Effective 20 June 2026 · Last updated 20 June 2026
This Privacy Policy explains how Famhaven ("we", "us") collects, uses, shares, and protects personal data when you use the Famhaven mobile app and website (the "Service"). Famhaven is operated by an independent developer established in the European Union, who is the data controller for this processing. For privacy questions or to exercise your rights, contact privacy@famhaven.app.
Accounts are created by adults (18+). An adult who sets up a household may add child and teen members. A child has no independent account: a parent/guardian provisions the child's profile and a device PIN, and the child uses the app on a paired device.
By adding a child, the adult confirms they are the child's parent or legal guardian and consents, on the child's behalf, to the limited processing described in §3 and §6. We record that this consent was given (which adult, when, and the version of this notice shown). See §6 for children's privacy details (COPPA, the UK Children's Code, and GDPR Article 8).
Account & profile (adults/teens): name/display name, email address, the authentication method you use (Sign in with Apple, Google, or email), and an optional avatar/household photo.
Household & members: household name, member names, member colours/roles, relationships, and — for children — an age and a salted, hashed device PIN (the PIN itself is never stored or readable).
Content you create: calendar events (titles, notes, locations, attendees, reminders), chores and completion records, chore-proof photos, lists and list items, points/rewards, and activity history.
Device & technical data: push-notification tokens (to deliver reminders), app version, device/OS type, and an App Check attestation token confirming the app is genuine.
Subscription & purchase data: your subscription status and purchase history, processed via RevenueCat and the Apple App Store / Google Play. We never receive your full payment-card details.
Usage, crash & performance data (opt-in only): if — and only if — you turn on "Share anonymous usage data" in Settings → Privacy & data, we collect aggregated product-interaction events, crash diagnostics, and performance traces via Firebase. This is off by default and is always off for children's sessions, regardless of any setting.
We do not collect precise geolocation, contacts (these stay on your device when inviting members), or the advertising identifier (IDFA/AAID).
| Purpose | Legal basis |
|---|---|
| Create and operate your household, sync your content across members/devices | Performance of a contract (Art. 6(1)(b)) |
| Deliver reminders and notifications | Contract / your consent for OS notifications |
| Provide and validate subscriptions | Performance of a contract |
| Keep the Service secure (App Check, abuse prevention, PIN hashing) | Legitimate interests (Art. 6(1)(f)) |
| Usage, crash & performance analytics | Your consent (Art. 6(1)(a)); withdrawable any time |
| Processing of children's data | Parental consent by the account-holding adult (Art. 8; COPPA verifiable parental consent) |
| Comply with legal obligations | Legal obligation (Art. 6(1)(c)) |
We rely on consent for non-essential analytics/crash/performance telemetry; you can withdraw it at any time in Settings, with no effect on the rest of the Service.
We do not sell your personal data. We share it only with service providers who process it on our instructions under a data processing agreement:
We also disclose data where required by law, to protect rights and safety, or in connection with a merger or acquisition (with notice where required). A current list of sub-processors is available on request at privacy@famhaven.app.
We apply data-minimising, high-privacy defaults to all child profiles:
Parental rights. A parent/guardian may review, correct, or delete a child's data at any time from within the app, or by contacting privacy@famhaven.app. Removing a child deletes their profile, PIN credential, paired-device records, proof photos, points history, and authentication identity. If you believe a child provided us data without parental consent, contact us and we will delete it.
Our processors (including Google/Firebase and RevenueCat) may process data on servers in the United States and other countries outside the EEA/UK. Where data is transferred outside the EEA/UK, we rely on appropriate safeguards — principally the European Commission's Standard Contractual Clauses (and the UK Addendum) — incorporated into our agreements with those processors. A copy is available on request.
Depending on where you live (EEA/UK GDPR, California CCPA/CPRA, Brazil LGPD, and others), you have rights to access, rectify, erase, export/port, restrict or object to certain processing, withdraw consent, and lodge a complaint with your data protection authority. We do not "sell" or "share" personal data for cross-context behavioural advertising, and we do not use it for targeted advertising.
To exercise any right, use the in-app controls (Settings → Account / Privacy & data) or email privacy@famhaven.app. We respond within one month (GDPR) or the applicable statutory period.
We protect your data with measures including App Check attestation, encryption in transit (TLS), salted hashing of child PINs, server-side authorization and tenancy isolation, and rate-limiting of sensitive operations. No method is completely secure, but we work to protect your data and will notify you and the relevant authorities of a personal-data breach where required by law.
Our marketing website is informational and does not set advertising or analytics cookies. We do not build profiles of website visitors.
We may update this policy. We will post the new version with an updated "Last updated" date and, for material changes, notify you in the app. The version of this notice shown to a parent when they add a child is recorded with their consent.
Famhaven is run by an independent developer based in the European Union. Given our small scale we have not appointed a Data Protection Officer or an EU representative (we are established in the EU); privacy requests are handled directly by the developer.
Contact: privacy@famhaven.app