Data Sharing Policy

1. What Information We Share

We only share data that is necessary to provide, improve, or secure our services. We never sell personal information to third parties. The categories of data we may share include:

2. With Whom We Share Data

FamilyNest shares information only with trusted entities under strict contractual and legal safeguards:

• Service Providers: Cloud hosting (AWS), analytics partners, payment processors, and communication tools. These vendors are bound by data processing agreements and may only use data to perform contracted services.
• Legal & Regulatory Authorities: When required by law, court order, or to protect the rights, safety, or property of FamilyNest, our users, or the public.
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred as a business asset. We will notify users and provide opt-out options where legally permissible.
• With Your Explicit Consent: For third-party integrations, shared research initiatives, or personalized recommendations that fall outside core service delivery.

3. How We Protect Shared Data

When data must leave our direct control, we implement rigorous safeguards:

• Encryption: All data in transit is encrypted via TLS 1.3. Data at rest uses AES-256 encryption.
• Access Controls: Role-based access, multi-factor authentication, and regular audit logs limit internal and partner access.
• Vendor Vetting: Third parties undergo security assessments, compliance reviews (SOC 2, GDPR, CCPA), and annual re-certification.
• Data Minimization: We share only the minimum data necessary for each specific purpose and regularly purge unused shared records.

4. Your Rights & Controls

You maintain control over your family's information. Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data
• Restrict or object to certain processing activities
\n
• Data portability in a machine-readable format
• Opt out of non-essential data sharing and analytics

5. Children's Privacy & Data Sharing

FamilyNest is designed with child safety as a priority. We comply with COPPA (USA), GDPR-K (EU), and other applicable youth privacy laws:

• We do not share identifiable data of children under 13 without verifiable parental consent.
• Children's accounts are linked to parent/guardian profiles and subject to strict access boundaries.
• Community forums and public features require age verification and adult supervision settings.

6. International Data Transfers

FamilyNest operates globally. Your data may be processed in countries other than your residence. We ensure cross-border transfers comply with applicable laws through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions and local data localization requirements where mandated
• Regular compliance audits and legal reviews

7. Updates to This Policy

We may update this Data Sharing Policy to reflect changes in technology, regulations, or our business practices. Material changes will be communicated via email or in-app notification at least 30 days before implementation. Continued use of FamilyNest services constitutes acceptance of updated terms.