Privacy policy

Who we are

Hall of Fam is operated by Tokenburner Labs. Questions about this policy or Hall of Fam SMS messages can be sent to support@halloffam.com.

What we collect

We collect the minimum needed to run a family achievement app: your email and the names + ages of household members you add as players, the goals you create, the photos and screenshots players attach as proof of a win, and the resulting points and streaks.

If you connect a calendar, we read events to figure out who's home on which day. We don't read meeting bodies, attendees, or attachments — just date and a tag/title match against player names.

If you add a phone number or request an SMS sign-in link, we collect the phone number and delivery events needed to send account access, setup, reminder, alert, and support texts.

SMS and mobile opt-in data

Hall of Fam sends transactional SMS messages only after a coach, parent, guardian, or player opts in. These messages may include account access links, setup links, reminders, alerts, and support notices. We do not send marketing or promotional SMS messages.

We do not share mobile contact information with third parties or affiliates for marketing or promotional purposes. Information may be shared with service providers solely to operate and deliver Hall of Fam messages. All other data-sharing categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Message frequency varies based on household settings and activity. Message and data rates may apply. Consent to SMS messages is not a condition of purchase or app use. You can opt out of SMS messages at any time by replying STOP. Reply HELP for help, or email support@halloffam.com.

Children's data (COPPA)

This app is designed to be set up by a parent or guardian for use within their own household. Parents are the account owners; kids access via parent-issued logins. We don't advertise to kids, don't sell data, and don't share kid data with third parties beyond the infrastructure required to run the app (database, file storage, email, push delivery).

Parents can delete their household at any time, which removes all associated profiles, submissions, photos, and stat events.

How we store it

Data lives in a Postgres database (Supabase). Photos live in object storage (Supabase Storage). Both are encrypted at rest and in transit. Access is gated by row-level security so a household can only ever read its own data.

Third parties we use

• Supabase — database, auth, storage
• Vercel — hosting + analytics
• Resend — transactional email (parent digest)
• SignalWire: SMS delivery for opted-in phone numbers
• Web Push — browser notifications you opt into
• Anthropic Claude — optional photo verification, opt-in per goal

Your rights

You can export, correct, or delete your household's data at any time. Email support@halloffam.com and we'll respond within 30 days.

Changes

If we change this policy in a way that affects you, we'll notify the household coach by email before it takes effect.