-need, accommodation, medication, dietary, birthdate, date-of-birth, diagnosis or emergency-contact value, or as a child's name, age, date of birth or family member. Outside production that refusal raises an error at the call site rather than dropping the value quietly. It is a guard on names, so it cannot catch a child's name typed inside somebody else's free text; we say so rather than claim it is airtight.

10. Sensitive Personal Information

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), Colorado Privacy Act, Connecticut Data Privacy Act, Virginia Consumer Data Protection Act, and other applicable state privacy laws, certain categories of personal information are classified as "sensitive personal information" (SPI) requiring enhanced protections. The following data we collect qualifies as SPI:

• Health and Medical Data: Allergies, medical notes, special needs, medications and dietary restrictions — the fields listed in Section 9.1
• Children's Personal Information: Data about children under 16, including names, dates of birth, and health information
• Precise Geolocation: When you enable location services for group and event discovery

Famlo is not a health care provider, health plan, or health care clearinghouse, and is not a business associate of one. The health information you provide is not protected health information under HIPAA. It is protected under this Privacy Policy, our Consumer Health Data Privacy Policy, and applicable state consumer health data laws.

10.1 Purpose Limitation

We use sensitive personal information only for the following purposes:

• Health/medical data: Event safety, accommodation planning, and emergency preparedness
• Children's data: Family profile management, group participation, and event registration
• Geolocation: Displaying nearby groups and events relevant to your location

10.2 Right to Limit Use of Sensitive Personal Information

Under CCPA/CPRA and other applicable state laws, you have the right to limit our use and disclosure of your sensitive personal information to only what is necessary to provide the services you have requested. To exercise this right:

• Clear a child's health fields on their page, which removes them from every organizer screen. There is no separate sharing toggle: what you have entered is what organizers in your current organizations can see, as described in Section 9.5
• Disable location services in your browser or device settings
• Email us at support@famlo.co with your specific request

We already limit our use of this information to the purposes in 10.1, and we will not deny you access to the Platform for exercising this right. Clearing a child's health fields does mean an organizer will not be told about an allergy or an accommodation.

11. Your Rights and Choices

Depending on your state of residence, including under laws such as the California Consumer Privacy Act (CCPA/CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA) and the Connecticut Data Privacy Act (CTDPA), you may have the right to:

• Access or correct your personal data
• Delete your account or request data erasure
• Object to or restrict certain data uses
• Withdraw consent for analytics and marketing cookies, in the Privacy Preferences panel described in 11.3. There is no separate consent for a child's health data to withdraw — see Section 9.2 — but you can clear any of those fields yourself at any time
• Opt out of the sale or sharing of your personal information
• Opt out of targeted advertising

To exercise these rights, email us at: support@famlo.co

11.0 If We Deny Your Request

If we decline to act on a privacy rights request, we will tell you why within the time limits described in Section 15. You may appeal that decision at no cost by emailing support@famlo.co with the subject line "Privacy Appeal." We will respond in writing within 45 days (60 days in Colorado and Connecticut), explaining our decision. If we deny your appeal, we will provide you with a method to contact your state Attorney General to submit a complaint.

Where you have given consent, you may withdraw it at any time, and we will stop the relevant processing as soon as practicable and no later than 15 days after receiving your withdrawal. If you are an Oregon resident, you may request a list of the specific third parties to which we have disclosed your personal data. You may use an authorized agent to submit a request on your behalf; we may ask you to verify your own identity and to confirm that you gave the agent permission. We will not discriminate against you for exercising any of these rights.

11.1 Global Privacy Control (GPC)

We honor Global Privacy Control (GPC) signals as a valid opt-out of the sale or sharing of personal information, as required by California, Colorado, Connecticut, Texas, Oregon, Montana, Delaware, Nebraska, New Hampshire, New Jersey, Minnesota and Maryland (list current as of July 2026). When we detect a GPC signal from your browser, we automatically disable analytics and marketing tracking, and the Privacy Preferences panel displays an acknowledgment confirming the signal was honored.

11.2 Do Not Sell or Share My Personal Information

We do not exchange personal information for money. However, under the broad definitions in the CCPA/CPRA and other state privacy laws, using Google Analytics with advertising features enabled can qualify as "sharing" personal information for cross-context behavioral advertising. We run Google Analytics only on our public marketing pages, only for visitors who are not signed in, and only with advertising storage and personalization switched off unless you have turned on the Marketing preference. We never run it on signed-in pages, and we never share information about a child. You may opt out of any such sharing by:

• Enabling Global Privacy Control (GPC) in your browser
• Clicking "Privacy Preferences" in our website footer and disabling analytics and marketing
• Emailing support@famlo.co

11.3 Privacy Preference Center

You can manage your tracking and cookie preferences at any time by clicking "Privacy Preferences" in the website footer. This allows you to control analytics and marketing technologies independently. Strictly necessary technologies cannot be switched off, because sign-in and security depend on them.

12. Third-Party Links

The Platform may contain links to third-party websites. These links may open in a new browser tab or window and are not governed by this Privacy Policy. We are not responsible for the content or privacy practices of those external sites, and we encourage you to review their privacy policies before providing any personal information.

13. International Users

Famlo is operated in the United States and is intended for use by residents of the United States only. We do not market or offer the Platform to individuals in the European Economic Area, the United Kingdom, or Switzerland, and we do not knowingly collect personal data from individuals located there. If you access the Platform from outside the United States, you do so on your own initiative, and your information will be transferred to and processed in the United States.

14. Updates to This Policy

We may update this Privacy Policy periodically. When material changes occur, we will notify users through in-app banners, login alerts, or direct email communication, as appropriate. When we do, we will revise the “Last Updated” date above. Material changes will be communicated through the Platform.

15. Contact Us

If you have questions or concerns regarding this Privacy Policy, or if you wish to exercise your data rights, please contact us. We will respond within the timeframes required by your state: 45 days for CCPA/CPRA requests (extendable by an additional 45 days with notice), and 45 days for VCDPA, CPA, CTDPA and comparable state requests (extendable by 45 days where the law allows).

The Hive Network, LLC
Email: support@famlo.co
Jurisdiction: Lee County, Florida, USA