Privacy Policy

This policy is provided as a starting template and general information, not legal advice. Please have a qualified attorney review it before relying on it for your business.

Who we are

Porchlight (“we,” “us”) is a subscription web app that helps parents understand whether shows, movies, games, apps, and YouTube channels are appropriate for their children. This policy explains what information we collect and how we use it.

Information we collect

• Account information: your email address and password (passwords are stored securely by our authentication provider, never in plain text).
• Family profile: the kids' age groups and content categories you choose, and optionally your city and your children's birth month/year (used only to tailor reports and age-up reminders).
• Usage: the titles you check and how many checks you've used, to provide the service and enforce free vs. paid limits.
• Payment information: processed by Stripe. We never see or store your full card number; we store only your subscription status and Stripe customer/subscription identifiers.
• Digest subscriptions: if you sign up for the email digest, your email, selected age groups, city, and frequency.

Screenshots are never stored

If you use the phone-scan feature, the screenshot you upload is processed in memory to identify apps and is then immediately discarded. We do not save screenshot images in our database, in logs, or in any storage system.

How we use your information

• To generate content reports tailored to your family's settings.
• To operate your account, enforce free/premium limits, and process subscriptions.
• To send the email digest and account-related messages you've requested.
• To maintain, secure, and improve the service.

Children's privacy

Porchlight is a tool for parents, not for children. We do not knowingly create accounts for, or collect personal information from, children under 13. The only child-related data we store is an optional birth month/year you provide, used solely to adjust report standards as your child grows.

Service providers

We share information with trusted providers only as needed to run the service:

• Supabase — database and authentication.
• Stripe — subscription payments.
• Anthropic — the AI that researches and writes the content reports.
• Resend — sending the email digest and account emails.
• Vercel — application hosting.

We do not sell your personal information.

Data retention

We keep your account information for as long as your account is active. Cached title reports expire after 30 days. You may request deletion of your account and associated data at any time (see below).

Your choices and rights

You can update your family settings in the app, unsubscribe from the digest using the link in any digest email, and request access to or deletion of your data by contacting us. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA.

Cookies

We use essential cookies to keep you signed in. We do not use advertising or third-party tracking cookies.

Changes to this policy

We may update this policy from time to time; we'll revise the “last updated” date above when we do.

Contact

Questions? Email us at stewartsbuisness@gmail.com.