Family OS — Privacy Policy

Last updated: 17 July 2026

Family OS is a warm, private home for your family's everyday care — check-ins, medications, appointments, documents, and small gestures of warmth. Privacy isn't a feature we bolt on; it's the reason the app exists. This policy explains, in plain language, what the app does and does not do with your information.

The short version

• Your data lives on your device first. Everything works fully offline.
• No advertising, no trackers, no analytics SDKs, no data selling. Ever.
• No location tracking. There are no maps, no "last seen," no live location — location is only ever attached to an SOS you deliberately send.
• Cloud sync and push notifications are optional and off until you turn them on.

Information stored on your device

The app stores the family information you enter — member names and relationships, mood check-ins, medications and reminders, calendar events, document notes and expiry dates, bills, shopping and chores, pet care, trips, memories, and the "family memory" facts you add. This is kept in a local database on your phone. An encryption key for that database is held in your device's secure keystore. If you never enable cloud sync, this information never leaves your device, and we never see it.

Optional cloud sync

If you turn on Cloud sync (Settings → Cloud sync), your family's data is copied to a cloud database so it can be shared between the devices in your family and restored if you change phones. Some important details:

• The backend is a Supabase database operated by the developer of Family OS. Your data is stored there and isolated per family by row-level security, so one family cannot see another's data.
• Sign-in is anonymous — no email, phone number, or password is required or collected. Your device receives an anonymous identifier used only to scope access to your family.
• Your family's invite code is the key to joining. Share it only with people you want in your family.
• You can turn sync off at any time; the app then stops sending updates. Data already synced remains until deleted — see Deleting your data below.

Optional push notifications

If you enable push notifications, the app registers a device token with Firebase Cloud Messaging (FCM), a Google service, so that a gentle notification can reach you when a family member sends you care — even when the app is closed. To route those notifications we store, on the same backend described above, your FCM device token together with your family and member identifiers. Notification content is limited to short, benign lines such as "A little care for you." We do not put personal details, health information, or location in push messages. Google may process the device token under its own terms as the transport provider. On-device reminders (medication times, appointments, document expiry) are scheduled entirely on your phone and do not involve any server.

What we do not collect

• No advertising identifiers and no ad networks.
• No third-party analytics or behavioural tracking.
• No continuous or background location; no maps or presence/"online" status.
• No contacts, photos, microphone, or files are accessed unless you explicitly add them.
• We do not sell, rent, or share your information with data brokers — there is no such pipeline in the app.

Children and family data

Family OS is designed for a whole household, which may include information about children entered by a parent or guardian. The app is intended to be set up and managed by adults; it is not directed to children for independent sign-up, and it does not knowingly collect information directly from a child. Parents and guardians are responsible for the family information they choose to record.

Deleting your data

• On-device: uninstalling the app removes the local database from your phone.
• Synced data: if you enabled cloud sync and want your family's synced data and device tokens deleted from the backend, contact us at the address below and we will remove them.

Security

The local database key is stored in your device's secure keystore, and all network communication uses encrypted transport (HTTPS/TLS). No method of storage or transmission is ever perfectly secure, but we keep the amount of data collected deliberately small so there is little to expose.

Not an emergency, medical, or monitoring service

Family OS is a care and organisation tool. It is not an emergency response service, a medical device, or a safety-monitoring system, and it should not be relied on for those purposes. In an emergency, contact your local emergency services.

Changes to this policy

If this policy changes materially, we will update the date above and, where appropriate, note the change in the app.

Contact

Questions, or a data-deletion request? Email maew0009@gmail.com.