Privacy Policy

Brand: Masch Media

Legal entity: Masch Media LLC

Effective date: October 21, 2026.

This Privacy Policy is effective October 21, 2026. BothKnow is offered under the Masch Media brand. Masch Media LLC operates the service. Effective date: October 21, 2026. Privacy contact: support@masch.media.

Information the current source can store

Account sign-in can store an email address, an account identifier, session information, and the Apple or Google identity the person authorizes. Apple or Google may provide an email address or, for Apple, a private relay address. The app does not receive a face or fingerprint template. When biometric unlock is turned on, the phone performs the check and BothKnow receives only the result.

A family profile can store a name, relationship, birthday, clothing sizes, school, teacher, grade, doctor, doctor phone, insurance, and notes. Health fields can store medications (name, dosage, and notes), medication allergies, and food allergies. A profile can include a JPEG photo. An event can store a title, time, location, who is attending, notes, assignments, and file attachments. A document can store a title, a category (Insurance, Vaccinations, Identity, or Other), and a file the person selects. Suggestions and in-app updates can store short text the person writes.

The file picker accepts a file the person chooses. That file can be a document, image, or audio file within the size limits in the source. The camera and photo picker supply the item you select. The app does not request the microphone, the device address book, GPS location, or unrestricted access to the photo library. Profile photos and image documents are re-encoded as JPEG without the source image’s EXIF metadata. Other selected files can keep their own contents and metadata. Sharing a file uses the phone’s share sheet and sends a copy to the app you pick.

A calendar the person chooses can be read for event titles, dates, and locations. Additions the person makes stay in BothKnow and are not written back to that calendar. A separate action can open the phone’s calendar editor with the event title, time, and location only. A typed assignment name is a label. Only an assignment to a family member can create an in-app notice, and delivery is not guaranteed. Place search sends the search text to Apple MapKit. A chosen place can be saved with an event. The places code does not request GPS, keep a search history, or cache place files.

Signup can store an age band of 16–17 or 18+, a United States location declaration, and, for ages 16–17, a guardian request email and the request status. BothKnow accounts are for people in the United States who are 16 or older. Ages 16–17 need a parent or legal guardian to confirm permission from their own BothKnow account. People under 16 cannot create an account. The signup code rejects under 16 and locations outside the United States. A guardian confirmation does not by itself share records or grant family access.

Family sharing can store membership, role, invitation email addresses, and encrypted shared records. Personal records are not copied into a shared family automatically.

Processors

Supabase provides authentication, database, and backend storage when account saving or family sharing is on. Sign-in codes are requested through Supabase. Resend is called by the family-invitation function and sends that mail from BothKnow (security@auth.masch.media). Apple processes Sign in with Apple. The phone’s operating system handles Face ID or fingerprint checks and MapKit place search. Google processes Sign in with Google. App Store purchase code exists, and the current production configuration leaves purchases off. The app source does not collect full payment-card numbers.

How information is used

The source uses this information to sign the person in, encrypt and save records they choose to keep, restore a saved account, show family records to people with access, send invitations and assignment notices, and enforce the signup checks above. The source has no advertising or cross-app tracking feature.

Personal records are encrypted on the phone before they are saved. With account saving on, the encrypted record and recovery material can be stored through the backend. A verified sign-in can restore the last confirmed account save. This policy does not claim that only the person’s devices can decrypt records. An edit that never reached a confirmed save is not restored from the service. An unfinished personal edit can stay encrypted on this phone until you save or discard it. An unfinished shared-family edit stays in app memory and is dropped when the app process closes.

If two phones save different versions, the app can keep both encrypted versions for review. Some accounts still use a recovery code for an encrypted backup. Keeping those copies is not a promise that every backup or provider copy is erased.

Access, correction, and deletion requests

To ask for access, correction, or a deletion review, open Menu → Privacy choices when that page is available, or email support@masch.media. Someone whose information appears in a family profile can write to that address without creating an account. Do not send medical records, identity documents, passwords, email codes, or recovery keys in the first message. Receiving a request is not the same as fulfilling it. Appeals, requests from people without an account, retention, provider deletion, and restore safeguards are not finished.

The app can prepare a local copy of records already open on this device for an access request. That control is off unless a separate build flag is set to local-v1. The copy leaves out file bytes. It does not close the request, delete records, include another account’s data, or send the copy to Masch Media LLC, Supabase, or Resend.

To review account deletion, open Menu → Manage account. That screen is off unless the account-deletion release flag is turned on. The deletion code removes families that account owns and does not remove a family owned by someone else. It does not revoke Apple or Google sign-in, and it does not cancel an Apple subscription.