Privacy

Famili is built and run by Paul Gi, an independent developer in the United States. There is no company behind it and no investors. For anything on this page, email privacy@ourfamili.app.

Your account. An email address, and a password if you set one. Passwords are stored hashed, so nobody at Famili can read them. Sign-in times are recorded.

Your profile. The display name you choose, a color, your household role (Admin or Member), and any presentation setting an Admin assigns to you (Grown-up or Youth).

Household content. The household name, chores and their descriptions, review notes, rewards, Home Bucks entries and the reasons attached to them, invite codes, and family goals.

Personal savings goals. A Member’s selected reward goal and the details saved when it was selected.

Proof photos. Pictures uploaded to show a chore is done, which in practice are usually taken by children.

Famili+ billing. If you subscribe, Famili stores identifiers from Stripe along with your plan, its status and the renewal date. Card numbers never reach Famili. Stripe collects them on its own payment page.

Ordinary server records. Famili’s hosting and database providers keep short-lived technical logs, including IP addresses, so the service can be kept running and secure.

There are no analytics, advertising or tracking scripts anywhere in the app. Famili does not profile anyone, does not track people across other websites, and does not collect location, contacts or device identifiers.

Famili does not sell personal information, and does not share it for advertising. There is no circumstance in which a child’s name, chores or photos are used for marketing.

Famili uses strictly necessary cookies to keep you signed in, and nothing else. There are no advertising or analytics cookies, and no other company sets cookies through Famili.

Your browser also remembers your light or dark theme choice locally, so the app opens the way you left it.

To run the app: signing you in, showing your household its chores and rewards, and keeping Home Bucks balances correct.

To send the few emails the app needs — sign-in codes and email confirmations.

To take payment for Famili+, and to keep the service secure, such as limiting repeated invite-code guesses.

Famili separates household permissions from presentation. The permission roles are Admin and Member. Grown-up and Youth change how the app is presented, not what a Member is allowed to do. Youth and Grown-up Members have the same permissions.

Admins manage household members, chores, rewards and requests. Admin views also show member balances and Home Bucks history.

A Member’s personal savings goal is visible only to that Member. Admins cannot see it. A savings goal does not reserve Home Bucks, request a reward or purchase anything.

Family goals show aggregate progress for the household. They do not show individual contribution amounts or rankings.

Only Admins set a Member’s presentation. A Member without a saved presentation uses the Grown-up presentation and appears on the Admin setup list.

Famili is meant for households with children, and children have their own logins so they can see their own chores.

A parent or guardian creates the household and invites the child using a household invite. The parent or guardian manages the child’s use of Famili through the household’s Admin controls.

Famili shows no advertising to anyone, and children are never profiled or tracked.

Proof photos are stored privately. They are never public, never indexed by search engines, and can only be opened through short-lived links, valid for about five minutes, generated for people in the same household.

Photos are shrunk on the device before upload and limited to 250 KB each. Deleting the chore, the member or the household removes them.

Famili has a public demo that gives each visitor a temporary household of made-up sample data. It runs as a separate copy of Famili with its own database, apart from real households, and it never sends email.

Anything you change or upload in a demo is deleted with the demo household, within a day of the demo ending. To stop one person from starting a large number of demos, the demo keeps a keyed hash of your IP address for about a day. It never stores the address itself.

Famili is built on a small number of services. Each one only handles what it needs to, and none of them may use your data for their own purposes.

Supabase stores the database, accounts and photos. Vercel runs and serves the app. Stripe processes Famili+ payments. Resend, using Amazon SES, delivers the app’s emails. Cloudflare manages the domain.

Famili is hosted in the United States. If you use it from elsewhere, your information is processed there.

Household content is kept while the household exists, so chore and Home Bucks history stays intact for the people still using it.

Leaving a household removes you from it and detaches your name from the history you leave behind. Deleting your account removes your profile and your login. Deleting a household removes its content, including its photos.

Copies may survive briefly in provider backups and logs before they age out.

Everything travels over HTTPS. Passwords are hashed. The database enforces rules, checked on every query, that stop one household from reading or changing another household’s data. Photos live in a private store. Card details are handled entirely by Stripe.

Famili is a small project rather than a company with a security team, and it would be wrong to promise perfect security. Problems can be reported to privacy@ourfamili.app.

You can change your display name and color in settings, leave a household, or delete your account from inside the app.

You can also ask for a copy of what Famili holds about you or your child, ask for corrections, or ask for deletion, by emailing privacy@ourfamili.app. Expect a reply within 30 days.

The date at the top shows when this page last changed. Anything significant will be announced in the app or by email before it takes effect.