Privacy Policy

Information we collect

• Account information: your name, email address, and, if you choose to enable text messaging, your mobile phone number.
• Family information: the family members and caregivers you add and their relationship to you. For a child, we store only the display name their parent chooses (for example, "Sam"). We do not collect a child's legal name, and there is no field for a child's surname anywhere in ToBetter100.
• Caregiver information: if you invite a caregiver, the name you give for them and, for caregivers who take part by text, their mobile phone number.
• Content you create: tasks, calendar entries, your family's messages in the family chat with Betty (our assistant), care notes (short notes a parent writes for the people who help the family, such as house details, children's routines, and who to call; a parent chooses which helpers can read each one, and these notes may include details about children), and photos and documents you upload (including account statements you choose to add in the Money view).
• Financial information you connect: if you choose to link bank or card accounts through Plaid or upload account statements, the account details, balances, and transactions described under "Connected financial accounts" below.
• Usage and device information: basic logs and technical data needed to run and secure the service.

How we use your information

We use your information to provide and operate ToBetter100: to run your account, deliver Betty's assistance, send the messages and reminders you have asked for, keep the service secure, and improve how it works. We do not use your information for advertising.

Text messaging

If you opt in to text messaging, we use your mobile number to send the messages described in our Terms: conversational replies, the daily family briefing, task and event reminders, and family invitations. We record your consent with a timestamp. You can opt out at any time by replying STOP.

Caregivers can take part in your family's chat entirely by text. When a parent invites a caregiver by phone number, we text that caregiver an invitation that names the family and explains how to opt out. If they continue, the family chat messages that concern them (messages that mention them, and tasks and events shared with them) are forwarded to their phone, and their replies are posted into the family chat, attributed to them by name. The daily family briefing, which describes the family's day, is texted to a caregiver only on the days you have granted them calendar access, and not at all on any other day. A caregiver can stop these texts at any time by replying STOP, and the family is shown that their texts are paused.

We do not sell your mobile phone number or your SMS consent, and we do not share your mobile opt-in information with any third parties or affiliates for their own marketing or promotional purposes. Your mobile opt-in data and consent are used only to operate ToBetter100's messaging program, and are shared only with our SMS provider (Twilio) as needed to deliver the messages you have requested. No mobile information is shared with third parties for marketing under any circumstances.

How we share information, and how we don't

We do not sell your personal information, and we do not share it with third parties for their own marketing. We share information only with service providers who help us operate ToBetter100, for example our messaging provider (Twilio), our AI provider (used to generate Betty's replies), our email provider, and our cloud hosting provider. These providers may process your information only to perform services for us and are required to protect it. We may also disclose information if required by law or to protect the safety of our users.

AI assistance

Betty's responses are generated with the help of an AI provider. The messages you send to Betty, along with relevant context, are processed by that provider to produce replies. Betty is a supportive assistant, not a substitute for professional medical, mental-health, legal, or financial advice.

Analytics and error reporting

To understand how ToBetter100 is used and to make Betty better, we collect product usage data with PostHog: events like pages viewed, features used, and how long Betty takes to respond, tied to a random account identifier. This usage data never includes the content of your conversations, your calendar details, or any financial figures, and we never collect analytics about children. We honor your browser's Do Not Track setting, we do not use analytics for advertising, and we never sell your data. We also use Sentry to collect error and crash reports so we can fix problems; those reports are scrubbed of names before they are stored. Analytics data about your account is deleted when you delete your account.

Connected calendars and Google user data

You can connect a third-party calendar (Google Calendar, Microsoft Outlook, or Apple iCloud) to ToBetter100. When you do, we access your calendar only to provide the calendar features you ask for: we keep a synced copy of your calendar list and events so Betty and the Time view can show your family's day, help you plan, and flag conflicts. We create or update events on your behalf only when you add or edit them yourself in the Time view or explicitly ask Betty; deleting an event always requires your explicit confirmation with Betty first. Betty can also make a new calendar for you, or rename or delete one, when you ask her to; deleting a calendar likewise always requires your explicit confirmation with Betty first.

If you grant a caregiver calendar access (a pass for a specific day, or a standing weekly schedule), they see the family's calendar for exactly the days you granted and nothing else, and they can never create, change, or delete events. You can revoke a caregiver's access at any time.

For Google Calendar, we use the Google Calendar API with the permissions you grant on Google's consent screen: seeing your calendars and events, managing events, and making new calendars for you. That last permission reaches only the calendars ToBetter100 creates: it does not let us rename or delete a calendar you made yourself. Google user data is used only to provide these user-facing calendar features, never for advertising, and it is never sold. Synced calendar data is encrypted in transit and at rest. When you ask Betty about your schedule, relevant event details are shared with our AI provider solely to generate Betty's reply; we do not allow Google user data to be used to develop, improve, or train generalized AI or machine-learning models. Beyond that processing and our cloud hosting provider, we do not transfer Google user data to anyone except as needed to comply with applicable law.

ToBetter100's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect a calendar at any time in the Time view, or by asking Betty. Disconnecting stops all syncing, deletes our stored access credentials, asks the provider to revoke our access where the provider supports it (Google), and removes your synced calendar data from the service. You can also revoke ToBetter100's access yourself at any time in your Google Account permissions. Removed calendar data is retained in our secured systems only as described under "Data retention and security" below, then deleted or de-identified.

