Privacy Policy

1. About this policy

This Privacy Policy applies to the Family Collab mobile application (the App) and the website at familycollab.app (the Site), together the Service.

The Service is currently operated by Joseph Dentrone, an individual residing in Texas, doing business as Family Collab. Operation will transition to Family Collab LLC (a Texas limited liability company) upon its formation; the operator change will be announced here with an updated effective date.

For privacy questions, write to privacy@familycollab.app. For security disclosures, write to security@familycollab.app.

2. Information we collect

Information you provide

• Account information. Email address and password when you sign up with email; name, email, and an opaque provider identifier when you sign in with Apple, Google, or Microsoft. We never receive your third-party password.
• Profile information. Display name, optional avatar, theme preferences, push notification token, and the family or household identifier you belong to.
• Household content. Tasks, lists, list items, meal plans, recipes you save or import, calendar events, budget items, and any other content you create within shared family spaces.
• Sensitive household information. Family Collab may hold information that feels sensitive because you choose to put it in the App, including financial records, receipt images, children's names or roles, school and medical appointments, household schedules, notes, and similar family details.
• Cycle tracking data. If you turn on cycle tracking, we process the dates, settings, predictions, and calendar overlays needed to show period and phase information. Cycle tracking is optional and is not used for advertising.
• Receipt and recipe inputs. If you upload a photo of a receipt or import a recipe from a URL, we process the image, page contents, and extracted text to create structured data (totals, items, ingredients, steps).
• Email receipt imports. If you opt in to receipt forwarding, we process forwarded receipt, invoice, or order emails and their contents to create expense records. You can review or edit imported expenses in the App.
• Calendar imports. If you connect a system calendar, we read the events you authorize so we can display them in the App. We do not write to your external calendar without your action.
• Schedule scan inputs. If you submit schedule text or an image for parsing, we process that content to create calendar events for your family.
• Communications. Email you send us, including support requests and bug reports.

Information collected automatically

• App diagnostics. Crash reports, error logs, and event timestamps used to fix problems and verify rollouts. We try to avoid including household content in diagnostics, but you should not put sensitive information in bug reports or support messages unless it is needed to troubleshoot the issue.
• Device and connection data. Device model, operating system version, app version, IP address, and approximate region — used for security, abuse prevention, and to render content correctly.
• Site logs. Standard web access logs (request path, IP, timestamp, referrer, user agent) generated by our hosting provider for security and operational purposes.

The Site (not the App) uses Cloudflare Web Analytics to count visits. It sets no cookies and stores nothing in your browser. For each page view its script sends Cloudflare the page address and the referring page (both without anything after a ? or #), performance measurements (load timing, Core Web Vitals, and memory use, including the address of the largest image or file on the page and which page elements were involved, plus navigation type and transfer sizes), your browser, its engine version and operating system version, and a random identifier created fresh for that page load. Cloudflare also receives your IP address and your browser's User-Agent header with the request, as any web server does, and reports visits to us by country. We use this to count visits and see which pages are read. It does not run on the sign-in link page. The App contains no analytics SDK. We do not use advertising trackers anywhere, and if that or the App's position ever changes we will update this policy before it takes effect.

3. How we use information

• To provide and operate the Service.
• To authenticate you and keep your account secure.
• To deliver content you and your family create to each other.
• To process optional imports, scans, reminders, notifications, and cycle tracking features you choose to use.
• To send essential transactional email — sign-up confirmations, password resets, and security notices. We do not send marketing email.
• To diagnose and fix problems, including crash investigation.
• To detect and prevent abuse, fraud, and security threats.
• To comply with our legal obligations.

4. Family sharing

The App is designed around shared household spaces. When you join a family, the other members of that family can see content you add to the family — tasks, lists, meals, calendar items, budget entries, and similar shared records — and can edit them based on the role and permissions they have. They cannot see your account password, content from other families you belong to, or optional cycle tracking information that the App labels as private to you.

Choose carefully which family you contribute content to. When you remove yourself from a family, the content you previously contributed remains visible to the family unless you delete it before leaving.

