What we keep, who can see it, and what we never do.

Last updated November 1, 2026. GameRecord is made by nCore (“we”). This policy is written so a 12-year-old can read it, and it is the whole policy; there is no longer version.

The short version

Everything you write, say or record in GameRecord belongs to you.
Nobody in your family sees it unless you switch on sharing for that thing. Nobody outside your family sees it at all.
Parents can read each kid's to-do side (today's three, the list, the calendar, what's still open). Nothing else. Kids see a label saying so.
Voice is turned into words and the sound is thrown away.
We don't sell or share your data, we don't show ads, and your words are never used to train AI.
Nothing is scored, ranked or compared between people.
You can delete your account, and everything in it, yourself, at any time.

1. What we collect

Account information: your email, a password (stored scrambled; we can't read it) or a Google sign-in, your first name, the picture and color you picked, whether you're a parent or a kid, your time zone, and a birth year for kids so the coach talks to you the right way.
What you put in: your three for the day, your list and calendar, goals and the words behind them, photos you add to a goal, night check-ins, journal entries, workouts, the family constitution, what you noticed about someone, and the words you said or typed to get them there.
Voice: when you talk to the app, the recording is sent to a speech service, turned into words, and the recording is discarded. Clips you record on purpose (a message to future you, the dream behind a goal) are kept until you delete them, and only you can play them.
Counts about the AI: how many times it was asked and how long it took, so we can see what it costs. Never what was said.
Reminders: if you turn them on, the address your phone gives us to deliver them. Nothing else about your phone.
What we don't collect: location, contacts, analytics about how you use the app, advertising identifiers, or anything from other apps.

2. How we use it

To run the app for you and your family: show your things back to you, build the Sunday screen from what people chose to share, send reminders you asked for, and let the coach read what you said so it can pull out the facts, suggest three things for tomorrow, or ask one question back. The coach suggests; it never decides, grades or rates.

3. Who can see what

Only you: night check-ins, journal entries, coach chats, the warm-up, your settings, and anything you haven't shared.
Your family: what you chose to share, through a switch that says “Family can see this” or “Show at the huddle”. You can switch it off again, and it disappears from their screens.
Parents: a parent confirmed by another parent can read each kid's three for the day, their list and calendar, and what's still open. Reading only: a parent can't change, tick or delete anything there. A parent can't read a kid's check-ins, journal, goals, coach chats or warm-up.
Kids never see each other's private things, or a parent's.
Nobody else. There is no public profile, no team, no coach outside the family, no link that opens your things from outside.
Us: we don't read your data. We can see counts (how many families, how many AI calls) and we have database access to fix a problem you report. We don't open your things otherwise.

These rules are enforced inside the database (row-level security), not only on the screens, and an automated test suite checks every one of them on every change to the app.

4. What we share, and what we don't

We don't sell your data, and we don't share it with anyone for their own use. The services below handle data only to run the app for you, under terms that forbid them from using it for anything else.

Supabase: the database and sign-in. Holds your account and everything you put in.
Vercel: runs the app and serves the pages.
OpenAI: turns speech into words. The account is set so nothing sent is kept or used for training.
Anthropic (Claude): reads what you said to pull out the facts, suggest three things for tomorrow, write one example sentence, or ask one question back. The account is set so nothing sent is kept or used for training.
Google: only if you choose “Continue with Google”. Google tells us your email and name; we tell Google nothing about what you do in the app.

There is no analytics service, no error-tracking service, no ad network, no email list.

5. How long we keep it

Voice recordings made to type for you: discarded as soon as the words come back, usually within seconds.
Everything you put in: for as long as your account exists.
When you delete your account: everything in it is removed right away, including things you shared and notes other people wrote about you. Backups we keep in case of a disaster are overwritten within 30 days.
Invite requests from the front page: kept until we answer, then deleted.

6. Your choices and rights

Share or unshare any single thing, any time, with its switch.
Change your name, picture, color and settings under Me.
Turn reminders on or off, per device.
Delete your account under Me, “Delete my account”. It takes effect immediately.
Ask us for a copy of your data, or to correct or delete something, by email. We answer within 30 days. If you live somewhere with privacy laws such as the GDPR or the CCPA, those rights apply to you, and we honor them for everyone.

7. Kids

GameRecord is a family app, and kids use it with their own account. A kid can only join with a family code that a parent gives them, so a parent has agreed before any kid's data exists. A parent can see the kid's to-do side as described above, can ask us to delete the kid's data, and the kid can delete their own account under Me. We don't knowingly take data from any child outside a family that a parent set up; if you think that happened, write to us and we'll delete it.

8. Safety

Before the app sends anything you wrote to the coach, it checks the words for signs that someone might be in danger. If it finds them, it stops, keeps nothing, and shows a short message: for a kid, to talk to a parent or another trusted adult right now; for anyone, that 988 can be called or texted any time. Nothing is sent to anyone, inside or outside the family. The check is a plain word list that errs toward stopping; it doesn't judge, flag or record.

9. Security

Everything travels over HTTPS and is stored encrypted at rest. The app server has no rights of its own in the database; every query runs as the signed-in person, so the database decides what they can see. Passwords are stored scrambled. Keys to the services above live only in the hosting settings, never in the app's code.

10. Changes to this policy

If we change this policy in a way that matters, the app will say so at least 14 days before it takes effect. The date at the top is the current version.

11. Contact

Write to support@gamerecord.ai. GameRecord is a product of nCore, Fairfield, California.