Privacy Policy

---

Effective Date: January 1, 2024

Last Updated: July 19, 2026

First Then Next, Inc. ("First Then Next®," "we," "us," or "our") respects your privacy. This Privacy Policy explains, at a general level, how we collect, use, disclose, retain, and protect Personal Information when you use the First Then Next® mobile application, web application, website, communications, and related services (collectively, the "Services").

Our Terms of Use govern use of the Services. Separate notices or consents may apply to particular features, including our AI Assistant Notice and notices concerning users who are 16 years old or younger.

"Personal Information" means information that identifies, relates to, describes, or could reasonably be linked with a person, household, account, or device. The information we collect depends on how the Services are used and what users choose or are authorized to provide.

We may collect the following categories of Personal Information:

• Account and contact information, such as name, email address, date of birth or age, user role, profile information, photograph, language, time zone, city, state, country, login information, and communication preferences.
• Invitation and relationship information, such as the inviter's identity, intended role, and Organization or Community information needed to create, deliver, or manage an invitation.
• User-provided content, such as calendar and event information, profiles and biographies, Posts, Notes, comments, reports, photos, videos, voice input or transcriptions, and other content submitted through the Services.
• Sensitive information users choose to provide, which may include allergies, dietary information, disabilities or conditions, challenges, triggers, accessibility or support information, medication information, medical-device or assistive-device information, and emergency or safety information.
• AI-feature information, such as prompts, questions, selected content, and other context processed when a user chooses to use an AI-powered feature.
• Device, usage, and technical information, such as IP address, device and browser type, operating system, app version, login and activity timestamps, notification tokens, diagnostic information, crash data, and security information.
• Location information users provide, such as a city, state, country, event location, or address. If a feature requests device-based location, the applicable device permission will be requested.
• Website information, including cookies or similar technologies used for essential operation, security, preferences, performance, and basic analytics.

We may receive Personal Information directly from users; from a Parent, Caregiver, Guardian, inviter, authorized representative, or organization; automatically through use of the Services; or from service providers acting on our behalf.

If you provide Personal Information about another person, you represent that you are authorized to provide it and have supplied any required notices and obtained any required permissions or consents.

We may use Personal Information to:

• Create, authenticate, maintain, and secure accounts;
• Provide, personalize, operate, and support the Services;
• Process invitations and connect authorized users;
• Display and share content according to user choices, settings, permissions, and relationships;
• Provide optional AI-powered features;
• Send invitations, reminders, notifications, service messages, security alerts, and support communications;
• Respond to questions and provide customer support;
• Protect users, investigate reports, moderate content, prevent fraud or misuse, and enforce our policies;
• Diagnose problems and improve the reliability, accessibility, security, performance, and usability of the Services;
• Maintain business, security, and audit records;
• Comply with law, legal process, and regulatory obligations; and
• Establish, exercise, or defend legal claims.

We do not use children's Personal Information, health or medication information, medical-device information, private user content, or AI prompts for targeted advertising.

The Services allow users to share information with other authorized users. Information may be visible according to user choices, roles, relationships, participation, invitations, permissions, and visibility settings.

Users should review the intended audience before sharing sensitive information. Although First Then Next® uses access controls, an authorized recipient may copy, download, screenshot, or redistribute information outside the Services. First Then Next® cannot control information after another person independently copies or shares it.

First Then Next® offers optional AI-powered features. First Then Next® presents a separate AI Assistant Notice and requests agreement before use as applicable.

When a user chooses to use an AI feature, information entered or selected by that user may be transmitted to OpenAI, our AI service provider, to generate a response. This may include prompts, voice transcriptions, profile or biography information, calendar or event information, Notes, photos, videos, or sensitive information—including medication, medical-device, disability, condition, allergy, accessibility, or support information—when selected or reasonably necessary for the request.

Users may continue using non-AI portions of First Then Next® without using AI features. AI-generated responses may be inaccurate, incomplete, outdated, inappropriate, or misunderstood and should be independently reviewed before anyone relies upon them.

First Then Next® may process health-related or other sensitive information that users choose or are authorized to provide. First Then Next® does not independently verify, prescribe, diagnose, monitor, maintain, or update that information.

First Then Next® is not a health-care provider, pharmacy, medication-management system, medical-record system, clinical decision-support system, medical-device monitoring service, or emergency-response service. First Then Next® does not determine medication dosage, evaluate drug interactions, confirm medication administration, monitor adherence, operate or monitor medical devices, diagnose conditions, provide treatment, or provide emergency assistance.

Users are responsible for ensuring that health, medication, medical-device, allergy, activity, and safety information is accurate, current, appropriately shared, and independently verified before anyone relies upon it.

Unless First Then Next® enters into a separate written agreement stating otherwise, First Then Next® does not represent that a particular use of the Services is governed by the Health Insurance Portability and Accountability Act (HIPAA).

