Privacy Policy

• Account: your name, email, password (stored as a one-way hash), and sign-in records (device, IP address, time) so you can see and end your sessions.
• What you add: family details, plans, lists, budgets, receipts, notes, photos, documents, and records about your children.
• Usage: which features are used and when, without the content itself, so we can improve Ureri and understand our costs.

• Everything is sent over encrypted connections.
• Sensitive content is encrypted with a key that belongs to your family (or, for children, to the child): health records, documents, photos, notes, letters, and money. A copy of our database alone can't be read without these keys.
• Our team can see that your family exists and how much it uses Ureri, but not your family's content.

• Your family: owners and partners see the family's shared content. Caregivers and viewers see only what you grant them. Kids see only their own kid view.
• AI providers: when you use an AI feature, the content needed for that request is sent to Anthropic or Google for processing under agreements that don't allow them to train on it.
• Service providers: hosting, email delivery (Resend) and file storage (Cloudflare R2), only to run Ureri.
• We never sell your data.

Records about children are created and controlled by their parents or guardians. If a parent switches on a kid account, we record that parent's consent. We don't show ads to anyone, and we don't build profiles of children.

• Your data is kept while your account is active.
• When you delete your family, its encryption keys are destroyed straight away, which makes the encrypted content unreadable at once. Remaining records are removed within 30 days, and key backups expire within 7 days.
• A child shared with another household stays with that household.

You can see, export, correct and delete your data from Settings. You can ask us anything at hello@ureri.com.

We'll publish new versions here, keep old ones readable, and ask you to accept important changes.