Privacy policy

Who we are

Hall of Fam is operated by Tokenburner Labs LLC. Questions about this policy or Hall of Fam SMS messages can be sent to support@halloffam.com.

What we collect

We collect the minimum needed to run a family achievement app: your email and the names + ages of household members you add as players, the goals you create, structured completion details kids submit, and the resulting points and streaks.

Kids do not upload photos, add free-text notes, or use avatar photos in the app. Avatars are preset icons or initials. What kids submit is structured — numbers and preset choices — with one narrow exception: on learning goals, a kid may type a book or app title (length-capped; nothing else they type is stored). If a parent or coach enables result photos for a goal, the parent or coach may attach a JPEG that photographs the completed result, not people.

If you connect a calendar, we read events to figure out who's home on which day. We don't read meeting bodies, attendees, or attachments — just date and a tag/title match against player names.

If you request an SMS sign-in link, we collect the phone number and delivery events needed to send account access text messages.

Product feedback and error reports

A parent or guardian can send product feedback to Hall of Fam support. The report contains the message they type, the current route with identifiers and access tokens removed, an app build identifier, and, when they leave technical details enabled, coarse browser, operating system, device, display mode, and connection information. Automatic adult-session error reports can also include a redacted error summary and fingerprint.

When technical details are enabled, the app also keeps a memory-only trail of up to 20 events from the previous 15 minutes. The trail can contain sanitized page changes, general control actions, connection changes, and the route template, method, status, and broad duration of failed, slow, or data-changing Hall of Fam requests. It is cleared by a page refresh and is only stored when an adult sends feedback or an adult-session error report.

Feedback never captures control labels, page text, form values, request or response contents, cookies, local storage, query strings, full URLs, raw browser user-agent strings, screenshots, microphone recordings, or session replay. Product support notifications omit account-derived names, email addresses, phone numbers, household identifiers, and profile identifiers. Player accounts do not run the activity recorder or collect free-text feedback or automatic error payloads.

Common email, phone, account-identifier, URL-token, and credential patterns are automatically removed before a product report is stored. Product feedback is retained for up to 90 days. Automated filtering cannot reliably recognize every name or street address, so the feedback form also asks reporters not to include names, addresses, phone numbers, passwords, or access codes.

SMS and mobile opt-in data

Hall of Fam sends transactional SMS messages only after a coach, parent, guardian, or player requests account access by text and opts in. These messages are limited to secure sign-in links and related account-access support. We do not send marketing or promotional SMS messages.

We do not share mobile contact information with third parties or affiliates for marketing or promotional purposes. Information may be shared with service providers solely to operate and deliver Hall of Fam messages. All other data-sharing categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Message frequency varies based on sign-in activity. Message and data rates may apply. Consent to SMS messages is not a condition of purchase or app use. You can opt out of SMS messages at any time by replying STOP. Reply HELP for help, or email support@halloffam.com.

Children's data (COPPA)

This app is designed to be set up by a parent or guardian for use within their own household. Parents are the account owners; kids access via parent-issued logins. We don't advertise to kids, don't sell data, and don't collect child-uploaded media or child avatar photos. Child input is limited by the server to numbers and preset choices, plus one length-capped field: a book or app title on learning goals. We don't share kid data with third parties beyond the infrastructure required to run the app (database, email, SMS, push delivery, and parent-enabled result-photo storage).

Parents can delete their household at any time. This permanently removes every member's login (parents and kids), all profiles, submissions, parent-captured result photos, avatar choices, stat events, push registrations, and calendar connections. The only thing we keep is a minimal SMS consent record — the phone number, the consent text shown, and the timestamp, detached from your household — which telecom rules require us to retain as proof that a number opted in to texts.

How we store it

Data lives in a Postgres database (Supabase). Parent-captured result photos, if enabled, live in object storage (Supabase Storage). Both are encrypted at rest and in transit. Access is gated by row-level security so a household can only ever read its own data.

Third parties we use

• Supabase — database, auth, parent-enabled result-photo storage
• Vercel — hosting + analytics
• Resend — transactional email (parent digest and product-feedback notification)
• Surge: SMS delivery for opted-in phone numbers
• Web Push — browser notifications you opt into
• Google — Calendar connection (read-only event times), if you connect it
• Apple Push Notification service — native iOS notifications you opt into
• Anthropic Claude — optional verification of parent-captured result photos, opt-in per goal

Your rights

You can export, correct, or delete your household's data at any time. Email support@halloffam.com and we'll respond within 30 days.

Changes

If we change this policy in a way that affects you, we'll notify the household coach by email before it takes effect.