Who operates CustomFrames
CustomFrames is operated by Anbumani Mailathipathy, operating as CreativeStudio14.com, India (“we”, “us”, or “our”). This policy covers the CustomFrames app, website and connected frame services. Contact us at support@customframes.app.
Use of the service is also governed by our Terms of Use. Connected third-party services have their own privacy policies.
Age and family permissions
Account holders must be at least 13 years old and meet any higher minimum age required by local law. Anyone under 18 must have a parent’s or legal guardian’s permission. If local rules require additional consent or safeguards, those requirements apply.
Account registration asks for an attestation of age eligibility and, where needed, guardian permission. This is a permission attestation, not verification of age or a guardian’s identity, and does not by itself establish legal compliance.
Adults may manage family profiles, including profiles for children, only with the authority and permissions required to do so. A family profile is not necessarily a separate account. Share children’s information thoughtfully and only with appropriate people. A parent or guardian concerned about a child’s information can contact support to request review, access or removal, subject to applicable law and proportionate verification.
Information we handle
- Accounts and sign-in: email address, name, account preferences and authentication information. For Google or Apple sign-in, tokens are verified and we retain the email, name when supplied, and provider identifier. Apple refresh tokens, where retained for revocation, are encrypted.
- Household content: photos and their metadata, including embedded EXIF when present, captions, crop and display edits; family profiles; calendar events; chores, rewards, activity records, lists, meal plans and countdowns.
- Optional connections: calendar source details, selected calendar content and credentials needed for Google, Microsoft, CalDAV or iCal connections. Calendar OAuth credentials and other retained connection secrets are encrypted.
- Devices and operations: pairing information, device status and telemetry, intake and guest submissions, notification settings, caches, diagnostic logs and technical request information needed to operate and secure the service.
- Requests you make: support correspondence, email preferences, selected AI inputs and the family context disclosed for the optional AI feature you use.
Information depends on the features you use and the deployment configuration. Avoid uploading sensitive information that is not necessary for your household’s use.
How we use information
We use information to authenticate accounts, pair and sync frames, store and display content as you direct, coordinate household features, deliver requested notifications and service emails, support users, and diagnose reliability or security issues. We also use it to carry out exports, account erasure and source revocation requests, and to meet applicable legal obligations.
We do not currently implement advertising trackers or sell personal information. Optional promotional email is separate from these service functions and requires your own opt-in.
Connected services and AI
Calendar connections are optional. Connecting a source authorizes access within the permissions you grant so that CustomFrames can provide the calendar features you request. Disconnect a source in the app and revoke access at the provider if you no longer want it connected. Disconnecting stops future access; previously imported or shared content may need separate removal.
CustomFrames’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google API data is used only for the features you request, not for advertising targeting or sale. Access, sharing and transfers are restricted as required by that policy, including its restrictions on human access.
AI features are optional. Before a manual AI request, a per-use disclosure identifies the configured third-party AI provider host and the categories of information that will be sent, and asks for your explicit permission. AI imports and meal planning may send your selected input together with family context, including family profile names, timezone, list names, favorite recipes or ingredients, and recent meal titles; the exact scope varies by feature. Announcement drafting sends the details you type and the selected language, rather than that broader family context.
Automatic AI reading of approved inbound emails is a separate workspace option, disabled by default. Enabling it permits automated processing of approved inbound email content and the contextual information disclosed for the feature by the configured AI provider, without a new prompt for each email. Only enable it if you have authority to share that information, and turn it off in workspace settings to stop future automatic AI requests. Approval of an email submission alone is not an opt-in to AI automation.
The provider processes submitted information under its own terms and privacy policy; review the provider host and disclosed data categories before permitting a request or enabling automation. These permissions are not blanket permission for unrelated use of household or connected calendar data. AI output may be inaccurate or inappropriate: review it before saving, sharing or relying on it.
Device permissions
The native app requests camera, photo-gallery, location and notification permissions for optional features that need them. You may deny or later revoke these permissions in device settings; features that depend on them may then be unavailable. Permission to use a device feature does not authorize unrelated use of your data.
Email preferences
Service emails include account verification, security, recovery and essential service information. They are separate from promotional messages.
Promotional email requires a separate, optional, initially unchecked consent choice. Declining does not prevent you from using the service. Withdraw consent in Settings → Account, through an unsubscribe option in promotional email, or by contacting support. Withdrawal does not stop essential service emails or undo messages already sent.
Retention and security
We generally retain account and household information while the account is active and as needed to provide the service. Diagnostic and security logs are reasonably retained for troubleshooting, abuse prevention and security. Backup retention is configured by the operator, not a universal fixed period; ask support about the current configuration and deletion timing. Applicable legal obligations may require limited records to be retained longer.
We use measures such as verified sign-in tokens, encrypted retained connection secrets, access controls and private media storage to reduce risk. No service, network or device is completely secure. Protect your account, devices and guest links, and report suspected unauthorized access promptly.
Account erasure
Account erasure removes your own workspace and associated media from the active service. Paired devices are unpaired when they reconnect; offline devices cannot receive that instruction until they reconnect. The app’s erasure flow also clears local family and activity data, media and intake data, notifications and caches on the device performing the erasure.
Erasure does not remove originals in your photo gallery, exports you saved, or copies on other devices or held by other people. Contributions to another person’s workspace can remain without your name. Backups and records retained for legal or security reasons may follow separate retention processes; contact support for details.
Review shared content and exports before erasing your account. Contact support if you need help removing particular content or addressing a child’s information.
Your choices and rights
You can manage household invitations, guest links and sharing settings; edit or delete content you control; disconnect sources and revoke provider access; change device permissions; withdraw promotional-email consent; and request account erasure.
The account export provides JSON metadata. It is not an archive of all original photos, and it does not delete information. Keep your own originals and any copies you need.
Depending on applicable law, you may have rights to access, correct, delete or receive your personal information, object to or restrict certain processing, withdraw consent, or raise a complaint with a competent authority. Contact support@customframes.app to make a request. We may ask for proportionate information to verify your authority and protect other household members. Applicable legal requirements govern how requests are handled.
Updates and contact
We may update this policy as features, providers or legal requirements change. We will publish the revised version here and provide notice of material changes where required. If a new use requires consent, we will seek it rather than treat a policy update as consent.
Privacy questions or requests: support@customframes.app. Operator: Anbumani Mailathipathy, operating as CreativeStudio14.com, India.
Read the Terms of Use or return to contents.