Privacy Policy

This policy describes how TessraOne handles information in its website, family command center, task tools, and paired frame app. Anthony Lee operates TessraOne (“we,” “us”).

Information we collect

• Account information: your email, authentication records, profile preferences, and household membership.
• Content you provide: tasks and notes; household names, address and timezone; family member names or nicknames, roles and colors; chores, completion history, reminders and celebration choices; recipes, meal plans and shopping lists.
• Frame information: device name and room, pairing credentials, display selections, schedules, and settings.
• Connected services: Google account identification, calendar information, permissions and credentials as described below.
• Technical information: request and error logs, IP addresses and browser or device information needed to operate, troubleshoot and protect the service.

How we use information

We use information to authenticate accounts, organize tasks and household activities, synchronize selected content to frames, provide reminders and celebrations, respond to requests, and maintain the service. Household location can be used to obtain local weather. When you use AI-assisted task features, task content and relevant context may be processed by configured AI providers, including OpenAI or Amazon Web Services. Avoid entering sensitive information that is not needed for these features.

Google account and Calendar access

Connecting Google is optional. With your authorization, TessraOne receives your Google account identity and reads calendar lists and event information, such as titles, descriptions, times, locations, attendees, and sharing or access details. We use this information to let you choose calendars, display schedules, synchronize events, and provide calendar-related task suggestions.

If you enable calendar management and approve additional permissions, TessraOne can create calendars, create or change events, and manage calendar sharing in response to your actions. The permissions shown by Google determine the access you authorize. We store connection metadata, synchronized calendar content, and OAuth credentials needed to maintain the connection. Refresh credentials are stored using AWS Secrets Manager.

TessraOne follows the Google API Services User Data Policy, including its Limited Use requirements, when using or transferring information received from Google APIs. Google data is used for the user-facing features described here, not sold or used for advertising, credit decisions, or training generalized AI models. Transfers are limited to providing these features with your consent, security, legal obligations, or a business transfer with your prior explicit consent. Human access is limited to your specific permission, necessary security or legal purposes, or permitted aggregated internal operations.

Google Photos imports

Google Photos is optional. After separate authorization, you select specific photos using Google's picker. We copy those selected images into encrypted private household storage, resize them for display, and remove embedded metadata such as GPS location. This does not grant access to your entire library or automatically synchronize albums. Photos are not sent to AI providers.

Signed-in household parents can view, import, delete, and assign photos to frames. Assigned frames retrieve images using authenticated requests; photos have no public bucket access or public image links. Anyone physically near an assigned frame may see its screen. Removing household access or revoking a frame prevents new requests; an image already displayed may remain briefly until the frame refreshes or clears its memory cache.

Google Photos access credentials are temporary, encrypted at rest, and deleted after import or cancellation. Abandoned credentials expire in storage automatically. We do not retain a Google Photos refresh token. Imported copies remain until a household parent deletes them in Photos; deleting an original in Google Photos or revoking Google authorization does not delete imported copies. Deleting an imported photo removes it from household storage and prevents further display requests.

Offline access and device notifications

If you enable offline access on a trusted device, TessraOne saves an encrypted local copy of household names, current chores, grocery checkoffs, recipe names and the upcoming meal plan. Queued edits and the session credentials needed to synchronize them are encrypted in browser storage. The offline copy expires after up to 24 hours, or when your login expires, and is refreshed while connected. Signing out, switching logins or removing the offline copy clears pending edits and local household data. Photos, calendar content and household addresses are excluded.

An offline device cannot learn about removed household access until it reconnects. When reconnecting, the server checks your current household permissions and rejects edits that conflict with changes made by someone else. Your device and its browser storage should be protected by your device passcode and operating-system security.

Push notifications are optional and require your browser's permission. We store a device subscription endpoint and encryption keys to deliver generic alerts through your browser platform's push service, such as Apple, Google, Mozilla or Microsoft. Private names, chore titles, photos and calendar details are not included in push messages. Subscriptions stop being used when the associated login expires or household access is removed; expired or invalid subscriptions are cleaned up. You can turn notifications off in TessraOne or your device settings.

Sharing and service providers

Household administrators and members can access content according to their permissions. Content you select for a frame is visible to anyone who can see that physical screen. Calendar invitations and sharing changes may disclose information to the recipients you choose. Review your selections before sharing private tasks or calendars.

Service providers process information needed for hosting, storage, authentication, AI features and other requested functions. These include AWS, Google, and configured AI providers. Requests for weather, recipe search, or shopping features may be sent to the relevant providers. The website loads fonts from Google, which receives normal browser request information. Providers may process information outside your country. We may disclose information when required by law or necessary to protect users or the service. We do not sell personal information or use it for targeted advertising.

Store discovery uses Google Maps Platform. When you search, your device location (if you permit it) or entered city/ZIP and selected radius are sent to Google to find nearby stores. Store discovery does not send your grocery list to Google. See the Google Privacy Policy. Price research is a separate action and may share selected stores and remaining ingredients with configured search and AI providers.

When a calendar event includes a place, TessraOne sends the household address and that place to Google Maps to estimate driving time. The calendar and frames show a departure countdown only. They do not receive the street address or the destination.

Storage, security and retention

We use access controls, authenticated requests and managed infrastructure to protect information. No service can guarantee absolute security. Protect your account and paired devices, and revoke frames you no longer control.

Account and household content is retained while needed to provide the service, until you remove it or request deletion, subject to security, backup and legal needs. Logs, backups and records needed to resolve disputes may remain after active content is removed; deletion is not necessarily immediate. Disconnecting Google disables the connection and schedules stored refresh credentials for deletion with a seven-day recovery window. It does not delete your original Google calendars or events and does not, by itself, erase all previously synchronized records.

Your choices, access and deletion

You can edit supported content and sharing settings in TessraOne, disconnect Google from Integrations, and revoke access in your Google Account connections. Revocation stops future authorized access; contact us separately to request deletion of previously stored Google data, account information or household content. We may verify your identity and authority over shared household data before responding. Depending on applicable law, you may have rights to access, correct, delete or receive a copy of your information, or object to or restrict certain processing.

Children and family profiles

Account creation and Google connections are intended for adults. Adults can create child profiles and manage the information shown on household frames; children do not need their own email or Google account to check off chores. Child names or nicknames, assigned activities, completion records and preferences are household information. Parents and guardians should provide only what is necessary, supervise frame use, and contact us to review or remove a child’s information. We do not use child profile information for targeted advertising.

Browser storage

We use browser storage for authentication sessions, preferences and in-progress operations. Clearing it or signing out may remove local state but does not delete server-side account data.

Changes and contact

We will update this page when practices change and provide additional notice or request consent when required, including before using Google data for a new purpose.

TessraOne is operated by Anthony Lee. For support, privacy questions, or data access and deletion requests, email anthonylee83@gmail.com. Please identify your account email and the request, but do not send passwords, access tokens, or sensitive calendar contents.

See also our Terms of Service.