Privacy Policy

Family Spot is a shared household planner for iPhone and Android. To do its job it has to store the plan you type in and know who it belongs to. This policy explains exactly what is collected, why, who it is shared with, how long it is kept, and how to have it deleted. It applies to the Family Spot mobile app and to this website.

Who is responsible

Family Spot is the data controller for the information described here. You can reach us about anything on this page at support@familyspot.org.

What we collect, and why

We collect only what the app needs to work. There is no tracking for advertising.

• Account details — your email address, and a password stored only as a salted hash by our authentication provider. Needed to sign you in and to keep your household private to you. We never see your password.
• Household and profile — the household name, its invite code, and each member's display name and chosen emoji avatar. Needed so the household can be shared and so items can be assigned to a person.
• Your plan — events and tasks: title, start and end time, timezone, an optional free-text location, who it is assigned to, repeat rule, completion state, and reminder setting. This is the content of the app.
• Push token — an anonymous device token from Apple or Google, so a reminder can reach the right phone. It identifies a device, not a person, and is deleted when you sign out.
• Subscription status — whether your Family Spot Pro entitlement is active, via our subscription provider. Needed to unlock the Pro features.
• Waitlist email — if you enter your email on this website, we keep it solely to tell you once when the app is released.

What we do not collect

• No payment or card details. Purchases are handled entirely by Apple or Google. We receive only whether a subscription is active.
• No advertising identifiers, no ad networks, no third-party analytics SDKs, and no cross-app or cross-site tracking.
• No location data. A location on an event is free text you typed. The app never requests or reads your device location.
• No contacts and no photo library access.

Microphone and voice notes

The microphone is used only while you are actively recording a note, and only after you grant permission. The recording is sent to our transcription provider for the single purpose of turning it into text, and is then discarded. It is not stored on our servers, not attached to the resulting event or task, not added to any history, and not used to train any model. You can use the entire app without ever granting microphone access.

Plan with AI

When you use Plan with AI, the text you typed or dictated is sent to our AI provider so it can be split into draft events and tasks. Only that text is sent — not your email, not your household, not your other events. Nothing is written to your plan until you confirm it on the review screen.

Calendar access

Calendar sync is optional and off until you turn it on. With your permission, Family Spot reads the calendars already present on your device and copies upcoming events into your household so the household can see them. We do not connect to your Google, Microsoft, or Apple account, and we never write to or modify your device calendar. Turning sync off deletes the copies Family Spot made; your own calendar is untouched.

Who can see your data

Your plan is visible only to signed-in members of your household. This is enforced by row-level security in the database itself: every request is checked against the household you belong to before any data is returned, rather than merely being hidden in the app.

Service providers

We do not sell your personal data, and we do not share it for advertising or marketing. We use a small number of processors to operate the app, each receiving only what it needs:

• A hosting, database, and authentication provider (stores your account, household, events, and tasks).
• A push notification service operated by Apple and Google (delivers reminders).
• A speech-to-text provider (transcribes a voice note, then discards the audio).
• An AI provider (turns your text into draft events and tasks).
• A subscription management provider (reports whether Pro is active).
• A website host, for this site and the waitlist form.

International transfers

Some of these providers process data outside your country, including in the United States. Where that happens, the transfer is covered by the European Commission's standard contractual clauses or another approved safeguard.

How long we keep it

Your account, household, events, and tasks are kept while your account exists, so the app still works the next time you open it. Push tokens are removed when you sign out. Voice recordings are discarded immediately after transcription. When you delete your account, the data is removed from our live systems promptly and from routine backups within 30 days.

Deleting your data

Leaving a household removes your membership; if you were its last member, the household and its events and tasks are deleted with it. To delete your account and everything attached to it, email support@familyspot.org from the address you signed up with, and we will remove it and confirm when it is done.

Your rights

Depending on where you live, you have the right to access the personal data we hold about you, to correct it, to have it deleted, to receive a copy in a portable form, to object to or restrict certain processing, and to withdraw a permission you previously granted (microphone, notifications, and calendar can each be revoked in your device settings at any time). To exercise any of these, write to support@familyspot.org. If you are in the EEA or UK and are unhappy with our response, you may lodge a complaint with your local data protection authority.

Children

Family Spot is intended for adults running a household. Children usually appear only as members with a display name and an avatar, created by a parent or guardian — they do not need an account of their own. We do not knowingly collect personal data from children under 13. If you believe a child has created an account, contact us and we will delete it.

Security

Data is encrypted in transit with TLS and encrypted at rest by our hosting provider. Access to production systems is limited and authenticated. No system is perfect, but we treat your household's plan as private by default and design for that.

Changes to this policy

If this policy changes in a way that affects you, we will update the effective date above and notify you in the app before the change takes effect. Material changes will never be applied retroactively to data already collected without your consent.

Contact

Questions, requests, or complaints about privacy: support@familyspot.org.