← Back to FamSynch

Privacy Policy

Effective Date: 21 May 2026  |  Last Updated: 21 May 2026

1. Who We Are

FamSynch ("we", "us", "our") is a mobile application based in Australia.

Contact for privacy matters:

• Email: [email protected]
• Location: Australia

When we refer to "FamSynch", "the Services", or "the App", we mean the FamSynch mobile application available on the Apple App Store and Google Play.

2. Our Commitment

We take your privacy seriously. We collect only the data you give us, and only what we need to provide the Services. We do not connect to your email, your text messages, or any account you have not explicitly opted in to. We do not sell your data to any third party. We store your data securely using industry-standard practices. You have the right to access, export, and delete your data at any time.

This Privacy Policy explains what information we collect, how we use it, what we share with whom, and the rights you have regarding your data.

3. Information We Collect

3.1 Information you provide directly

• Account information: email address, first and last name (used for account creation, sign-in, and personalising the app)
• Family member profiles: for each family member you add, the details you choose to record. This may include name, alias, role (parent, child, teen, grandparent, etc.), age bracket or school year, school, workplace, mode of transport, and any optional details such as allergies, dietary notes, custody arrangements, or emergency contacts
• Home, school, and workplace addresses: used for travel-time calculations and location-aware reminders
• Screenshots: images you choose to upload so the app can read and turn them into calendar events (for example, school newsletters, work rosters, ticket confirmations). See Section 6 for how long these are kept
• Calendar events: events created manually, generated from screenshots, or synced from a calendar you have connected
• Family memory notes: short notes you record (for example, "Riya needs goggles Tuesday")
• Chat messages: conversations with the FamSynch assistant
• Cultural and regional preferences: festivals, school terms, and public holidays you choose to track

3.2 Information from connected services (opt-in only)

If you choose to connect a third-party service to your FamSynch account, we receive only the data needed for that integration:

• Google Calendar: when a family member opts in individually, we read their calendar events. The connection is read-only (we never write to your Google Calendar) and limited to a recent and upcoming window of events. Full details are in Section 10.

You can disconnect any integration at any time. When you disconnect, we revoke our access and delete the synced data from our systems.

3.3 Information collected automatically

• Device information: device type, model, operating system version, app version, language, time zone
• Usage data: screens viewed, features used, and other interaction events that help us improve the app
• Crash reports: diagnostic information when the app encounters an error (no personal content)
• Approximate location: country-level detection based on your IP address, used to show regional content. We do NOT collect precise GPS location

3.4 What we do NOT collect

• We do not read your email, text messages, or any messaging app
• We do not access your device contacts
• We do not access your photo library beyond images you explicitly choose to upload
• We do not collect precise GPS location
• We do not connect to your bank, payment, or financial accounts

4. How We Use Your Information

We use your information for the following purposes:

• Provide the Services: create your family, turn screenshots into events, generate reminders, flag scheduling conflicts, and power the chat assistant
• Improve the app: understand how features are used, identify bugs, and plan updates
• Communicate with you: send account verification, password reset, service updates, and respond to support requests
• Ensure security: detect fraud, prevent abuse, and comply with legal obligations
• Comply with laws: respond to lawful requests from competent authorities when required

We do NOT:

• Sell your personal data to any third party
• Share your personal data with advertisers for marketing purposes
• Use your private family data to train AI models
• Use your data for automated decisions that have significant legal or similar effects on you

5. Categories of Third Parties

We work with a small number of vetted, industry-standard service providers to operate FamSynch. Each receives only the minimum data needed for their specific function, processes it on our behalf under written contracts, and is bound by confidentiality and security obligations consistent with this Policy and applicable data-protection laws.

Category	Purpose	Data shared
Cloud database, authentication & storage	Storing your account, family data, events, and uploaded screenshots in a secure cloud environment	Account data, family member profiles, events, screenshots (held only while being processed), and connection tokens for any calendar integration you have enabled (stored encrypted)
Calendar integration provider	Read-only sync of a family member's calendar events when they opt in individually	Access credentials for the connected account (stored encrypted, server-side only); event data flows from the calendar provider to our server
AI providers (vision and language models)	Reading text from uploaded screenshots, generating chat responses, and content safety checks	Screenshot image content and your text queries. Our AI providers' terms prohibit using API inputs to train their models
Weather data provider	Adding weather context to reminders (for example, "rain expected, pack a jacket")	Approximate coordinates derived from your saved addresses
Travel-time and address providers	Estimating travel time between events and helping you enter addresses during onboarding	Saved address coordinates, and the text you type when adding an address
Apple App Store	App distribution on iOS	Managed under Apple's Privacy Policy
Google Play	App distribution on Android	Managed under Google's Privacy Policy
Crash & diagnostic reporting	Diagnostic information when the app crashes, so we can fix bugs	Device model, OS version, app version, stack trace (no personal content)

We will name a specific sub-processor in writing on request to [email protected]. We do not transfer your personal data to any third party that is not a sub-processor described above.

