Privacy Policy — Our Fam!

Our Fam! ("the app," "we," "us") is a private platform for families to chat, share lists, and see each other's location. This policy explains what information the app handles and how it is protected.

      Your private content is end-to-end encrypted. Messages, list
      contents, and location coordinates are encrypted on your device before they are
      uploaded. We cannot read them, and neither can our cloud provider. Only members of
      your family, on their own devices, can decrypt this content.
    

Information We Handle

Account information: your name and email address, used to sign you in and identify you to your family.
Profile photos: you may set a profile avatar using a built-in illustrated sprite, a photo you upload, or, for Google Sign-In users, your Google profile photo. Uploaded photos are stored securely in encrypted-at-rest cloud storage and, along with a Google profile-photo link, are only visible to members of your family groups. Setting a profile photo is optional — you can use an illustrated avatar or your initial instead.
Family content: chat messages, shared lists, and location coordinates. This content is end-to-end encrypted and readable only by your family members.
Photos and videos: media you choose to share in chat is stored in encrypted-at-rest cloud storage and is accessible only to your family members.
Location: if you enable location sharing, your device's location is shared with your family in real time and used for arrival/departure alerts at places your family defines. Location data is end-to-end encrypted. You can turn sharing off at any time.
Device tokens: a push-notification token per device so we can deliver notifications. Removed when you sign out.

How We Use Information

To operate the core features: messaging, lists, the family map, and notifications.
To deliver arrival/departure alerts for places your family creates.
To authenticate you and keep your account secure.

We do not sell your data, show advertising, or use your content for advertising or profiling.

Service Providers

The app uses the following services to function:

Google Firebase (authentication, database, storage, push notifications, hosting) — stores your account and the encrypted content described above. See Google's privacy information.
Google Maps — displays the family map and geocodes places.
Giphy — used when you search for GIFs in chat (search terms are sent to Giphy to return results).
Open-Meteo — provides the weather widget using approximate location only.

Children's Privacy (COPPA)

Our Fam! complies with the U.S. Children's Online Privacy Protection Act (COPPA). Users aged 13 or older may create an account. For a child under 13, we obtain verifiable parental consent before any personal information is collected, used, or disclosed: at sign-up we collect the parent or guardian's email address and send them a request to approve the account. The account is blocked from use until the parent approves, and if consent is not granted within 72 hours the account and the collected information are permanently deleted.

If a parent provides consent, we collect the following from the child:

Name and email address — for the account.
Chat messages — end-to-end encrypted, only visible to family members.
Photos and videos shared in chat — stored in encrypted cloud storage, only visible to family.
Precise location — only if a parent/guardian admin enables location sharing for the account; end-to-end encrypted. Children cannot enable or disable their own location sharing — this is controlled exclusively by the family admin.
Device identifier — used for push notifications.

The only third party that processes a child's data is Google Firebase (authentication, database, storage, push notifications), solely to operate the app. A child's data is not used for advertising and is not shared with any other third parties.

Data retention: a child's data is retained only as long as the account is active.

Parental rights. A parent or guardian may, at any time, review the personal information collected from their child, refuse to permit its further collection or use, and request its deletion. To do so, delete the child's account via Profile → Manage My Data in the app, or contact us at [email protected]. Consent granted earlier can be revoked the same way. If you believe a child has provided information without appropriate parental consent, contact us and we will delete it.

For questions about children's privacy you may contact us at [email protected] or the U.S. Federal Trade Commission at [email protected].

Data Retention & Deletion

You can delete your account at any time from Profile → Manage My Data, which removes your account and associated personal data. See how to delete your account for the full steps and details of what is removed and what remains.
Shared chat media may be automatically deleted after a period of time.
Encrypted content remains only as long as it is needed for the family to use the app.

Security

Private content is encrypted on your device using ECDH key exchange and AES-256-GCM encryption before upload. Private keys never leave your device. Data in transit is protected with industry-standard transport encryption.

Your Choices

Turn location sharing on or off at any time.
Control which notifications you receive in the app's settings.
Delete your account and data from Manage My Data.

Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Contact

Questions about this policy or your data? See our frequently asked questions or contact us at [email protected].