Draft — under product and legal review before publication. The controller's legal name and address will be added here.
FamPlan stores information a household chooses to add so the app can coordinate family life:
Home Screen widgets read a small summary of this data (today's pickups, dinner, open chores, and grocery items) from private on-device storage shared between the app and its widgets. Widgets add no new data collection and never transmit data.
Child profiles do not require accounts. Adults decide what child-profile information to add and share with the household.
FamPlan uses this information only to provide app functionality:
FamPlan does not use household data for third-party advertising or cross-app tracking.
Before cloud sharing is connected, FamPlan stores the household plan locally on the device.
When an adult connects household sharing, structured household data is stored in a Supabase-managed PostgreSQL database. Optional photos are stored in a private Supabase Storage bucket. Access is restricted to authenticated adult accounts linked to that household through database Row Level Security policies.
Supabase processes data as a service provider for hosting, authentication, database synchronization, and file storage.
To understand which parts of FamPlan genuinely help families, the app records a small set of anonymous usage events — for example "meal planned", "grocery trip completed", or "sync failed" — using Aptabase, a privacy-focused analytics service (EU-hosted instance).
Aptabase processes these events as a service provider. They are used only in aggregate to improve FamPlan.
Household information is shared only with adults who join the household using an active invite. Child profiles are shared records and do not have independent login credentials in the current version.
Do not place highly sensitive information in free-text notes unless it is necessary for household planning.
Data remains available while the household or an associated adult account is active.
An adult can delete their account from the Account screen in FamPlan. If another authenticated adult remains, the deleted account is detached while the shared household remains available to that adult. If the deleted account is the household's last authenticated adult, the cloud household and its associated records are deleted.
Account deletion also removes FamPlan data cached by the app on that device.
FamPlan uses authenticated sessions, private storage, encrypted network transport supplied by the hosting platform, and household-scoped database policies. No system can guarantee absolute security.
FamPlan is intended for use by adults managing a household. Child profiles are created and controlled by adults. FamPlan does not require children to create accounts in the current version.
Depending on where you live — including under the EU GDPR — you have the right to access, correct, export, and delete your personal data, and to object to or restrict certain processing. Most of this you can do directly in the app: household data is editable in place, and account deletion is available on the Account screen. For anything else, contact [email protected]. You can also lodge a complaint with your local data-protection authority.
Material changes to this policy will be reflected here and in the App Store privacy disclosures.
For privacy questions or requests, contact [email protected].