Privacy Policy

Effective Date: May 20, 2026

TLDR Parents, Inc. ("TLDR Parents," "we," "us," or "our") is a Delaware corporation that operates the TLDR Parents service at hellopenny.ai and app.hellopenny.ai (the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

This Policy applies to all users of the Service. By using the Service, you agree to the practices described here.

1. Information We Collect

We collect information in three ways: information you give us, information we receive from services you connect, and information collected automatically.

Information you give us

  • Account information — your name, email address, and password (managed through Auth0; we do not store passwords directly).
  • Mobile phone number — only if you opt in to our SMS service. See Section 6.
  • Payment information — if you subscribe to a paid plan, you provide payment card details to our payment processor, Stripe. We do not store full payment card numbers on our systems; we receive only limited information from Stripe (such as the last four digits, card brand, and expiration) to display on receipts and manage subscriptions.
  • Support communications — when you contact us, we receive your message and any information you choose to include.

Information from connected services

When you connect Gmail, Google Calendar, or another supported service to TLDR Parents, you authorize us to access information from that service. Specifically:

  • Gmail — message content, sender, recipient, subject, date, and attachments, for messages we identify as family-related (school communications, activity schedules, sign-ups, deadlines).
  • Google Calendar — your existing calendars, events, and event details, and the ability to create new events on your behalf if you've enabled that feature.
  • Basic profile information — your name, email address, and profile photo from the provider.

Our use of Google user data is subject to the Google API Services User Data Policy, including the Limited Use requirements. See our Google API Services Usage Disclosure for details.

Information collected automatically

  • Usage information — pages viewed, features used, actions taken, approximate location derived from IP address, device type, browser, operating system, and similar technical information.
  • Cookies and similar technologies — we use cookies for authentication, preferences, and analytics. You can control cookies through your browser settings.
  • Analytics — we use Google Analytics to understand how the Service is used in aggregate. Google Analytics may set its own cookies and collect information as described in Google's privacy policy.

2. How We Use Information

We use the information we collect to:

  • Operate, maintain, and improve the Service, including extracting family-relevant events from your email and presenting them to you;
  • Authenticate your account and protect against unauthorized access;
  • Process payments and manage subscriptions;
  • Communicate with you about the Service, including service announcements, account notifications, security alerts, and responses to support inquiries;
  • Send promotional email about TLDR Parents to users who have not opted out (see Section 5);
  • Send SMS messages to users who have affirmatively opted in (see Section 6);
  • Detect, investigate, and prevent fraud, abuse, and security incidents;
  • Comply with legal obligations and enforce our Terms of Service.

We do not use information collected through the Service to serve advertising, and we do not allow our AI providers to train their models on Your Data.

3. AI Processing

To extract events and generate summaries from your email, we send the content of family-related messages to OpenAI for processing. Our contract with OpenAI prohibits OpenAI from using your data to train its models or for any purpose other than providing the service to us.

We only send the content of messages we have identified as family-related — we do not send your entire mailbox to any AI provider.

4. How We Share Information

We do not sell your personal information.

We share information only as described below:

Service providers

We share information with vendors who help us operate the Service. They are contractually limited to processing data on our behalf and are prohibited from using it for their own purposes. Our current service providers include:

  • Amazon Web Services (AWS) — hosting and infrastructure
  • Auth0 — account authentication
  • Stripe — payment processing
  • Twilio — SMS message delivery
  • OpenAI — AI processing for event extraction and summarization
  • Google — Gmail and Google Calendar APIs you authorize
  • Google Analytics — product usage analytics

Legal and safety

We may disclose information when we believe in good faith that disclosure is necessary to (a) comply with a law, regulation, legal process, or government request; (b) enforce our Terms of Service or investigate potential violations; (c) detect, prevent, or address fraud, security, or technical issues; or (d) protect the rights, property, or safety of TLDR Parents, our users, or the public.

Business transfers

If TLDR Parents is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you (for example, by email or a notice on the Service) before your information becomes subject to a different privacy policy.

With your direction

We share information with third parties when you direct us to, for example by connecting an external service.

5. Email Communications

We send two kinds of email:

  • Service email — account notifications, security alerts, billing receipts, and other communications necessary to operate the Service. You cannot opt out of these while you have an account.
  • Promotional email — product updates, tips, and occasional offers. You can opt out at any time by clicking "unsubscribe" in any promotional email or by updating your preferences in your account settings.

Email communications are separate from our SMS service (Section 6); opting out of one does not affect the other.

6. SMS / Text Messaging

TLDR Parents offers an optional SMS service that delivers transactional messages — daily family briefings, schedule-change notifications, and account notifications — to your mobile phone. This Section explains how SMS works and the choices you have. For the full consent flow, opt-in language, and screenshots of the consent checkbox, see our SMS Consent and Opt-In page.

Opt-in

SMS is off by default. To receive SMS messages, you must affirmatively opt in by checking a dedicated SMS consent checkbox in your account settings and providing your mobile phone number. SMS consent is not a condition of using TLDR Parents and is separate from any other consent (including email consent). You can use all features of TLDR Parents without enrolling in SMS.

