Privacy Policy
Google Calendar (optional)
If you connect Google Calendar, Family Hub requests read-only access to your calendar list and events. We store your calendar names, colours, time zones and connection status, and event details from calendars you select, covering the previous 90 days and next 365 days. Connection tokens are encrypted on our server and are not sent to the app. Imported events are private to you unless you explicitly share a selected calendar with your current family. Family Hub does not create, change or delete events in Google. Disconnecting removes imported calendar data from Family Hub and requests removal of our Google access. Removing a selected calendar removes its imported events. Imported data is also removed when you leave your family or delete your account. Google calendar events are kept in memory on your device and cleared on sign-out or account or family changes. Google data is used only to provide this calendar connection, never for advertising or training AI models. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Information you provide
Family Hub stores your account identifier, email, display name, optional profile photo and agreement records. We also store the family content you choose to add: tasks, appointments, shopping lists, contacts, documents, budgets, recipes, meals, timetables and saved places. Avoid adding sensitive information you do not need to share with your family.
Authentication and storage
Amazon Cognito handles account authentication. Passwords and session credentials are handled by the supported AWS authentication library; session tokens are protected in the device Keychain. Cloudflare processes application requests and stores family data and files. Apple handles App Store billing and device push delivery. Social sign-in is available only when a provider has been configured and enabled for the app.
Sharing and permissions
Shared family content is accessible to authorised family members. Teen accounts have restricted permissions, including no access to family budgets. Service providers process data to operate the service. We do not sell your personal information.
Notifications and device storage
If you allow push notifications, we register your device token to deliver alerts. Notification content may appear on your lock screen under your device settings. The app saves the last synced account data on your device so it can be read without a connection. That cache expires after 14 days and is cleared on sign-out, account changes and when updated permissions remove access. Files you choose to open or share may also be saved outside Family Hub by your device or another app.
Location
Saved places contain only addresses and coordinates that you choose. When you search for an address or open a map, Apple Maps processes the search text and map requests to display places you choose. Family Hub does not track your live location, use geofences or discover nearby community events.
Retention and deletion
Your data is retained while needed to provide the service. Items deleted individually remain recoverable for up to 30 days and are then purged. Account deletion is permanent. Account deletion removes your account, notification registration, uploaded files, authored records and associated history, including contributions in previous families and any retired chat data. Other members retain their own records; shopping items they added may move into a replacement list. A minimal deletion marker prevents old sign-in sessions recreating removed account data. Limited Apple transaction records may remain to maintain a continuing family’s subscription and process subscription changes, with the deleted profile link removed. A family with no adult administrator is deleted. Copies you or other family members exported or shared outside Family Hub are outside our control.
Your choices and rights
You can edit your profile, change your email or password, manage notifications, leave by deleting your account, and request help with access, correction or deletion of personal information by contacting gavin@altitudedesign.co.uk. Where applicable, you may complain to your data protection regulator. Service providers may process information outside your country under their applicable data protection safeguards.
Children and policy changes
Accounts are restricted to ages 13 or over, or the higher local minimum age. An adult is responsible for having appropriate permission to include a younger child's information in a family space. A Teen role does not permit an underage account. We record the date and version of your acceptance and prompt you when this notice materially changes.