Fam

Privacy Policy

Last updated: September 28, 2026

1. What we collect

Fam is a household organization app. The data in your household is data you (or your family members) put there:

• Account data — your email address, username, display name, and a bcrypt hash of your password (we never see the password itself).
• Household content — the tasks, calendar events, meals, shopping lists, pantry items, budgets, notes, and other records you create. This is the point of the app: it's your data, stored so your household can use it.
• Billing data — handled entirely by Stripe. Card numbers never reach our servers; we store only Stripe's customer and subscription identifiers.
• Operational logs — IP addresses and request logs for rate limiting, abuse prevention, and debugging. Kept briefly.

2. Why we collect it

• To provide the service you signed up for: organizing your household.
• To authenticate you and the members you invite.
• To process payments (via Stripe).
• To keep the service secure and available.

We do not collect data for advertising, profiling, or "product analytics." We don't have a growth team reading your funnels.

3. Who processes it for us

• DigitalOcean — server hosting (United States). Your household database lives on our server there.
• Cloudflare — DNS and content delivery.
• Stripe — payments. When you pay, you interact with Stripe's hosted checkout; their privacy policy applies to the payment data they process.
• Resend — email delivery for verification codes and password resets. They see the address and the message, nothing else.
• Purelymail — hosts the [email protected] mailbox you contact us at.
• Have I Been Pwned — at signup, the first five characters of your password's hash are checked against their breach list (k-anonymity: they cannot derive your password). If you'd rather we skip this check, say so and we will.

That's the whole list. We don't plug ad networks, session recorders, or third-party trackers into the app.

4. What we never do

• No advertising — nothing is ad-supported and no ad SDK touches your data.
• No selling or sharing your data with third parties.
• No tracking pixels, no analytics scripts on your content, no fingerprinting.
• No mining your household data to train anything.

5. How it's protected

• All traffic is encrypted in transit (HTTPS, HSTS enforced).
• Each household's data lives in its own isolated, at-rest-encrypted SQLite database. Households cannot see each other's data — separation is physical (separate files), not just a query filter.
• Passwords are stored as bcrypt hashes; sessions use signed, httpOnly cookies with CSRF protection.
• Rate limiting protects login, signup, and API endpoints from brute force.

6. Retention & deletion

• We keep your data while your account is active. That's it.
• You can request deletion of your household and all its data at any time: email us (see below) or cancel in the app. We'll remove the household database and directory entry.
• Backups age out automatically (rolling window). After deletion, the last backup containing your data is gone within that window.
• If you cancel a subscription, we keep your data for a grace period so you can resubscribe without losing anything; tell us to delete it instead and we will.

7. Your rights

Depending on where you live (including PIPEDA in Canada and GDPR in the EU), you have rights to:

• Access your data — the app's export features and our support can give you everything.
• Rectification — edit your data in-app or ask us.
• Erasure — as described above.
• Portability — household data exports as structured files.
• Withdrawal of consent / objection — deleting your account ends all processing.

Exercising any of these: email us. No forms, no verification maze.

8. Children

Fam accounts are created by adults (18+). Minors may be family members within a household account managed by a parent or guardian. We knowingly collect no data directly from children.

9. Changes

If we change this policy materially, we'll notify account holders by email before it takes effect. The "last updated" date above always reflects the current version.

10. Contact

Privacy questions, data requests, deletions:
[email protected] (operator: No Strings Labs, British Columbia, Canada)