FirstGrand.club
Legal

Privacy

Draft · under reviewWorking draft dated 7 July 2026. Not final legal text.

The short version

The guardian holds the account for anyone under 18, and we collect nothing about a teen until their guardian has consented. We keep teen details deliberately minimal. We do not sell data, and we do not use it for advertising. You can have everything deleted.

What we collect

  • From the guardian: name, email address and password for the account, the consent records you sign, and payment details, which are handled by Stripe. Full card numbers never touch our systems.
  • From the teen (only after guardian consent when under 18): first name, age band, suburb-level location, their questionnaire answers (interests, equipment, honest hours), and an email address for their own login.
  • From the journey: brainstorm transcripts, the decisions made at each step, the business brief, and the sales the family logs.

How we use it

  • To run the product: the research run, the brainstorms and the step-by-step plan all need the profile and journey content to work.
  • To keep guardians informed: every brainstorm transcript is emailed to the guardian when the session ends, and safety alerts name the topic of a blocked message without quoting the teen.
  • To improve the product, only if you opt in: guardians can tick an optional box allowing anonymised excerpts to be used for improvement. Leave it unticked and they are not.

Who processes it for us

We use a small set of service providers, each for one job: Stripe (payments), Supabase (database), Vercel (hosting), Anthropic (the AI provider that powers the research and the brainstorms), and Resend (email, including the transcript emails to guardians). Journey content is sent to the AI service only as needed to run your journey.

Deletion

The guardian can request deletion of the whole family account from Guardian corner. The account deactivates straight away, the data purge follows, and we email confirmation when it is done.

Contact

Questions about your data: contact address to be confirmed before launch.