Privacy

Who we are

Family Me is run from Israel, at family-me.com. For anything about your data — a question, a copy of it, a correction or deleting it — write to familyme.team@gmail.com.

What we keep, and why

We keep only what the app needs to do what your family uses it for:

• Your account: your email address and your name, so you can sign in and your family knows who you are. Your password is kept only in a scrambled form that nobody can read back.
• Your family: who is in it and their roles, and whatever an admin adds about a member — a relation, a birthday, a note, a photo, an email address for reminders.
• What your family puts in: chats with the assistant, tasks and reminders, shopping lists, recipes with their photos and the links they came from, the memories the assistant was asked to keep, and documents you upload, with the text read from them.
• Spending, if your family uses it — see the next section.
• If your family pays for a plan, a record of each payment — see “Paying for a plan” below.
• If you turn on notifications, the address your browser gives us to deliver them.
• Where you found us: if an ad or a link you followed named where it came from, or another site sent you here, we note that site and the campaign's name with your new account, to learn which of our ads work. It is kept on your device until you sign up, and nothing else about you goes with it.

What your family writes down can include health details, such as an allergy or a medicine. They are kept like everything else here: seen by your family, sent to the assistant when it needs them to answer, and deleted when you delete them.

Your language, your theme, a few similar choices and what keeps you signed in are saved on your own device. Your language is also sent with each visit, so pages open in it; we keep none of these on our servers. Family Me sets no advertising or tracking cookies.

So the app opens without waiting, it keeps a temporary copy of what it last showed you: your family's tasks, your shopping lists, the names of chats the whole family can see, and who is in your family. Spending, documents, memories, chat messages and members' notes, birthdays and email addresses are never kept on the device. Removing this copy deletes nothing of your family's: everything stays on our servers, and the app fetches it again the next time you sign in. The copy is removed when you sign out, when you sign out of all devices, and after a week without use.

If a phone is lost or stolen, open Settings on any other device and choose “Sign out of all devices”. The lost phone is locked out as soon as its current sign-in runs out, which takes an hour at most and often less, and it then removes its temporary copy.

Giving us any of this is your choice, but without an email address there is no account, and the assistant can only help with what it has been told.

Spending

Spending is optional. It holds the payments your family adds by hand or imports from a spreadsheet file and, if you connect an iPhone, each Apple Pay payment you make in a store, sent by an automation you set up yourself in the Shortcuts app.

For each payment Family Me keeps:

• the amount and its currency;
• the shop's name as the payment terminal reports it, sometimes with its town;
• the date and time;
• the category it is filed under and who it belongs to;
• whether it came from an iPhone or was added by hand (an imported payment counts as added by hand), and a note, if someone wrote one.

It never receives your card's name or number, your bank, your balance or where you are. The key your iPhone uses to send payments is kept only in a scrambled form, and you can disconnect it at any time.

If you import payments from a file (CSV or TSV), such as one your bank lets you download, the file is read on your own device and is never uploaded or kept. Only the payments you choose to add reach Family Me, with the details listed above, and they are kept exactly like payments added by hand. Any other columns in the file, such as a card or account number, are ignored and never leave your device.

Every adult and admin in your family sees every payment in it. A child sees nothing unless an admin lets them see only their own payments, or all of them. A chat in which the assistant used your family's spending can from then on be opened only by the people who may see that spending.

However a payment arrives — from an iPhone, by hand or from a file — it is used only to show your family its spending and, when someone asks, to let the assistant answer about it. We never sell it, share it with advertisers, use it to show you ads, or use it for any other purpose.

Your family can also give a category a monthly budget, which only those who see all of the family's spending can see, and make a payment repeat — rent, a subscription — so that Family Me adds it by itself on its day until someone stops it.

A shop's name can say something personal — a pharmacy, a clinic. Everyone who can see your family's spending sees it, so delete a payment if you'd rather they didn't.

In Settings you can download all the spending you can see as a spreadsheet (CSV), and delete every payment filed under you, with its repeats, at once. Stopping is as simple: disconnect the iPhone in Family Me, or delete the automation in Shortcuts.

Paying for a plan

A paid plan is bought through Bit, outside Family Me. Bit handles the payment under its own terms, and Family Me never sees your card, your bank or your Bit account.

