Privacy Policy

The short version

• You send us household documents; we extract calendar facts from them. That’s the product, and it’s the only thing your data is used for.
• No Chateoux employee reads your documents as part of any workflow. There are no humans in the loop.
• No child accounts exist and we collect no data directly from children.
• Allergy and medical fields are encrypted at the field level. Kitchen displays and shared links resolve to bounded, revocable slices — server-enforced.
• No third-party analytics or advertising SDKs. First-party usage analytics are de-identified and never joined to children’s records.
• We never sell data. We never use your documents to train models.

What we collect

Account data (the consenting adult’s email and sign-in records); household documents you explicitly forward, upload, photograph, or paste (stored privately, retained so extractions stay auditable, deletable by you); the extracted facts with their source and confidence; and de-identified usage events (e.g. “a review item was confirmed”) with no document contents.

How processing works

Documents are processed by an AI extraction service under a commercial agreement that prohibits training on your data. Extraction output is confidence-scored; low-confidence items are shown to you for review rather than acted on. Calendar sync uses a managed OAuth connection you explicitly grant and can revoke at any time.

Children

Chateoux is for parents and guardians. Children cannot create accounts, and we do not knowingly collect information from children. Information about family members that you choose to store (names on a calendar lane, an allergy on file) belongs to your household, is encrypted where sensitive, and is deletable with your account.

Your controls

Export your household ledger at any time. Delete artifacts, facts, or the whole household. Revoke kitchen devices, share links, and calendar connections instantly from Settings. Questions or requests: privacy@chateoux.ai.

Data we share

Infrastructure subprocessors only (hosting, database, AI extraction, email delivery, managed calendar OAuth), each under contract, each receiving the minimum required. No data brokers, no advertisers, no sale of data — ever.