CommonSlate — Privacy Policy

Updated November 9, 2026

CommonSlate is a family calendar, chores, meals, and lists app made by Current & Craft, LLC (Florida, USA) ("we," "us"). This policy explains what information CommonSlate collects, how it's used, who it is shared with, and the choices you have. Our Terms of Service also apply.

1. Information you give us

• Account details: the email address and password a parent or guardian signs up with. Passwords are handled by Google Firebase Authentication; we never see or store them in readable form.
• Family data: what you and your family members enter — names, avatars and colors, calendar events, chores and points, rewards, meal plans, lists, school or work schedule settings, and photos you choose to add.
• Purchases: payments are processed by Stripe on the website and by Google Play in the Android app. We receive confirmation of your purchase, an order or subscription reference (and, from Stripe, a customer ID) so we can unlock features and let you manage your subscription. We never receive or store your card number or other payment details.

2. Information collected automatically

• Device tokens: if you turn on notifications, a push-notification token for that device, tied to the login that turned them on. Turning notifications off, signing out, or deleting the account removes it.
• Security checks: we use Google Firebase App Check (reCAPTCHA) to confirm requests come from the genuine app and to prevent abuse.
• Basic technical logs kept by our hosting and database providers for operation and troubleshooting.

The CommonSlate application does not show ads or load advertising or analytics trackers. The optional analytics described below concern only the public marketing homepage, not signed-in family accounts, app.html, family profiles or child activity.

Public marketing homepage traffic, separate from the family application

The public promotional landing page at commonslate.net has a dedicated Google Analytics 4 marketing measurement stream. GA4 is off by default and loads only after a visitor explicitly enables public marketing analytics using the controls on this page. We do not display an analytics banner or popup. After consent, only public landing-page page views are measured. The signed-in CommonSlate application, children's information, calendar events, household settings, subscriptions and purchases are not tracked by GA4.

For public landing-page measurements, Google LLC may process browser/device details, approximate network-derived location and pseudonymous first-party analytics cookie identifiers. We will not send names, child information, family content, account IDs, order information, full URLs with query strings, or promotional click details. Our tag disables Google Signals and ad personalization.

There is no analytics banner or popup. We do not load GA4 unless you choose Turn public marketing analytics on below. You may withdraw permission at any time. Turning analytics off prevents subsequent measurements in this browser and attempts to remove this site's analytics cookies; prior collected data may remain with Google. See Google's Privacy Policy.

3. Google user data (Google Calendar)

If someone in your family chooses Connect Google Calendar (a CommonSlate Connect feature), CommonSlate requests read-only access to that person's Google Calendar (https://www.googleapis.com/auth/calendar.readonly).

• What we read: events on the connected account's primary calendar from yesterday through the next 90 days. From each event we keep only its title, date, and start time (or that it is all-day).
• How it's used: solely to show those events, read-only, on your family's shared CommonSlate calendar and to keep them up to date (we check for changes about every 15 minutes).
• Storage: the copied events are stored with your family's data in Google Firebase. The Google authorization token is stored on our servers in a location no app user can read, and is used only to fetch your calendar for this purpose.
• Disconnecting: tap Disconnect in CommonSlate (Family → Schedules → Auto-Sync a Calendar), or remove CommonSlate's access at myaccount.google.com/permissions. Disconnecting in the app deletes the stored token and removes the synced Google events from CommonSlate. Deleting the CommonSlate account of the person who connected the calendar does the same.

How Google user data is shared, transferred, or disclosed

We share Google user data only in the limited ways below. We do not share, transfer, or disclose it in any other way.

• With the members of your own CommonSlate family. Synced event titles, dates and times appear on your family's shared calendar for the people you have added to that family. Members only see the event details; they never receive the Google authorization token.
• With Google Firebase / Google Cloud (our infrastructure provider). Synced events and the authorization token are stored and processed on Google Cloud servers that run CommonSlate. This provider acts on our behalf and only to operate the service; it is not permitted to use the data for its own purposes.
• When required by law. We will disclose Google user data only if we are legally required to (for example, a valid court order), or to protect against fraud, abuse, or a security threat, and then only the minimum required.
• If our business is sold or merged. Any successor would be bound by this policy and by the Limited Use requirements below, and we would notify you before your data became subject to a different policy.

We do not sell Google user data; share it with data brokers, advertisers or advertising platforms; share it with Stripe, Open-Meteo or any other third party; use it for advertising, personalized or interest-based ads, or credit decisions; use it to develop, improve or train generalized AI or machine-learning models; or allow humans to read it, except where you ask for support and give consent, where needed for security or to investigate abuse, or to comply with law. We never write to or change your Google Calendar.

CommonSlate's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. How we use information

Only to provide and improve CommonSlate for your family: syncing your family's data across devices, sending the notifications you've turned on, syncing calendars you connect, unlocking purchases, providing support, and keeping the service secure. We do not sell personal information, and we do not use it for advertising.

5. Service providers we use

• Google Firebase / Google Cloud — accounts, database, hosting, server functions, notifications, backups, and App Check. This is the only provider that stores or processes Google Calendar data.
• Stripe — payments and subscription management on the website (receives no Google user data and no family data).
• Google Play — payments and subscription management in the Android app. We send Google the purchase code the app received so Google can confirm the purchase, and Google tells us when a subscription renews, ends or is refunded. No family data is sent.
• Google Calendar API — only if you connect a Google Calendar.
• Google Analytics 4 (public marketing landing only): optional aggregated website visit measurements only after affirmative consent. This provider receives no Google Calendar data or authenticated CommonSlate family data.
• Open-Meteo — weather forecasts, if you turn on the weather feature (it receives only the location you choose, and no Google user data).

6. Children's privacy

CommonSlate is a family app that children use together with their parents, for example to see the family calendar, check off chores and earn reward points.

• Grown-ups create the account. Only a parent or guardian, 18 or older, can create a CommonSlate account; they confirm this when signing up. Children don't create accounts, sign in on their own, or give us an email address.
• What we hold about children: only what the parent or guardian chooses to enter — for example a first name or nickname, an avatar or photo, chores, points and rewards, and schedule details. It is used only to run the family's CommonSlate and is visible only to signed-in members of that family.
• No ads or tracking in the family app: the authenticated CommonSlate application has no advertising or analytics trackers. Optional consent-based GA4 on a separate public marketing landing page cannot access children's or family-app information; children's information is never sold or shared with third parties for their own use.
• Parent controls: a Parent PIN can keep settings, purchases, links outside the app and account options behind a grown-up check. Parents can review, change or delete any child's information in the app at any time, download a copy (Family → General → Export Backup), or ask us to delete it (see section 8).

If you believe a child has given us information without a parent or guardian, contact us and we'll delete it.

7. Keeping your data

We keep your family's data while your family uses CommonSlate. Backups of the database are kept for up to 14 days and are then deleted automatically. Stripe and Google Play keep their own payment records as required by law. We also keep a few billing reference records after an account is deleted (see section 8).

8. Deleting your account and data

9. Security

Data is encrypted in transit and stored with Google Cloud. Access to your family's data is limited to signed-in members of your family by our database security rules. Signing out clears your family's data from that device. No system is perfectly secure, but we work to protect your information.

10. Changes to this policy

If we make material changes, we'll update this page and its effective date, and notify you in the app when appropriate.

11. Contact us

Current & Craft, LLC — support@commonslate.net