6. Data Retention

We retain your personal data only as long as needed to provide the Services:

• Account data (email, name, preferences): retained while your account is active
• Family member profiles, events, memory notes, and addresses: retained while your account is active; deleted when your account is deleted
• Uploaded screenshots: removed from our storage shortly after the app has finished reading them (within a few days of a successful upload, and within hours of a failed or stuck upload). The extracted event data is kept until you delete it
• Synced calendar events: retained while the calendar integration is connected; deleted when the user disconnects
• Calendar access credentials: stored encrypted while the integration is connected. Deleted as soon as you disconnect or delete your account, and we also revoke access with the calendar provider
• Chat history: retained for up to 2 years for service quality and conversation context
• Audit log: security-relevant events (sign-ins, connecting or disconnecting a calendar) retained for up to 2 years for security investigation

Anonymised and aggregated usage data (with no personal identifiers) may be retained longer for analytics and service improvement.

7. Your Rights

7.1 Under Australian Privacy Act, Indian DPDP Act, GDPR, and CCPA

You have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you
• Right of rectification: update or correct your personal data
• Right of erasure (right to be forgotten): delete your account and all associated personal data
• Right of data portability: receive your data in a machine-readable format
• Right to object: object to certain processing of your data
• Right to withdraw consent: withdraw consent for data processing at any time, including disconnecting any calendar integration

7.2 How to exercise your rights

• Delete your account: Settings → Privacy → Delete Account. Account and personal data are permanently removed from our active systems within 30 days.
• Export your data: Settings → Privacy → Export My Data. Your data is provided in a machine-readable format within 14 days.
• Disconnect a connected calendar: Settings → Integrations → choose the connection → Disconnect. Access is revoked with the calendar provider and synced events are deleted from our systems immediately.
• Access or correct data: Most data is editable directly in the app (member profiles, events, addresses). For specific requests, email [email protected].
• Other requests: Email [email protected] with your request. We will respond within 14 days.

7.3 If you are in the European Union (GDPR)

In addition to the above rights:

• You have the right to lodge a complaint with a supervisory authority
• The legal basis for our processing is: (a) performance of a contract (to provide you the Services you have signed up for), (b) legitimate interest (to improve and secure the Services), and (c) your consent (where applicable, including for any optional calendar integration)
• If you do not provide required data, we may not be able to provide the Services

7.4 If you are in California, USA (CCPA + CPRA)

You have additional rights:

• Right to know what personal information is collected, used, shared, or sold
• Right to opt out of sale of personal information. We do not sell your personal information.
• Right to non-discrimination for exercising your rights
• Right to correct inaccurate personal information

To submit a CCPA request, email [email protected] with subject line "CCPA Request".

7.5 If you are in India (DPDP Act 2023)

You have the rights of access, correction, erasure, and grievance redressal. Our grievance officer contact:

• Email: [email protected]
• Response time: within 14 days

8. Data Security

We implement industry-standard security practices to protect your personal data, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of data at rest using industry-standard encryption
• Access controls to limit who can access user data
• Strict per-user and per-family data isolation so one family cannot see another's data
• Audit logging of security-relevant events for investigation
• Regular security reviews

However, no method of electronic storage or transmission is 100% secure. In the event of a data breach that affects your personal data, we will notify you and the relevant authorities as required by law.

9. Data Transfers

FamSynch is operated from Australia. Some of our third-party service providers are based in the United States, the European Union, or other countries. When your data is transferred outside your country of residence:

• For European users: we rely on Standard Contractual Clauses or equivalent safeguards
• For Indian users: transfers are made under the Digital Personal Data Protection Act 2023
• For Australian users: transfers comply with the Privacy Act 1988

10. Calendar Integration

FamSynch offers optional, per-member, read-only calendar sync. This section explains what we do and do not do with your calendar data.

