Privacy policy
Last updated August 3, 2026
What Fambrain is
Fambrain is a shared family command-center app: one calendar, chore and routine tracker, meal planner, and set of shared lists for a household. A parent or guardian creates the account, invites other adults, and sets up profiles for everyone in the family — including children. The app runs on phones, tablets, and browsers, and can run as an always-on wall display.
The short version
- No ads. No analytics. No tracking. We do not run advertising, and we do not use third-party analytics or behavioral tracking SDKs.
- We never sell your data. Not to advertisers, not to data brokers, not to anyone.
- Children never have accounts. Child profiles are display labels only — a name, an emoji, and a color. We collect no personal data from children.
- Your data lives in one place. Everything is stored in a hosted Postgres database (Supabase) and is only shared with the small set of service providers listed below, strictly to operate the app.
- You can delete everything. Deleting your family account deletes your family’s data.
What we collect
Account information (adults only)
- Email address — used for sign-in and essential service messages. Fambrain accounts are intended for adults (18+).
- Sign-in provider identifiers — if you sign in with Apple or Google, we receive the identifier those services share with us to authenticate you.
Family content you enter
- Calendar events — titles, dates/times, repeat rules, assigned profiles, locations, notes, and reminder settings.
- Tasks, routines, and chores — titles, emoji, assignments, schedules, and completion records (including stars awarded, if you use rewards).
- Lists — list names, colors, items, quantities, and check-off state.
- Meals — your weekly meal plan entries.
- Family and profile settings — family name, timezone, weather location, sleep schedule, and device preferences.
Profiles — including child profiles
Profiles are labels used to color-code and assign events and tasks. A profile contains only a name (whatever you choose to type — a first name, nickname, or initial is fine), an emoji avatar (or, for adult profiles, an optional photo), and a color from a fixed palette.
Child profiles have no account, no email address, no password, no sign-in capability, and no way to communicate through the app. We do not collect a child’s age, birthdate, school, contacts, or any other personal information from or about a child beyond the display fields above, which are entered and controlled entirely by the parent.
Device and push information
- Device registry— each installed app instance registers a platform type (iOS/Android/web), a display name you choose (e.g., “Kitchen iPad”), mode preference, and last-seen timestamp.
- Push notification tokens — if you enable reminders, we store a push token (Web Push/VAPID on web, FCM on Android, APNs on iOS) so we can deliver reminder notifications to your devices.
- We do not use third-party crash reporting or analytics tools.
Optional third-party connections
- Google Calendar sync — if you connect Google Calendar, you authenticate with Google via OAuth. We request the
calendar.eventsscope so we can read and write calendar events you choose to sync. OAuth tokens are stored server-side only (in our Supabase backend), never on your device beyond the sign-in flow, and are used solely to sync events between Google Calendar and Fambrain. You can disconnect at any time, which deletes the stored tokens. Our use of Google user data adheres to the Google API Services User Data Policy, including the Limited Use requirements. - Weather location— weather is provided by MET Norway (Norwegian Meteorological Institute). The location is a city or area you set manually in family settings. We do not access your device’s GPS, and we do not track or store precise location. Only the place you configured is sent to MET Norway to fetch forecasts.
Payment information
The one-time unlock is processed by the app stores (Apple App Store / Google Play, via RevenueCat). We never see or store your card number. We receive only a customer/entitlement identifier and purchase status.
What we do NOT collect
- No advertising identifiers, no ad tracking, no cross-app tracking.
- No third-party analytics or behavioral profiling.
- No precise geolocation or background location.
- No contacts, photos (except optional profile photos you explicitly choose), microphone, or health data.
- No personal data from children beyond parent-entered name/emoji/color labels.
- We do not sell, rent, or trade any personal information to anyone, for any purpose.
How we use information
We use the information above only to:
- Provide and sync the service — store your family’s data and synchronize it across your devices in real time.
- Authenticate you — sign-in by email, Apple, or Google.
- Deliver reminders — push notifications for events you set reminders on.
- Sync optional calendars — only when you connect them.
- Provide weather — fetch forecasts for your configured location.
