Privacy Policy

Effective Date: December 25, 2025

Someday ("we," "us," or "our") is committed to protecting your privacy and the privacy of your family. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Someday mobile application ("App").

Data Controller: Someday is operated by Room to Grow LLC, a California limited liability company. For privacy inquiries, contact us at support@getsomeday.app.

      Our Commitment: We do not sell your personal information. We do not use your data for advertising. We do not track you across other apps or websites. We collect only what is necessary to provide you with a great wishlist experience.
    

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

Data	How Collected	Purpose
Email address	Provided by you during sign-up, or from Apple/Google Sign-In	Account creation, authentication, communication
Display name	Provided by you, or from Apple/Google Sign-In	Personalization, family sharing display
Profile photo	Optional; uploaded via camera or photo library	Account personalization
Authentication tokens	Generated by Apple/Google Sign-In or Firebase Auth	Secure authentication

1.2 Child Profile Information

When you create profiles for your children, we collect:

Data	How Collected	Purpose
Child's first name	Entered by parent/guardian	Identify wishes by child
Date of birth	Entered by parent/guardian	Age-appropriate features, developmental insights
Avatar color	Selected by parent/guardian	Visual profile identification
Profile photo	Optional; uploaded via camera or photo library	Profile personalization

Parental Control: Someday is intended for parents and guardians. We do not permit children to create accounts. All child data is created and managed by parents/guardians. Children do not directly interact with or provide data to the App.

1.3 Wish Item Information

Data	How Collected	Purpose
Item photos	Captured via in-app camera or selected from photo library	Wishlist display, AI product identification (with consent)
Item name & description	Entered by you or generated by AI (with consent)	Wishlist organization
Price information	Retrieved from retailer APIs via our secure proxy	Price comparison, purchase planning
Store preferences	Selected by you	Store finder feature

1.4 Location Information

Data	How Collected	Purpose
Precise location	iOS location services (only when you grant permission and use the store finder)	Find nearby stores that carry wished items

Location data is collected only when you actively use the store finder feature and grant iOS location permission. We do not collect background location.

1.5 Diagnostic Information

Data	How Collected	Purpose	Retention
Crash reports	Automatically via Sentry SDK when app crashes	Bug fixes, app stability	90 days
Performance data	Automatically via Sentry SDK	Performance optimization	90 days
Device type & OS version	Automatically from device	Compatibility, debugging	90 days

Note: We use Sentry for crash reporting and performance monitoring only. We do not use Firebase Analytics or any behavioral analytics SDK. We do not track in-app user behavior, screen views, or usage patterns for analytics purposes.

2. AI Features and Third-Party AI Processing

Explicit Consent Required: AI-powered product identification is an optional feature. You must explicitly choose to use it, and you can use the App fully without enabling AI features.

2.1 What We Send to AI

When you choose to use AI product identification, we send:

Item photo only (with EXIF metadata stripped for privacy)

We do NOT send: your name, email, child names, location, or any other personal information to the AI service.

2.2 AI Service Provider

We use Google Gemini for product identification. The AI analyzes the photo and returns:

Product name and description
Estimated price range
Recommended age range

2.3 Data Retention & Training

Photos are processed in real-time and are not stored by the AI service beyond the processing request
AI-generated descriptions are stored with your wish items in your account
Per our agreement with Google, your data is not used to train or improve their AI models

2.4 Opting Out

You can use Someday without AI features by manually entering item names and descriptions. AI product identification is only triggered when you explicitly tap the "Identify Product" button.

3. Price Comparison Services

To provide price information and store availability, we use secure proxy services to query retailer APIs:

Retailer data sources: Amazon, Target, Walmart (via third-party API proxies)
What we send: Product search terms only (derived from item name)
What we do NOT send: Your personal information, child data, or photos

Price and availability data is cached temporarily to improve performance and is not linked to your identity.

4. How We Use Your Information

Data Type	Purpose	Legal Basis (GDPR)
Account Information	Authentication, account management, communication	Contract performance
Child Profiles	Organizing wishes by child, personalized experience	Contract performance
Wish Items	Core app functionality, wish tracking, purchase history	Contract performance
Photos	Wishlist display; AI identification (with consent)	Contract; Consent (for AI)
Location	Finding nearby stores (only when actively requested)	Consent
Diagnostics	App stability, bug fixes, performance improvements	Legitimate interest

5. Information Sharing

5.1 Family Sharing

When you invite family members to your family group, they can view:

Child profiles you've created
Wish items for those children
Purchase status of items

You control who has access to your family group and can remove members at any time.