10.1 Access requested

When a family member connects their account, FamSynch requests only read access to calendars and events. The integration is read-only, with no ability to create, edit, or delete events on the calendar.

FamSynch does not request access to email, file storage, contacts, photos, tasks, or any other service offered by the calendar provider.

10.2 What we read

• The list of calendars on the connected account
• For calendars the user has chosen to sync: events from a recent and upcoming window only. We do not pull historical events
• For each event: title, description, start and end time, location, attendee status, and the calendar's own privacy flag

10.3 What we never do

• We never write to your calendar
• We never share your calendar event content with third parties for advertising, analytics, or any other purpose outside the features described in this Policy
• We never read calendars the user has not chosen to sync
• We never sync events outside the supported recent and upcoming time window
• We never link different family members' calendar accounts to each other. Each member connects their own account independently

10.4 Visibility model

By default, synced events are visible to your family inside FamSynch (this matches FamSynch's whole-family coordination purpose). However:

• Events the calendar provider marks as private are filtered out at sync time and never shown to other family members
• Events marked as busy-only are shown to other family members as a busy block, with title, description, and location hidden
• You can override visibility on any individual event inside FamSynch, even after sync, to hide or mask it from other family members

10.5 Credentials

• Access credentials for your connected calendar are stored only on the server, never on your device
• They are encrypted at rest
• Short-lived session tokens are held in memory by the server during a sync run only, and are not stored in our database

10.6 Disconnect

You can disconnect a connected calendar at any time via Settings → Integrations → choose the connection → Disconnect. On disconnect:

1. Access is revoked with the calendar provider
2. The encrypted credential is deleted from our database
3. All previously synced events are deleted from our database
4. Anything derived from those events (such as reminders and conflict alerts) is also deleted
5. An audit-log entry of the disconnect is retained for security purposes

Deleting your account performs the same disconnect for any active integrations.

10.7 Compliance with Google API Services User Data Policy

FamSynch's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use the data only to provide the user-facing features described above, we do not transfer the data to third parties for advertising, we do not allow humans to read the data unless required for security, compliance, or with the user's explicit consent for support, and we do not use the data to develop, improve, or train generalised AI models.

11. Family Members and Children

The age rating displayed on the Apple App Store and Google Play reflects the type of content the app may show, including AI-generated text and user-recorded information. It is not the minimum age to create an account. Account creation remains restricted as set out in our Terms of Service.

11.1 Family member roles

FamSynch supports the following member roles:

• Parent or guardian: full create, edit, and delete access to family data
• Teen (16 to 17): optional individual login; can manage their own events and can view the family calendar based on visibility settings
• Child (under 16): managed by parents. No individual login. The child does not have an account; they appear in FamSynch only as a profile maintained by the parent

11.2 Children's data

Information about children under 16 in your family is provided to FamSynch by the parent or guardian who created the family. We rely on the parent's authority to record this information for family-coordination purposes.

• FamSynch does not create accounts for children under 16
• FamSynch does not directly collect data from children under 13. Any such data appears only because a parent has recorded it in their own account
• Parents can edit, export, or delete child profile data at any time
• If you are a child under 13 using a parent's account, please ask the parent to manage your data on your behalf

If you believe a child's data has been recorded in FamSynch without parental authority, please contact [email protected] and we will investigate.

11.3 Cross-member privacy

Within a family, FamSynch enforces a per-event visibility model. Events can be marked private (visible only to the owner), busy-only (other members see a busy block without details), or shared (full visibility). This applies to manually created events, events read from screenshots, and synced calendar events alike.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The latest version is always available at famsynch.com/privacy and via the in-app Settings → Legal section. We will notify registered users of material changes via email or in-app notification at least 30 days before the changes take effect.

Continued use of the Services after the effective date of updates constitutes acceptance of the revised Privacy Policy.

13. Legal Compliance

This Privacy Policy is designed to comply with:

• Australia: Privacy Act 1988 (Cth) and Australian Privacy Principles
• India: Information Technology Act 2000, IT Rules 2011, and Digital Personal Data Protection Act 2023
• European Union: General Data Protection Regulation (GDPR)
• United States: California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)
• Other jurisdictions: applicable local privacy laws

14. Contact Us

For questions about this Privacy Policy or our data practices:

• Email: [email protected]
• Location: Australia

We aim to respond to all privacy-related inquiries within 14 days.

---