Privacy Policy

1. Information We Collect

Account Data: Email address, name, and profile photo when you register.

Location Data (GPS): When you enable location sharing, we collect your real-time GPS coordinates to display your position on the family map and trigger FamPin geofence alerts. Location data is shared only with members of your Family Circle. You can stop sharing at any time from the app settings.

AI Usage Data: When you use Gift Genie, we send anonymised inputs (age range, interests, budget) to our AI provider to generate gift suggestions. We do not store the AI conversation history beyond 30 days.

Device Data: Device type, OS version, and push notification tokens for delivering alerts.

Camera & Media: If you choose to upload a profile photo or share images within your Family Circle, we request access to your device's camera and photo library. We only access these when you explicitly initiate an upload.

2. How We Use Your Data

• Display your location to approved Family Circle members.
• Send geofence arrival/departure notifications (FamPins).
• Generate AI-powered gift recommendations.
• Sync shared calendars and shopping lists across your circle.
• Send push notifications for events, reminders, and alerts.
• Improve the app experience and fix bugs.

3. GPS & Location Disclosure

FamApp uses GPS location tracking as a core feature. Your precise location is collected in both foreground and background (if you enable background location) to provide real-time family tracking and geofence alerts. This data is:

• Visible only to members of your Family Circle.
• Never sold to third parties or advertisers.
• Your current location is stored as a single record updated in real time — we do not retain location history. Geofence events (FamPin arrivals/departures) are retained for 90 days then automatically deleted.
• Controllable: you can pause or stop sharing from the app at any time.

4. Gift Genie & Affiliate Disclosure

FamApp participates in various affiliate marketing programs. This means that if you click on a gift suggestion provided by the Gift Genie and make a purchase on a third-party website (such as Amazon), we may receive a small commission at no extra cost to you.

Transparency: Suggestions are generated by AI based on your inputs, not by which products pay the highest commission.

Amazon Associates: As an Amazon Associate, FamApp earns from qualifying purchases.

Data Sharing: When you click an affiliate link, the third-party merchant may use cookies or tracking technology to attribute the sale to us. This is governed by the merchant's own privacy policy.

4a. Data Retention

We retain different types of data for different periods: your current location is a single live record with no history retained; FamPin geofence events are deleted after 90 days; activity feed entries are deleted after 90 days; push notifications are deleted after 30 days; consent records are retained indefinitely as required by law; all other personal data is deleted within 30 days of account deletion.

5. AI & Third-Party Services

Gift Genie uses OpenAI or equivalent large language models to generate suggestions. Inputs are anonymised before transmission. We do not send personally identifiable information to AI providers. Generated content may be cached for up to 30 days to improve response times.

App Tracking Transparency (ATT): FamApp respects Apple's App Tracking Transparency framework. We do not use device identifiers (such as the IDFA) for tracking or advertising purposes unless you explicitly opt in via the ATT prompt. If you decline, the app continues to function fully — only personalised ad targeting and anonymous analytics are disabled.

6. Data Security

We use industry-standard encryption (TLS 1.3) for all data in transit. Sensitive data such as health records in FamHealth are protected by on-device biometric authentication (Face ID / Fingerprint). We do not store biometric data on our servers.

7. Third Party Processors

We use the following third party services to operate FamApp. Each acts as a data processor under a Data Processing Agreement:

• Supabase (EU) — database and authentication hosting.
• Firebase / Google Cloud Messaging (US) — push notification delivery. Transfer mechanism: Standard Contractual Clauses.
• OpenAI (US) — AI gift suggestion generation. Inputs are anonymised before transmission. Transfer mechanism: Standard Contractual Clauses.
• Mapbox (US) — map tile rendering and address geocoding. Transfer mechanism: Standard Contractual Clauses.
• RevenueCat (US) — subscription and purchase management. Transfer mechanism: Standard Contractual Clauses.
• Sentry (EU — Frankfurt) — error monitoring and crash reporting. Only initialised with your consent.

None of these processors receive your location data except Supabase (storage) and Mapbox (map tile rendering only — we send map coordinates, not your identity).

8. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by emailing help@famapp.co.uk. Account deletion will remove all stored location history and personal data within 30 days.

9. Children's Privacy

FamApp is designed for family use. Users under 13 may not create accounts. Users aged 13–15 must confirm during signup that a parent or guardian has approved their use of FamApp. This acknowledgement is logged with a timestamp for compliance purposes. Children under 13 may only access FamApp as members of a Family Circle managed by a parent or guardian who holds the account.

10. Your Lawful Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Contract (Article 6(1)(b)): Location sharing, Family Circles, shared lists, and calendar sync are necessary to provide the service you signed up for.
• Consent (Article 6(1)(a)): Analytics, crash reporting (Sentry), and affiliate tracking. You can withdraw consent at any time in Settings → Privacy.
• Legitimate Interest (Article 6(1)(f)): Security monitoring, fraud prevention, and service improvement.

You have the right to: access your data (Settings → Download my data); correct inaccurate data; delete your account and all associated data; withdraw consent at any time; lodge a complaint with the ICO at ico.org.uk.

11. Contact

For questions about this policy, contact us at help@famapp.co.uk.