We may disclose Personal Information:

• At a user's direction, including when the user shares content, sends an invitation, selects an audience, or uses an AI feature;
• To service providers that assist with hosting, storage, authentication, communications, notifications, security, diagnostics, support, AI processing, website operation, or related business functions;
• For legal, safety, and security purposes, including to comply with law or legal process, investigate suspected fraud or abuse, protect a person from harm, enforce our policies, or respond to a security incident;
• In connection with a business transaction, such as a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets; and
• In aggregated or de-identified form that does not reasonably identify a person.

Service providers may process Personal Information only as reasonably necessary to provide services to First Then Next®, protect their systems, prevent abuse, or comply with law. We seek appropriate contractual, technical, or organizational safeguards based on the nature of the information and service.

First Then Next® does not sell Personal Information, sell children's Personal Information, sell health information, share Personal Information for cross-context behavioral advertising, operate as a data broker, or display third-party behavioral advertising.

Sponsors, donors, or funding partners do not receive individually identifiable user information merely because they support First Then Next®. We may provide aggregated or de-identified information that does not reasonably identify an individual.

A person must be over 16 years old to create or join an First Then Next® account without the consent and involvement of an authorized Parent, Caregiver, or Guardian.

A person who is 16 years old or younger may use First Then Next® only with such consent and involvement and generally participates as a Member. A Parent, Caregiver, Guardian, or other authorized representative who creates or manages an account for another person represents that they have the authority to do so.

Where the Children's Online Privacy Protection Act (COPPA) applies, First Then Next® will provide required notice, obtain verifiable parental consent before collecting Personal Information online from a child under 13 except where permitted otherwise, provide applicable parental access and deletion rights, use reasonable safeguards, and retain the child's Personal Information only as reasonably necessary for the purposes for which it was collected.

If we learn that Personal Information was collected from a child without required authorization, we will take reasonable steps to delete or otherwise appropriately address it.

We retain Personal Information for as long as reasonably necessary to provide the Services, maintain accounts and user-selected content, process invitations, provide support, protect security, prevent fraud or abuse, resolve disputes, enforce agreements, and comply with law.

When information is no longer reasonably needed, we may delete, anonymize, or de-identify it. Information may remain temporarily in backups or logs until deleted or overwritten through normal processes. We may retain information when required or permitted for legal, security, fraud-prevention, safety, or dispute-resolution purposes.

Users may request account and data deletion through an available in-app deletion feature or through the Contact page at https://www.firstthennext.com/contact. We may verify identity, account ownership, and authority before completing a request.

Deletion may not remove information independently copied, downloaded, screenshotted, or shared outside First Then Next® by another person, or information that First Then Next® is legally permitted or required to retain.

First Then Next® uses reasonable administrative, technical, and organizational safeguards designed to protect Personal Information. No system, network, storage method, or transmission can be guaranteed completely secure.

If a security incident affects Personal Information, First Then Next® will investigate and provide notices as required by applicable law.

Users are responsible for protecting their credentials and devices and should promptly notify First Then Next® if they suspect unauthorized access.

Depending on where a person lives and subject to applicable exceptions, they may have rights to request access, correction, deletion, or portability of Personal Information; withdraw consent; object to or restrict certain processing; appeal a denied request; or submit a complaint to an applicable privacy authority.

Users may also manage certain device permissions, communications, visibility choices, notifications, and AI-feature consent through available controls or by contacting First Then Next®.

Privacy requests may be submitted through https://www.firstthennext.com/contact. We may take reasonable steps to verify identity, account ownership, authority, and the scope of the request.

First Then Next® is operated from the United States. Personal Information may be processed in the United States and other countries where First Then Next® or its service providers operate. Where applicable law requires a particular transfer mechanism or safeguard, First Then Next® will use an appropriate lawful mechanism.

We may update this Privacy Policy to reflect changes to the Services, our practices, our service providers, or applicable law. We will post the updated policy and revise the Last Updated date. We will provide additional notice or obtain consent where required by law.

For privacy questions, concerns, parental requests, or data-rights requests, contact:

First Then Next, Inc.

Attn: Privacy

Website: https://www.firstthennext.com/contact

Please do not send passwords or highly sensitive medical information through the Contact form.

This website provides notice under 35 U.S.C. § 287(a). Certain ornamental aspects of the First Then Next® Visual Calendar and associated graphical user interface are protected by U.S. Design Patent No. D1,106,259 and International Registration No. DM/243842.

First Then Next® is a registered trademark of First Then Next, Inc. The First Then Next® logo and other names, logos, slogans, designs, and brand elements may also be protected by trademark, copyright, trade-dress, patent, registered-design, trade-secret, contractual, and other intellectual-property laws.

Nothing in this Privacy Policy or on the website grants any license or right to use, copy, imitate, reproduce, modify, distribute, reverse engineer, create derivative works from, or commercially exploit First Then Next®'s protected intellectual property except as expressly authorized in writing by First Then Next, Inc.

© 2026 First Then Next, Inc. All rights reserved.