What we send

The SMS service is transactional only. We use it for daily briefings, schedule-change alerts, and account-related notifications (such as password changes and billing confirmations). We do not send marketing or promotional messages through this service. If we offer promotional SMS in the future, it will require separate opt-in.

Frequency

Approximately one daily briefing message, plus occasional account notifications. Frequency may vary.

Information collected

When you enroll, we collect your mobile phone number and a record of your consent (timestamp, IP address, and the consent language presented). We retain a log of messages sent to support delivery troubleshooting.

How we use SMS data

We use your mobile phone number solely to deliver the SMS messages you've enrolled in and to respond to support inquiries. Mobile opt-in data — including your phone number and consent record — is never shared with third parties or affiliates for marketing or promotional purposes. We do not use your mobile phone number for our own marketing.

Service provider

We use Twilio to deliver SMS messages. Twilio processes your phone number and message content solely to deliver messages on our behalf and is contractually prohibited from using this data for any other purpose. SMS message content may include event information derived from your Gmail and Google Calendar data, consistent with our Google API Services Usage Disclosure.

Opt-out

You can stop receiving SMS at any time by:

  • Replying STOP to any TLDR Parents text message, or
  • Turning off SMS in your account settings at app.hellopenny.ai.

After you opt out, we will send one confirmation message and no further SMS will be sent unless you opt in again. You can re-enable SMS by opting back in or by replying START or UNSTOP.

Help

Reply HELP to any TLDR Parents message, or email support@hellopenny.ai.

Carrier charges

Message and data rates may apply. TLDR Parents does not charge for SMS messages, but your wireless carrier may. Contact your carrier for details. Carriers are not liable for delayed or undelivered messages.

Eligibility

SMS is available to users 18 or older with a U.S. mobile number they are authorized to use.

7. How We Protect Information

We use technical and organizational safeguards to protect your information:

  • All data is encrypted in transit (TLS) and at rest.
  • We use OAuth for connections to Google and other providers, so we never see or store your passwords for those services.
  • Internal access is limited to employees and contractors who need it, and is logged.
  • We use AWS GuardDuty for threat detection and continuously assess our security posture.

No system is perfectly secure. While we work hard to protect your information, we cannot guarantee that unauthorized access, use, or disclosure will never occur.

8. Data Retention

We retain your information for as long as your account is active and as needed to provide the Service. When you delete your account, we delete your personal information from our active systems within a reasonable time, typically within 30 days, except where we are required or permitted to retain it for legal, security, fraud-prevention, or operational reasons.

Backups may take longer to fully cycle out. While information remains in backups, it is encrypted and not accessed except for disaster recovery.

You can request deletion at any time through your account settings or by emailing support@hellopenny.ai. See Section 10 for more on your rights.

9. International Users

TLDR Parents is operated from the United States, and your information will be processed in the United States and other countries where our service providers operate. By using the Service, you understand and agree that your information may be transferred to, stored in, and processed in countries with data protection laws different from those of your country.

If you access the Service from outside the United States, you are responsible for complying with local laws.

10. Your Rights and Choices

You have choices about your information:

  • Access and update — you can view and update most of your account information in your settings.
  • Delete — you can delete your account at any time through your settings or by emailing support@hellopenny.ai.
  • Disconnect third-party services — you can disconnect Google or other providers at any time through your settings or directly through the provider.
  • Email preferences — you can opt out of promotional email at any time.
  • SMS preferences — you can opt out of SMS at any time as described in Section 6.
  • Cookies — you can control cookies through your browser.

California residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act:

  • Right to know what personal information we collect, use, disclose, and (where applicable) sell or share about you.
  • Right to delete personal information we have collected from you, subject to certain exceptions.
  • Right to correct inaccurate personal information.
  • Right to opt out of sale or sharing. We do not sell personal information and we do not share it for cross-context behavioral advertising as those terms are defined under California law.
  • Right to limit use of sensitive personal information. We do not use sensitive personal information for purposes that would trigger this right.
  • Right to non-discrimination. We will not deny you service, charge you a different price, or provide a different quality of service because you exercise these rights.

To exercise these rights, email support@hellopenny.ai from the email address associated with your account. We may need to verify your identity before responding. You may also designate an authorized agent to make a request on your behalf.

We honor Global Privacy Control (GPC) signals as a request to opt out of sale or sharing where applicable.

Other state privacy laws

Residents of other states with comprehensive privacy laws (including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and others as those laws come into effect) have similar rights. To exercise them, email support@hellopenny.ai.

11. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us at support@hellopenny.ai and we will delete it.

For users between 13 and 18, a parent or legal guardian should review these terms with you. The SMS feature is restricted to users 18 and older.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice on the Service before the changes take effect. The "Effective Date" at the top of this Policy will be updated. Your continued use of the Service after the effective date means you accept the updated Policy.

13. Contact Us

Questions about this Privacy Policy or our privacy practices? Contact:

TLDR Parents, Inc.
Newton, Massachusetts
support@hellopenny.ai

Effective Date: May 20, 2026