When a parent says they've paid, Family Me keeps who said it, the plan, the amount and when, so we can match it to the payment in our Bit account and turn the plan on. Bit shows us the payer's name, the amount and any note, as it does with any transfer.

Everyone in your family can see that a payment is waiting and what it is for. The record stays for as long as your family does, also after the plan ends, and is deleted when the family is deleted.

The assistant

When you write to the assistant, your message goes to Anthropic, the company whose AI model writes the answer, with what it needs to answer well: the chat so far, your family's members and memories, and the parts of your documents, lists, tasks or spending it looks up for you. Under its commercial terms Anthropic uses this to answer, not to train its models.

When you import a recipe from a photo or a file, it goes to Anthropic to be copied out, and nothing is saved until you have checked it and saved it yourself. When you paste a link, our servers open that page to read the recipe from it, so the site sees a visit from us, not from you or your device.

The assistant only reaches what the person asking may see. A child without access to spending can't ask it about spending.

Google Calendar

Connecting your Google Calendar is optional, and each person connects only their own. Family Me then reads the events in your main Google calendar for the current day — their titles, times, places and links — to show them to you on Today and in your daily summary. It asks Google for read-only access: it can't add, change or delete anything in your calendar, and it doesn't see your email, contacts or any other Google data.

Your events are for you alone. Nobody else in your family sees them, they are never sent to the assistant or to Anthropic, and they are never used to train AI models.

We don't store your events. They are read from Google when you open Today and when your daily summary is sent, and then discarded. When they are in your daily summary, they travel to you the way the rest of it does: through Resend, for the email, and encrypted through your browser's push service, for a notification.

What we do keep: the address of the Google account you connected, when you connected it, whether Google has since refused access, and a key from Google that lets Family Me read your calendar without asking you to sign in every day. The key is stored encrypted.

You can disconnect in Settings at any time. We then delete the key and everything we keep about the connection, and ask Google to cancel Family Me's access. The same happens when you delete your account. You can also remove Family Me's access yourself, in the security settings of your Google Account.

Family Me's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use your calendar only to show it to you. We never sell it, use it for advertising, or share it with anyone except as described above, and nobody at Family Me reads it unless you ask us to for help, or the law or keeping Family Me secure requires it.

Who else handles it

We don't sell your data, and there are no ads. To run Family Me we use these services, which handle data only on our behalf:

• Supabase — the database, file storage and sign-in.
• Vercel — runs the app, and counts visits to pages without cookies and without telling us who you are.
• Anthropic — the assistant's AI model.
• Google — your own Google Calendar, read-only, if you connect it. See “Google Calendar” above.
• Resend — sends reminders, the emails your family asks for, and the emails about paying for a plan.
• Sentry — reports of errors in the app, with names, addresses and anything your family wrote taken out first.
• Your browser's own push service (Apple, Google or Mozilla) — delivers notifications, if you turn them on.
• Your calendar app (Google, Apple or Microsoft) — if you add your family's calendar link to it, it fetches your tasks' titles, dates, notes and who they're for, and keeps a copy under its own terms.

Some of these services store or process data outside Israel, including in the United States and the European Union.

How long we keep it

We keep your family's data for as long as your family uses Family Me. Whatever you delete — a chat, a task, a document, a payment — is deleted. You can delete your own account in Settings, and an admin can delete the whole family on the Family page; either way its stored files go too. When you delete your account and others stay in the family, the payments filed under you are deleted, and what you wrote in shared chats stays there under your name. For anything else, write to familyme.team@gmail.com. We delete what you ask, apart from anything the law requires us to keep.

Your rights

Under Israel's Privacy Protection Law you may see the information we hold about you, and ask us to correct or delete it. Write to familyme.team@gmail.com. If you aren't satisfied with our answer, you can complain to the Privacy Protection Authority.

Children

A child joins Family Me only when a parent or another admin of the family adds or invites them, and what the family writes about a child is visible to the family. A child sees the family's spending only if an admin allows it.

Keeping it safe

Everything travels encrypted. Rules in the database itself keep each family's data apart, so one family can never read another's, and within a family a child can't read spending they weren't given. Keys that let an iPhone send payments, and the key that lets Family Me read a connected Google Calendar, are stored scrambled.

Changes to this page

If we change how we handle your data, we'll update this page and its date, and tell you in the app when the change matters to you.