Privacy Policy
FamilyGether is built privacy-first. This policy explains what information the service uses, why it is needed, how we share it with service providers, and how your family stays in control. Questions: [email protected].
Our privacy promise
AI tools in FamilyGether (including Kin intent understanding and on-device OCR) process on your device. Family photos, plans, routines, conversations, and other content handled by those tools are not sent to a cloud AI service for processing or used to train AI models. Family content you choose to save is still synchronized to FamilyGether servers so it works across your authorized family devices.
Information you choose to provide
We may store account details (such as name and email), family membership, child profiles (including birthdate when provided), shared events, missions, rewards, recipes, grocery information, and uploaded media (such as avatars, recipe photos, and mission proof). Parents control family membership and child access. The marketing site waitlist may collect an email address for launch news only.
Optional device calendar access
Connecting a device calendar is optional; FamilyGether works without it, and you choose which calendars to use. The app reads events from the calendars you select and derives the date, time, all-day status, and identifiers needed to create availability blocks. Device calendar names and source names, and event titles, descriptions, notes, locations, and attendees, are not sent to FamilyGether servers. You control access through your device permissions and can change your selections in FamilyGether Settings.
On-device AI and speech
When you use an AI-assisted feature, model inference for that feature happens locally on a compatible device. Content handled by that feature is not sent to a cloud AI service. Voice commands may use the device operating system’s speech recognition, which can process audio off-device depending on your OS settings. We prefer on-device recognition when available.
Kin controls and transparency
On-device Kin AI is optional and remains off until a parent enables it in Settings. Parents can disable it at any time while deterministic Kin commands remain available. Material content generated by Kin is labelled in the app. Before any AI or intent processing, Kin checks for self-harm crisis language and directs the person to a trusted adult, emergency services, and 988 in Canada or the United States.
Service operations and processors
We process limited technical information needed to authenticate accounts, synchronize family data, deliver notifications, prevent abuse, and maintain reliability. We use service providers acting on our instructions, including Clerk (authentication), Microsoft Azure (private blob storage for media and transactional email), OneSignal (push notifications), PostHog (product analytics for confirmed adult sessions only—enabled by default for adults and turnable off in Settings; unknown, signed-out, onboarding, and child devices are excluded), Sentry (crash diagnostics; session replay is disabled), Adapty (subscription management for parent purchase flows), and OpenWeather (weather for location-based features). Our contracts and vendor reviews require these providers to protect personal information to standards at least equivalent to this policy and applicable law. We do not sell personal information.
Location and device data
With permission, we may use approximate location for weather and nearby store features, and device/session identifiers to keep you signed in, deliver push notifications, and secure the service.
Children and family controls
Child profiles are created and managed by a parent or guardian. Children do not need an email address to join a family. Parents can review access and remove a child profile or family content.
Security, retention, and choices
Uploaded media is stored in a private container and is disclosed through short-lived, authorized links. Device-calendar selections and their last-sync time stay on your device. Deselecting a device calendar removes that calendar’s previously shared availability blocks. Revoking device calendar permission stops future syncs, but to remove existing device-derived blocks you should deselect those calendars in FamilyGether first. When you delete your adult account, FamilyGether immediately removes account access, personal profile fields, sessions, preferences, and uploads you own. Shared family records may remain for other members without your identity. Encrypted backup copies expire within 30 days except where retention is required by law. You may correct your profile, delete your account in Settings, use our online deletion-request page, or request a data copy by emailing [email protected].
Changes and contact
We may update this policy as FamilyGether evolves. Material changes will be communicated in the app or on this site. Controller: Seven North IT. Privacy requests: [email protected].