- Process purchases — verify unlock entitlements.
- Support and safety — respond to support requests, debug issues, prevent abuse, and comply with law.
We do not use your content to train machine-learning models, build advertising profiles, or for any purpose other than operating Fambrain for your family.
Where data is stored and who processes it
Your data is stored in a Postgres database hosted by Supabase in the ap-northeast-1 (Tokyo) region. Row Level Security isolates each family’s data so that only members of your family can access it. Our sub-processors are limited to:
- Supabase — database, authentication, realtime sync, storage, server functions. All family content and account data.
- Cloudflare — hosting of the static web app. No personal data stored; serves the app files.
- Google (Calendar API) — optional calendar sync. Events you sync; OAuth tokens (server-side).
- MET Norway — weather forecasts. Your manually configured weather location only.
- Apple APNs / Google FCM / Web Push (VAPID) — push notification delivery. Push tokens and notification payloads (event titles/reminders).
- RevenueCat — purchase entitlements. App-store purchase status, anonymous app user ID.
By using Fambrain, you understand your data may be processed in Japan and other countries where these providers operate.
Children’s privacy (COPPA)
Fambrain is designed so that children are users of the screen, not users of the service:
- Only adults (18+, or the age of majority in your jurisdiction) can create accounts. Accounts are created and managed by a parent or guardian.
- Children do not register, sign in, or communicate through Fambrain. There are no child accounts.
- A child profile is a parent-managed display label containing only a name, an emoji, and a color. We do not knowingly collect any personal information directly from children under 13, and child profiles contain no persistent online identifiers, contact information, geolocation, or behavioral data.
- The wall-display mode shows the family’s shared schedule on a household device; interaction is limited to viewing and tapping check-offs, which are attributed to the parent-managed profile labels.
Because the only child-related data we hold is what a parent types into a profile label, that data is collected from the parent, not from the child, and the parent controls it entirely: they can edit or delete any profile at any time in the app, and deleting the family account deletes all profiles with it. If we learn we have collected personal information from a child under 13 other than as described above, we will delete it.
Data retention and deletion
- We retain your family’s data for as long as your account is active.
- You can delete individual items (events, tasks, lists, meals, profiles) at any time in the app.
- You can delete your entire family account from Settings. Account deletion removes your family’s content, profiles, devices, and push tokens from our active systems. Encrypted backups may retain residual copies for up to 30 days before being purged.
- Disconnecting Google Calendar deletes stored OAuth tokens and stops sync; previously synced events remain in your Fambrain calendar until you delete them.
Security
- All traffic is encrypted in transit (TLS); data is encrypted at rest by our hosting providers.
- Database access is enforced by Postgres Row Level Security scoped to your family.
- OAuth tokens for third-party calendars are stored server-side with restricted access.
- PIN locks in the app protect display mode on shared household devices; they are a convenience control, not a substitute for device-level security.
No system is perfectly secure, but we design Fambrain to hold as little data as possible in the first place.
Your rights and choices
- Access, correct, or delete your data in the app, or by contacting us (see below).
- Withdraw consent — disconnect calendars, revoke push permission in your device settings, or change your weather location at any time.
- Export — contact us for a copy of your family’s data.
- California (CCPA/CPRA): we do not sell or share personal information for cross-context behavioral advertising. You may request access, correction, or deletion at any time.
- EEA/UK: where the GDPR or UK GDPR applies, we process personal data on the bases of performance of a contract (providing the service you signed up for), consent (optional connections such as Google Calendar and push notifications, which you can withdraw at any time), and legitimate interests (securing and improving the service). You may exercise rights of access, rectification, erasure, portability, restriction, or objection, and you may lodge a complaint with your local supervisory authority.
Changes to this policy
If we make material changes, we will notify you by email and/or an in-app notice before they take effect, and update the “Last updated” date above. Continued use after the effective date constitutes acceptance.
Contact
Privacy questions, requests, or concerns: contact us through the Fambrain app (Settings). If you believe a child has provided us personal information directly, or you want to review or delete information associated with a child profile, reach out and we will act promptly.