Privacy Policy

Last updated: April 11, 2026

The short version: We collect only what's needed to help you plan your kids' activities. We don't sell your data, we don't show ads, and we don't share your information with third parties except the infrastructure providers that run the app (Google/Firebase). You can delete your data at any time.

1. Who we are

One Little City is a community app built for families in Falls Church City, Virginia. It helps parents manage school calendars, summer camps, and local events. The app is operated by One Little City LLC.

2. What we collect

We collect only the data you provide directly:

Account info: Email address and display name when you sign up
Family profile: Children's first names, ages or birthdays, and camp/program selections
Preferences: Digest email settings, community sharing opt-in status
Usage analytics: Anonymous session data (page views, feature usage) to improve the app. This includes a randomly generated visitor ID — not your real identity

We do not collect:

Social Security numbers, government IDs, or financial information
Precise GPS location (we only use city-level for weather)
Photos, contacts, or other device data
Data from children directly — all data is entered by parents

3. How we use your data

Camp planning: Your family profile helps the AI planner recommend age-appropriate camps
Email digest: If you opt in, we send a weekly summary of upcoming school dates and camp schedules
Community features: If you opt in to community sharing, your children's first names and camp selections are visible to other signed-in parents
Analytics: We use anonymous, aggregated data to understand which features are used and improve the app

4. AI features

Our AI Camp Planner and Camp Concierge use Claude by Anthropic to generate recommendations. When you use these features:

Your intake answers (child's age, interests, budget) are sent to Anthropic's API
Anthropic does not use your data to train AI models
No personally identifying information (email, full names, address) is sent to the AI — only first names, ages, and preferences
AI responses are not stored by Anthropic after processing

5. Where your data is stored

All data is stored in Google Firebase (Firestore) in Google Cloud's US data centers. Firebase provides:

Encryption at rest and in transit (TLS 1.2+)
SOC 1/2/3 and ISO 27001 compliance
Automatic backups

We do not store data on personal servers or outside of Google Cloud infrastructure.

6. Who can see your data

You: Full access to your family profile and all data you've entered
App administrators: Can view aggregate analytics (DAU, feature usage). Cannot see individual family profiles or camp selections
Other parents: Only if you opt in to community sharing — limited to first names and camp/week selections
Third parties: We do not sell, rent, or share your data with advertisers, data brokers, or any third party. Infrastructure providers (Google Cloud, Anthropic, Resend) process data only as needed to deliver the service

7. Data retention

Family profiles: Kept until you delete your account
Analytics: Anonymous session data is automatically deleted after 90 days
AI conversations: Not stored after the session ends

8. Your rights

You can at any time:

View all data associated with your account (visible in the app)
Edit your family profile, children's info, and preferences
Delete your account and all associated data by contacting us
Opt out of email digests and community sharing in your account settings
Export your camp schedule data (CSV/ICS export in the app)

9. Children's privacy (COPPA)

One Little City is designed for use by parents and guardians, not by children directly. We do not knowingly collect personal information from children under 13. All data about children (first names, ages, camp selections) is entered and managed by their parent or guardian.

10. Security

We take security seriously:

All connections are encrypted via HTTPS with HSTS preload
Security headers: Content Security Policy, X-Frame-Options, X-Content-Type-Options
API secrets managed through Google Cloud Secret Manager
Rate limiting on all API endpoints
Firebase Authentication for account access
Firestore security rules enforce data isolation between users

11. Changes to this policy

We may update this policy as the app evolves. Significant changes will be communicated via the app or email digest. The "last updated" date at the top reflects the most recent revision.

12. Contact

Questions about your data or this policy? Contact us:

Email: privacy@onelittlecity.com
Or use the in-app feedback form