Skip to main content

Privacy Policy

Last updated: May 2, 2026

Your family's data belongs to your family. That is the foundation everything here is built on.

Our Privacy Commitment

My3Contacts is a tool for families. The main purpose of the data you enter — contact names, phone numbers, email addresses, and your children's account information — is simple: to make that information available to your child when they need it. We use it only as described in this policy to provide, protect, and support the service.

We do not sell your data. We do not share it with advertisers. We do not use it to build profiles, run analytics on your family's behaviour, or provide it to any third party for their own advertising, marketing, profiling, data brokerage, or unrelated commercial purposes. That commitment does not change.

This is not a platform built on advertising revenue or data monetisation. It is a simple, paid service. You are the customer — not the product.

What Information We Collect

Parent account information

Your email address and password, used to create and access your account. Your email is never sold to or shared with any outside party for commercial purposes.

Emergency contact details

Names, phone numbers, email addresses, home and work addresses, and any notes you choose to enter for each contact. This is the core data of the service. It is stored securely and displayed only to you and the children you have assigned it to.

Child account credentials

A username and password for each child account you create. We do not ask children to provide email addresses, dates of birth, location, photos, or any other profile information. All information in a child account is provided or controlled by the parent.

Billing information

Payment is processed by our payment provider. We do not store your full card number, CVV, or raw payment details on our systems. We do retain limited billing metadata necessary to manage your subscription, including: subscription status, payment confirmation records, invoices, your billing email address, a payment provider customer ID, and a truncated card summary (card brand, last four digits, and expiry month and year). Our payment provider handles raw payment data under their own security and privacy obligations.

Technical and security information

Like most web services, we may collect limited technical information such as IP address, browser type, device information, authentication timestamps, access logs, and error logs. We use this only to operate, secure, troubleshoot, and protect the service — not to profile users or for any commercial purpose.

What We Do Not Collect

  • No advertising trackers or marketing pixels
  • No behavioural analytics or usage profiling
  • No third-party social media login or tracking
  • No selling, renting, or sharing of your data with third parties for their advertising, marketing, or commercial purposes
  • No device fingerprinting
  • No email marketing without explicit opt-in

How We Use Your Information

We use your information only for the purposes described below, and for closely related operational purposes such as security monitoring, fraud prevention, troubleshooting, legal compliance, and maintaining the reliability of the service.

  • To authenticate you when you sign in
  • To display your emergency contacts to your child when they log in
  • To process your subscription payment
  • To respond to support requests you send to us
  • To send essential account-related emails such as password resets
  • To detect and prevent abuse, fraud, or security incidents
  • To maintain the security, stability, and reliability of the service

How Your Data Is Stored and Protected

Your data is stored using Supabase, a managed database infrastructure provider that applies industry-standard encryption both in transit (TLS) and at rest. Authentication is handled through Supabase Auth. Passwords are hashed using industry-standard methods and are never stored in plain text.

Access to your data within the application is enforced by Row Level Security policies, meaning each parent account can only read and write their own data, and each child account can only read the contacts assigned to them.

We design the service so that family contact data is only accessible through authorised parent and child accounts. Administrative access to the underlying infrastructure is restricted and used only when necessary to operate, secure, troubleshoot, or comply with legal obligations for the service.

In the event of a data breach that affects your personal information, we will notify affected users as required by applicable law, including within the timeframes required under PIPEDA and other applicable privacy legislation.

Service Providers

We use a small number of trusted service providers to operate My3Contacts. These providers may process personal information only as needed to provide their specific services to us. They are not permitted to use your data for their own purposes.

  • Supabase — database hosting and authentication
  • Cloudflare — web hosting and content delivery
  • A payment provider — subscription billing (raw payment card data is not stored by us)
  • A transactional email provider — for password resets and essential account emails

We do not use any advertising networks, marketing analytics platforms, or data brokers.

Children's Privacy

My3Contacts is intended to be used by children only with parent or guardian involvement. Parent accounts create and manage all child accounts. Children may use the service to sign in and view the contacts their parent has assigned. We do not ask children to provide email addresses, dates of birth, location, photos, or any other profile information. Any information associated with a child account is provided or controlled by the parent.

Parents are in complete control of their child's account and can update, reassign, or delete it at any time. Where applicable law requires parental consent for a child's use of online services, we rely on the parent or guardian to create and manage child accounts and to provide that consent on the child's behalf.

If you believe we have inadvertently collected personal information from a child without appropriate parental involvement, please contact us immediately at support@my3contacts.com.

Your Rights

You have the right to access, correct, and delete the personal information associated with your account at any time. You can:

  • Update your account details and contacts through the parent portal
  • Delete any contact or child account from within the app
  • Request complete deletion of your account and all associated data by contacting us

When you request account deletion, we will remove your active account data and begin the deletion process within 30 days. Please note that deleted data may remain in encrypted backups for a limited period before being permanently overwritten. Backup data is not used for any operational purpose and will not be restored except in the case of a disaster recovery event or legal obligation.

Data Retention

We retain your data for as long as your account is active. If your subscription ends, we retain your account data for up to 90 days in case you choose to reactivate, unless you request deletion sooner. We will notify you by email before any scheduled deletion of an inactive account occurs.

You may request immediate deletion of your account and data at any time by contacting us at support@my3contacts.com.

Jurisdiction and Applicable Law

My3Contacts is operated from Ontario, Canada. This policy is written with reference to the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, Quebec's Act respecting the protection of personal information in the private sector (Law 25).

Depending on where you live, you may have additional privacy rights under your local law. If you are located in the European Economic Area, you may have rights under the GDPR. If you are located in California, you may have rights under the CCPA. We will respond to privacy rights requests as required by applicable law.

The person responsible for privacy at My3Contacts can be reached at support@my3contacts.com.

Changes to This Policy

If we make material changes to this policy, we will notify you by email before the change takes effect and update the date at the top of this page. The core commitment — that your family's data is your family's data, and will never be sold or used for advertising — will not change.

Questions or Concerns

If you have any questions about this privacy policy or how your data is handled, please reach out. We are a small team and we take these questions seriously.

Email Us