Plain-language summary: Starboard Family Rewards is a family-focused app. Only parents and guardians create accounts. Children use the app in a read-only "Child mode" supervised by their parent's account. We collect only what's needed to run the app, we never sell your data, and we take the privacy of children seriously.
Airspaces, LLC ("Airspaces," "we," "us," or "our") is the developer and publisher of the Starboard Family Rewards mobile application (also referred to as "Starboard," collectively the "App"). This Privacy Policy applies to all applications and services published by Airspaces, LLC under the Starboard brand.
Our principal place of business is in the United States. If you have questions about this policy, see Section 13 – Contact Us.
This policy applies to information collected through the App and any associated websites operated by Airspaces, LLC (including airspaces.co). It does not apply to third-party websites or services that we may link to.
Who may create an account: Only adults aged 18 or older (parents or legal guardians) may register for an account. Children use the App in a supervised, read-only "Child mode" under their parent or guardian's account — children do not create their own accounts or credentials.
We collect the following categories of information:
| Category | Examples | Who provides it |
|---|---|---|
| Account information | Name, email address, password (hashed) | Parent / guardian at registration |
| Family profile information | Children's first names or nicknames, profile photos or avatars | Parent or child in Child mode |
| User-uploaded photos | Profile avatars, reward-related images | Parent or child in Child mode |
| App usage data | Feature interactions, session frequency, in-app events | Collected automatically |
| Crash & diagnostics data | Device model, OS version, error logs, stack traces | Collected automatically |
| User identifier | Firebase Authentication UID (a randomly assigned opaque string, not linked to any device hardware identifier) | Assigned automatically at account creation |
| Performance metrics | App startup time, screen render durations, network latency | Collected automatically via Firebase Performance Monitoring |
How the user identifier is used: The Firebase Auth UID is used solely to associate your account data with your family's records and, in the event of a security violation, to log the event for investigation. It is not used for advertising, cross-app tracking, or user profiling, and is not shared with advertising networks or data brokers.
What we do not collect: We do not collect payment card numbers, precise geolocation, Social Security numbers, government ID numbers, device hardware identifiers (IDFV, IDFA), or any data from children through independent accounts. We do not use advertising identifiers or serve third-party ads.
We use the information we collect solely to operate and improve the App:
We do not use your information for behavioral advertising or sell it to data brokers.
We do not sell, rent, or trade your personal information. We share data only in these limited circumstances:
Your family's reward data, child names, and photos are never shared with other users or made public.
The App is designed for use by families. Only parents and guardians (18+) create accounts. Children interact with the App exclusively through the supervised, read-only "Child mode" within their parent's account.
We comply with the Children's Online Privacy Protection Act (COPPA) and take the following measures:
If you believe a child under 13 has provided personal information to us without parental consent, please contact us immediately at privacy@airspaces.co and we will delete the information promptly.
We retain your account information for as long as your account is active. Child profile information (names, nicknames, photos, and avatars) is retained solely to provide the App's functionality to your family and is not used for any other purpose.
You may delete your account at any time through account settings or by contacting us at privacy@airspaces.co. Upon deletion:
We implement industry-standard technical and organizational safeguards to protect your information, including encryption in transit (TLS) and at rest, access controls limited to authorized personnel, and regular security reviews.
No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. If you discover a security issue, please report it to privacy@airspaces.co.
Depending on your location, you may have rights regarding your personal information, including:
To exercise any of these rights, contact us at privacy@airspaces.co. We will respond within 30 days. We may need to verify your identity before processing your request.
California residents (CCPA/CPRA): You have the right to know what personal information we collect and share, to request deletion, and to opt out of the sale of personal information. We do not sell personal information.
EEA/UK residents (GDPR): You may lodge a complaint with your local supervisory authority. Our lawful basis for processing is performance of a contract (operating the App) and legitimate interests (security, analytics).
The App uses the following categories of third-party services. Each provider has its own privacy policy governing their data practices:
| Provider | Purpose | Data shared | Privacy Policy |
|---|---|---|---|
| Firebase (Google LLC) | Cloud backend, authentication, and file storage (photos/avatars) | Account info, child profile data, uploaded photos | Google Privacy Policy |
| Firebase Analytics (Google LLC) | Aggregate understanding of feature usage to improve the App | Pseudonymous usage events, device type, OS version, app version | Google Privacy Policy |
| Firebase Crashlytics (Google LLC) | Identifying and diagnosing app crashes and errors | Error logs, device model, OS version, app version, app state at time of crash. Firebase Auth UID is included only when a security violation is logged. | Google Privacy Policy |
| Firebase Performance Monitoring (Google LLC) | Measuring app startup time, screen render performance, and network latency to improve app speed | Timing and latency metrics; no personally identifiable information | Google Privacy Policy |
| Google Fonts CDN (Google LLC) | Serving app typefaces at runtime | HTTP request metadata (IP address, device info, font name) logged by Google's CDN on each font load. No app-controlled opt-out is implemented. | Google Privacy Policy |
All third-party service providers are contractually required to handle data consistent with this policy and applicable law. We do not use advertising networks, data brokers, or any service that monetizes user data. Google LLC's services are subject to Google's data processing terms in addition to their privacy policy linked above.
The App is operated from the United States. If you access the App from outside the United States, your information may be transferred to and processed in the United States, which may have different data protection laws than your country of residence. By using the App, you consent to this transfer.
We endeavor to comply with applicable data protection laws in the jurisdictions where our users reside, including GDPR (EEA/UK) and PIPEDA (Canada).
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where required by law, by sending a notice to the email address associated with your account.
Your continued use of the App after any update constitutes acceptance of the revised policy. If you do not agree to the updated policy, please stop using the App and delete your account.
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:
For COPPA-related requests (review or deletion of a child's information), please email privacy@airspaces.co with the subject line "COPPA Request."