Privacy Policy

Family App is a private, self-hosted household coordination app. It is intended for use by invited members of a single household or family group to manage calendars, tasks, shopping lists, notes, and related home information.

This policy explains how Family App handles personal information and Google user data when Google Calendar sync is enabled.

Family App may store account details such as names, email addresses, profile assignments, household roles, login sessions, passkey registration records, security audit logs, tasks, lists, notes, and calendar events created or synced inside the app.

The app runs on the household's own server environment. Data is stored in the app's local database unless the household administrator configures an external integration.

When a household administrator connects Google Calendar, Family App requests access to identify the connected Google account, read the list of available calendars, read events from calendars selected for sync, and create or update events where two-way sync is enabled.

Synced Google Calendar data may include calendar names, calendar identifiers, event titles, descriptions, locations, start and end times, all-day status, event status, update metadata, and sync tokens. Family App also stores the mapping between a Google calendar and the Family App calendar or family profiles chosen by the household administrator.

Google refresh tokens are stored only so the server can continue syncing the calendars chosen by the household. Tokens are encrypted before being saved by the app.

If you turn on My location in the weather card, your browser asks for permission to use the device location. Family App rounds the coordinates to five decimal places and sends them to the household server to select nearby Singapore weather forecasts and NEA station readings. The server stores each accepted weather-location observation together with the signed-in account, reported accuracy, public IP, browser agent, and one matching timestamp. This history is visible only to household administrators. Coordinates are not sent to NEA. The on/off preference is stored in that device's browser and can be turned off in the weather card.

Family App uses household data to provide the app's core features, including displaying calendars, syncing selected Google Calendar events, assigning events to profiles, managing household tasks and notes, authenticating users, and keeping basic security logs.

Google user data is used only to provide Google Calendar sync and related calendar display features requested by the household.

Family App does not sell Google user data or household information. Google Calendar data is not shared with advertising services or data brokers. Data is visible only to authorized household users according to the app's local account and role configuration.

Family App may send calendar changes back to Google Calendar when a household administrator enables two-way sync for a selected Google calendar.

Family App's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Household data remains in the local Family App database until an authorized household administrator deletes it, archives it, removes a connected account, or removes the app's local database.

Disconnecting a Google account stops future sync for that account. Existing events already imported into Family App may remain in the local calendar until deleted or cancelled by an authorized household user.

Family App includes local authentication, session cookies, CSRF protection, passkey support, role-based authorization, audit logs, and encrypted storage for Google refresh tokens. No system can guarantee absolute security, so the household administrator should keep the server, router, Docker, Node.js runtime, and Google OAuth credentials protected and up to date.

For privacy questions or requests, contact the Family App household administrator at admin@lapally.ddns.net, or use the developer contact email listed on the Google OAuth consent screen for this app.