5.2 Service Providers

We share data with trusted third-party services that help us operate the App:

Provider	Service	Data Shared	Location
Firebase (Google)	Authentication, database, cloud storage	Account data, wish items, photos	United States
Google Gemini	AI product identification	Item photos only (with consent)	United States
Google Places	Store finder	Location (with permission), search queries	United States
Sentry	Crash reporting, performance monitoring	Crash logs, device info (anonymized)	United States
Retailer API Proxies	Price comparison	Product search terms only	United States

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

5.3 What We Do NOT Do

      We do NOT sell your personal information to third parties
We do NOT sell children's information under any circumstances
We do NOT use your data for targeted advertising
We do NOT share data with data brokers
We do NOT track you across other apps or websites (no ATT tracking)
We do NOT use behavioral analytics

    

6. Children's Privacy (COPPA Compliance)

Someday takes children's privacy seriously. We comply with the Children's Online Privacy Protection Act (COPPA) and similar regulations worldwide.

6.1 Our Approach

Someday is intended for parents and guardians, not children
Only adults (18+) can create Someday accounts
We do not permit children under 13 to create accounts
Child profiles are created and managed exclusively by parents/guardians
Children do not directly interact with or provide data to the App

6.2 Limited Data Collection

For child profiles, we collect only what is necessary:

First name only (not full name)
Date of birth (for age-appropriate features)
Wish preferences (toys, items they want)

6.3 Parental Rights

Parents can review all child data at any time within the App
Parents can modify or delete child profiles and associated data
Parents can delete the entire account, removing all child data

6.4 Inadvertent Collection

If we learn that we have collected personal information from a child under 13 without valid parental consent, we will delete that information promptly. Contact us at support@getsomeday.app if you believe this has occurred.

7. Data Security

We implement industry-standard security measures to protect your data:

Encryption in transit (HTTPS/TLS) and at rest
Secure authentication via Firebase Auth with Apple/Google Sign-In
Role-based access controls for family data
API keys secured server-side (not in app code)
EXIF metadata stripping from photos before AI processing
Regular security reviews

8. Data Retention

Data Type	Retention Period
Account data	Until account deletion
Child profiles	Until deleted by parent or account deletion
Wish items & photos	Until deleted by user or account deletion
Crash reports & diagnostics	90 days
Price cache data	24 hours

When you delete your account, your data is removed within 30 days, except where legally required to retain.

9. Account Deletion

      In-App Deletion: You can delete your account directly in the App by going to Settings → Account → Delete Account. This will permanently remove your account and all associated data including child profiles, wish items, and photos.
    

Account deletion is processed immediately. Data removal from our systems and backups completes within 30 days.

10. Your Rights

You have the right to:

Access: Request a copy of your personal data
Correct: Update inaccurate information (via App settings)
Delete: Delete your account in-app or request deletion via email
Portability: Request your data in a readable format
Withdraw Consent: Revoke permissions at any time (e.g., location, AI features)
Object: Object to processing based on legitimate interests

To exercise these rights, use the in-app settings or contact us at support@getsomeday.app.

11. California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:

Categories of Personal Information Collected

Identifiers (email, name, user ID)
Photos and user content
Geolocation data (with permission)
Internet/electronic activity (crash logs, device info)

Sources of Personal Information

Directly from you (account creation, content uploads)
From your device (diagnostics, location with permission)
From login providers (Apple Sign-In, Google Sign-In)

Categories of Third Parties

Cloud service providers (Firebase/Google)
Error monitoring services (Sentry)
AI processing services (Google Gemini, with consent)

Your CCPA Rights

Right to know what personal information is collected
Right to delete personal information
Right to opt out of sale (we do not sell personal information)
Right to non-discrimination for exercising your rights
Right to correct inaccurate personal information
Right to limit use of sensitive personal information

12. International Users (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland:

Data Controller

Room to Grow LLC
Email: support@getsomeday.app

Legal Basis for Processing

Contract: Processing necessary to provide the service you requested
Consent: For optional features like AI identification and location services
Legitimate Interest: For diagnostics and security

International Data Transfers

Your data is processed in the United States by our service providers (Google/Firebase, Sentry). These transfers are protected by:

Standard Contractual Clauses (SCCs) approved by the European Commission
UK International Data Transfer Addendum where applicable
Provider certifications and security measures

Your GDPR Rights

Access, rectification, erasure, and data portability
Restrict or object to processing
Withdraw consent at any time
Lodge a complaint with your local data protection authority

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

Posting a notice in the App
Sending an email to your registered address
Updating the "Effective Date" at the top of this policy

14. Contact Us

If you have questions about this Privacy Policy or your data, please contact us:

Room to Grow LLC
General Support: support@getsomeday.app
Privacy Inquiries: admin@roomtogrowllc.com