Privacy Policy

Draft — not yet legal advice. This policy may change as FamKnit develops.

Who we are

FamKnit (“we”, “us”) is a family organizer app, based in the United Kingdom. Contact: privacy@famknit.app.

For the purposes of UK GDPR and the Data Protection Act 2018, we are the data controller for the personal data described below.

What data we collect

We do not collect: phone numbers, precise location, advertising identifiers, analytics profiles, or any data for marketing. There are no ads and no third-party tracking in FamKnit.

Email communications: we send three kinds of email, and no others.

1. Account and security email (verification, password reset, notice that your password changed). Necessary to operate your account, so these are always sent.
2. Reminders you asked for. If you set your reminder channel to Email in Preferences, we email you about your own tasks at the times you configured. These are service messages rather than marketing: you turn them on yourself, they only ever concern your own content, and every one carries a link back to Preferences. Turn them off by switching your channel back to push, or switch off notifications entirely, and they stop immediately.
3. Anything else is sent only if you have separately opted in, and you can withdraw that consent at any time in Preferences.

We never send marketing email, and we do not sell or share your address.

Cookies. FamKnit uses a small number of cookies to run the service, and none for advertising, analytics, or tracking. The session cookie that keeps you signed in, and a handful of short-lived cookies used only during sign-in (Google sign-in, password reset) are strictly necessary and are covered by that exemption under UK PECR — no banner is shown for them. One further cookie, famknit_theme, remembers whether you've chosen Light or Dark mode (or left it following your device) so the app can show the right one immediately when a page loads; it holds only that choice, nothing else, and is set only once you actually make a choice in Preferences. None of these cookies are used to track you across other sites, and we set no third-party cookies at all.

Where your data lives

All application data is stored with Supabase in a UK/EU region data centre and is not transferred outside the UK/EEA, with one exception: push notifications are delivered via Google Firebase Cloud Messaging, which processes the minimum data needed to deliver a notification (device token and message content). Google participates in the EU–US Data Privacy Framework and offers UK-approved transfer safeguards.

We do not use Firebase for anything other than delivering push notifications. No analytics, crash reporting, or advertising service from Firebase or anyone else is enabled in FamKnit.

Our processors:

• Supabase — database, authentication, hosting of server functions
• Vercel — web application hosting
• Resend — sending account and security emails (verification, password reset, password-changed notices), and task reminders if you have chosen email as your reminder channel
• Google Firebase Cloud Messaging — push notification delivery
• Google (only if you choose Google sign-in) — authentication
• Anthropic — reads the photo, pasted text or voice transcript you submit through the optional AI-assisted capture feature, only if you've turned it on; see “AI-assisted capture” below

Children

FamKnit lets an adult family administrator add family members who do not have accounts — typically children — by name only. These entries:

• are created and controlled by the adult administrator, not the child;
• contain only a first name/nickname and colour tag;
• have no login, no email, and no device associated with them.

Children do not use FamKnit directly and we do not knowingly collect personal data from children. Administrators are responsible for the names they add.

AI-assisted capture (Smart Scan and Voice notes)

FamKnit has an optional feature that turns a photo of a letter, list or note, pasted text, or a spoken note into event, to-do and shopping suggestions you can review before anything is added. It is off by default, per member, and currently available only to a small number of families while we test it — even where it's available to your family, nothing happens with it until you turn it on yourself in Preferences → AI features.

When you use it:

• What's sent. The photo you take or choose, the text you paste, or the transcript of what you said, is sent to Anthropic (the company behind the Claude models) to identify events, to-dos and shopping items in it. Nothing is added to your calendar or lists automatically — every suggestion is shown to you to review, edit or discard first.
• Voice notes. Your spoken words are turned into text on your own device or by your browser's own speech recognition. The recording itself is never sent to Anthropic or stored anywhere, by us or by them — only the resulting text is. If FamKnit reads a suggestion back to you to confirm it, that's your device's own text-to-speech doing the talking, not Anthropic.
• Images aren't stored. We don't keep the photo once it's been processed, and neither does Anthropic beyond the short period below.
• Retention with Anthropic. Anthropic doesn't use anything you send through this feature to train its models. Under its standard API terms, both what you send and what it returns are deleted from Anthropic's own systems within 30 days; a narrower record may be kept for up to 2 years (or, for safety classification only, up to 7 years) if flagged for Trust & Safety review. This is Anthropic's own retention policy, not one FamKnit sets.
• Turning it off. Preferences → AI features lets you switch Smart Scan and Voice notes off independently, at any time; the entry points in the app disappear as soon as you do.

How long we keep data

Your data is kept while your account is active. If you delete your account, your membership, preferences, push tokens, and reminder logs are deleted immediately, and so is everything you created — every event, to-do, and shopping item, whether or not other family members were also on it. The only exceptions are a shared list (like the family's shopping list) and a recurring event series you created: these stay with the family rather than being deleted with you, because removing them would also remove every other family member's items or upcoming occurrences, not just yours. If you're the only remaining adult in your family, deleting your account deletes the whole family, including any child profiles on it, since nobody would be left to use it.

Security activity log

Separately from the above, we keep a security log of significant account and family actions: creating, renaming or deleting a family, rotating an invite code, someone joining, a child profile being added, a member's role being changed, a member being removed or leaving, and an account being erased. Each entry records what happened and when, who did it (their name, email address, and the role they held at the time), and the IP address and browser the action came from. It does not record the contents of your events, to-do items or shopping lists.

We keep these entries for 365 days, after which they are deleted automatically. This log exists for security: it is how we, or you, can establish what actually happened if an account is misused or a change is disputed. For that reason it is retained even after you delete your account, for the remainder of that 365 days. UK GDPR allows this where keeping limited personal data is necessary for the security of the service and for establishing, exercising or defending legal claims (Art. 17(3)). These entries are never used for marketing, profiling or any other purpose.

Where this log is shown to family administrators inside the app, the view is redacted: it shows the action, who did it and when, but never email addresses or IP addresses.

Your rights

Under UK GDPR you have the right to access, correct, export, delete, and object to processing of your personal data. In-app:

• Export: Settings → “Download my data” gives you a complete JSON copy of your data (Art. 15/20).
• Delete: Settings → “Delete my account” permanently removes your account and associated personal data as described above (Art. 17).

For anything else, email privacy@famknit.app. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Security

• All traffic is encrypted in transit (HTTPS is enforced across famknit.app).
• Data is encrypted at rest by our hosting providers.
• Access to your family's data is enforced at the database level (row-level security): private events are visible only to the people they are shared with, and no one outside your family can access any of it.

Changes

If this policy changes materially, we will notify account holders by email or in-app notice before the change takes effect.