Connected financial accounts

Adults in a family can connect bank and card accounts to ToBetter100: by linking them through Plaid, or by uploading account statements that are read into a manually tracked account. When you do, we keep a synced copy of your account information (institution, account name and type, the last four digits of the account number, and balances), your transactions (date, amount, merchant, and category), and, for credit cards at banks that report it, your card's statement details (statement balance, minimum payment, payment due date, purchase interest rate, and whether a payment is overdue) so the Money view can show your balances, spending, budgets, card due dates, and insights, and so we can alert you to unusual activity with a notification. Money stays in the Money view: financial details never appear in the family chat, and Betty does not discuss balances or transactions there. Financial features are for adults only: children can never connect accounts, and financial data is never shown to children or to caregivers.

When you link an account, you sign in to your bank on Plaid's own secure page. Your banking username and password are never shared with ToBetter100, and we never store full account or card numbers. Plaid processes your information under its own end-user privacy policy. ToBetter100's access is read-only and always will be: we never make payments, transfers, or trades on your behalf, and Betty cannot move your money.

You control what your family sees. Each connected account is either shared with the other adults in your family or private. Accounts start as shared, and you can make any account private (or shared again) at any time in the Money view. A private account is never visible to anyone but you, and family budgets are computed only from shared accounts, so a private account can never be inferred from a budget. Financial data is encrypted in transit and at rest, is used only to provide these features (never for advertising), and is never sold. If you upload an account statement, our AI provider reads that document solely to transcribe it for your review, and nothing is saved until you confirm the transcription yourself.

You can disconnect a financial account at any time in the Money view. Disconnecting stops all syncing, asks Plaid to remove the connection where one exists, deletes our stored access credentials, and removes your financial data from the service. Removed financial data is retained in our secured systems only as described under "Data retention and security" below, then deleted or de-identified.

Children

ToBetter100 is designed for parents and couples, and accounts are created by adults. A parent or guardian may add a child to their family; we collect only the display name the parent chooses for the child and the limited family details the parent provides, and use them solely to provide the family features. We never ask for a child's legal name. We do not knowingly let children create their own accounts. A parent may review or request deletion of their child's information by contacting us.

Your family chat

Your family has one shared chat: the family room, where family members, invited caregivers, and Betty talk. Messages you send there are visible to the other members of your family. Caregivers see the room's history only from the moment they joined, unless the inviting parent chose to share a longer window when inviting them. The chat is a record your family can rely on: messages cannot be edited or deleted one by one, and your own messages are erased when you delete your account. Betty's own replies stay in the room when you leave, because the room belongs to the whole family and removing her side of it would leave the rest of your family with a conversation full of holes. Betty reads the family chat in order to help; she never shares one family's chat with another family, and money never appears there.

How we access your data

Running ToBetter100 does not require reading what you write. Our internal tools show account and usage information: who is in a family, which features are connected, whether things are working, and how long Betty takes to reply. That is what we look at day to day, and it does not include the contents of your conversations.

Fixing a specific problem sometimes means looking at the contents. If a reply fails, or you tell us something went wrong, someone on our team may open the messages in the conversation involved, or the title of a task. That access is deliberate rather than casual: it requires a stated reason, and every one of those reads is logged individually, recording who opened what and why. We do not read your conversations routinely; we look when there is a specific problem to investigate.

Your account balances and transaction amounts, the name of your bank, and the details of your calendar events are never displayed on any internal tool. Children appear only by their parent-chosen display name on our internal tools, the same as everywhere else in ToBetter100.

Data retention and security

We keep your information for as long as your account is active and as needed to provide the service, then delete or de-identify it. We use reasonable technical and organizational measures to protect your information, though no system is perfectly secure.

Specific windows: calendar data you remove (or that is deleted at the provider) is hard-deleted after 30 days. Text and WhatsApp messages you send us are logged for delivery and duplicate protection, and the stored copy of the message text and sending number is erased after 30 days. After an account deletion, the remaining personal records are permanently deleted from our database within 30 days. Encrypted database backups are kept for up to 90 days, so a deleted record can persist in a backup for that long before the backup expires.

When we retire a feature, we tell you in the app and permanently delete that feature's historical data within 30 days of the notice. The data from features retired in August 2026 (mood and check-in entries, goals, insurance records, and related content) is being deleted on that schedule.

Deleting your account

You can delete your account at any time, in the app (tap the menu button at the top of Home, then Delete account) or on the web at app.tobetter100.com/delete-account. Deleting your account immediately erases your profile details (name, email, phone number), removes you from your family, ends every session, disconnects any linked calendars and bank accounts, and deletes the photos and documents you uploaded. That includes files you picked and uploaded but never actually sent.

Your messages in the family chat and any synced financial history stop being available in the app at the same moment, and are permanently deleted from our database within 30 days. If you were the last adult in your family, the family's remaining profiles (including children added by a parent) are erased on the same schedule.

Some information is retained: tasks and things you shared with your family stay part of that family's history, no longer associated with your name; Betty's replies in the family room stay too, and they can refer to things you said, because the room is a shared record your family keeps; and we keep limited consent, opt-out, and audit records as required for legal, security, and fraud-prevention purposes. You can also request deletion by emailing support@tobetter100.com.

Your choices

You can review and update your information in the app, change your notification preferences there, opt out of text messages by replying STOP, and delete your account in the app (tap the menu button at the top of Home, then Delete account) or at app.tobetter100.com/delete-account.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

Contact

Questions about this policy or your information: support@tobetter100.com.