5. Service providers and processors

We use the following third-party services to operate the Service. Each is bound by its own contractual or terms-of-service privacy obligations:

• Supabase — application database, authentication, file storage, and serverless functions. Hosts the data you create in the App.
• Render — hosting for the Site and for backend rendering services.
• Cloudflare — DNS and email routing for the familycollab.app domain, and cookieless visit counts for the Site (Cloudflare Web Analytics).
• Resend — outbound transactional email delivery (sign-up confirmation, password reset, security notices).
• Expo — push notification delivery and over-the-air update distribution.
• Apple — App Store distribution, TestFlight beta delivery, optional Sign in with Apple, and APNs push delivery on iOS devices.
• Google — optional Sign in with Google. Google AI / Gemini APIs process the contents of receipts, recipes, and schedules you submit for parsing.
• Microsoft — optional Sign in with Microsoft.

We do not sell or rent personal information to third parties for advertising purposes.

6. AI processing

Some App features use third-party AI models (currently Google's Gemini family) to extract structured data from your inputs — for example, identifying items on a receipt photo or forwarded receipt email, parsing a recipe from a URL, or normalizing a schedule from text or an image. We send only the content needed for that feature (not your full account or family data) and we do not opt your inputs into model training. We retain extraction results within your account for the same duration as the underlying records.

7. Data retention

We retain your data while your account is active. You can delete individual records in the App at any time. To delete your entire account, write to privacy@familycollab.app from the email address tied to the account; we will confirm and process the deletion within thirty (30) days, subject to operational and legal retention exceptions (for example, fraud prevention or backups that age out on their own schedule).

Because Family Collab is built around shared family spaces, deleting your account may not automatically remove content you contributed to a family before deletion. Delete shared records in the App before leaving a family, or contact us if you need help with a deletion request.

Site access logs are retained for up to ninety (90) days for security and operational diagnostics, then deleted on rolling rotation by the hosting provider.

8. Your rights

Depending on where you live, you may have rights under privacy laws such as the California Consumer Privacy Act (CCPA / CPRA), Virginia's VCDPA, the EU General Data Protection Regulation (GDPR), and similar laws. These rights typically include:

• The right to know what personal information we hold about you.
• The right to a copy of your data in a portable format.
• The right to correct inaccurate data.
• The right to delete your data.
• The right to object to or restrict certain processing.
• The right to opt out of "sale" or "sharing" of personal information — we do not sell or share for cross-context behavioral advertising, so there is nothing to opt out of in this respect.
• The right to lodge a complaint with your local data-protection authority.

To exercise any of these rights, write to privacy@familycollab.app from the email address tied to your account. We will respond within forty-five (45) days. We do not discriminate against users who exercise these rights.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Account creation requires the user to be at least 13 years old. Users between 13 and 18 should have a parent or guardian's permission before signing up.

If you believe a child under 13 has created an account or submitted personal information, write to privacy@familycollab.app and we will delete the account and associated data.

10. Security

We use industry-standard practices to protect data: content is encrypted in transit (HTTPS), sensitive household fields are encrypted at rest, access is authorized at the database level via row-level security, and our team operates under least-privilege controls. To be clear about what this is not: it is not end-to-end encryption — to provide features such as budget alerts, receipt scanning, and family sharing, our servers can process your data. No system is perfectly secure; if you suspect your account has been compromised, write to security@familycollab.app right away.

11. International transfers

Our service providers operate from data centers in the United States and other regions. If you access the Service from outside the United States, your information may be processed in the United States and other countries whose data protection laws may differ from those of your home country. By using the Service, you consent to this transfer.

12. Changes to this policy

We may update this policy from time to time. When we make a material change, we will revise the effective date at the top of this page and, where appropriate, notify you in the App or by email. Your continued use of the Service after a change takes effect constitutes acceptance of the updated policy.

13. Contact

Family Collab
Operated by Joseph Dentrone (transitioning to Family Collab LLC)
Email: privacy@familycollab.app
Security: security@familycollab.app
Support: support@familycollab.app