Who we are
Famito ("Famito", "we", "us") provides the Famito mobile app and this website, and is the data controller for the personal data described below. Famito is based in the United Kingdom, and this policy is written around the UK GDPR and the Data Protection Act 2018.
The quickest way to reach us about anything on this page — including a request to see or delete your data — is privacy@famito.app. We answer every request from a real person.
The short version
- Your family's space is private and invite-only.
- We show no ads and we do not sell your data or your children's data.
- Location is collected only for members who have sharing switched on.
- Turning sharing off deletes that person's location history.
- You can delete your account and all of your family's data at any time.
What we collect
| Data | Why |
|---|---|
| Email address and password (grown-ups only) | To create and secure your account. |
| Family and profile details — names or nicknames, an emoji or avatar, a child's age, and who is a parent or a child | To show the right people in your family's space and give children the simplified app. |
| Location — including in the background, when enabled | To show members on the family map and trigger arrive and leave alerts for safe zones. |
| Device battery level and location status | So the map can show whose phone is low, or explain why a pin has stopped updating. |
| Content you create — events, chores, points, lists, messages, places, photos, documents, meal plans and budget entries | These are the features. They are stored so your family can see them. |
| Screen-time settings and reported usage for supervised child devices | To apply the limits you set and show usage to parents. |
| Push notification token | To send alerts, and to ask a device for a fresh position when someone opens the map. |
| Basic technical logs — errors and diagnostic messages | To keep the app working and fix faults. |
Background location. If you allow it, Famito collects location even when the app is closed or not in use, so the family map stays current and safe-zone alerts fire when they actually happen. This is optional, it is explained in the app before it is requested, you can withdraw it at any time in your device settings, and continued use of background location can decrease battery life.
What we never do
- We do not sell or rent personal data to anyone.
- We do not show advertising, and we do not share data with ad networks or data brokers.
- We do not use your family's content to build advertising profiles.
- We do not read your family's messages except where strictly necessary to investigate abuse or a security incident, or where the law requires it.
Children
Famito is designed to be set up and run by a parent or guardian. Child profiles are created by a grown-up in the family, and a child does not need an email address or their own account. By adding a child, you confirm you are their parent or guardian and that you consent to the processing described here on their behalf.
Children's data is used only to run the family's own space — their chores, points, screen time, messages and, if sharing is on, their location. It is visible to the members of that family, and to nobody else. It is never used for advertising or profiling, and never sold.
A parent can switch off a child's location sharing at any time, which also deletes that child's location history, or remove the child's profile entirely.
Legal bases
- Contract — to give you the app you signed up for: your account, your family's shared content, and the features you use.
- Consent — for location (including background location) and push notifications. You can withdraw consent at any time in the app or your device settings.
- Legitimate interests — keeping the service secure, preventing abuse, and fixing faults.
Who processes data for us
We keep this list short on purpose. These providers process data on our instructions:
- Supabase — database, authentication and file storage (hosting your family's content and accounts).
- Google Firebase Cloud Messaging — delivering push notifications.
- Mapbox — rendering map tiles and turning addresses into coordinates. Map requests are not linked to your family's identity.
- Vercel — hosting this website.
Some of these providers operate outside the UK/EEA. Where that happens, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
How long we keep things
- Location history — kept while sharing is on, and deleted for that member as soon as sharing is switched off.
- Your family's content — kept until you delete it, or until the account is deleted.
- Account data — deleted within 30 days of an account deletion request.
- Diagnostic logs — kept for a short period and then discarded.
Deleting your account and data
You can delete individual items in the app at any time. To delete your whole account and your family's data, use the delete option in the app's settings, or email privacy@famito.app from the address on the account. We will action it within 30 days. Deletion is permanent and cannot be undone.
Your rights
You have the right to access your data, correct it, delete it, restrict or object to processing, withdraw consent, and receive a copy in a portable format. Email privacy@famito.app and we will respond within one month. Exercising these rights is free.
If you think we have got something wrong, you can complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint. If you are in the EU, you can complain to your national data protection authority instead.
Security
Data is encrypted in transit. Access to your family's space is restricted at the database level so that only members of your family can read it. No system is perfectly secure, but if a breach affects your data we will tell you and the relevant regulator as required by law.
Changes
If we change this policy we will update the date at the top, and for significant changes we will tell you in the app before they take effect.