Fam360
Fam360
Privacy Policy
Who this is from
Fam360 is published by Sarad Chhetri, based in Nepal. In this policy, "we" and "us" mean that publisher, and "you" means the person using the app.
For anything in this document, including a request to see or delete your data, write to fam360@woozlyai.app.
The short version
Fam360 exists to show a family where its members are and to raise an alarm quickly. To do that it stores your location, your account details, and the things your family creates together: places, events, alerts.
Your location is visible to the members of families you have joined, and to nobody else. It is not sold, not shared with advertisers, and not used to build a profile of you. The app carries no advertising SDK and no crash-reporting SDK. It does record which screens get opened, against an account id and never your name, email or position, so we can see which parts of the app are used.
You can stop sharing at any time without leaving your family, and you can delete your account from inside the app.
What Fam360 collects
Your account
Your name, email address, and whether that email has been verified. If you sign in with Google, your name, email address and Google profile photo come from Google. If you sign in with Apple, Apple passes us your name and either your email address or the relay address you chose instead of it. That relay is all we ever see. If you sign in with an email address and password, authentication is handled by Firebase Authentication and we never see your password.
The personal details form also asks for your date of birth, and optionally your phone number, a profile photo and a short status message. A photo you choose yourself is cropped on your device and stored with your profile record. If you add a phone number, other members can use it: the SOS screen's Text family button opens your phone's Messages app addressed to the members who have one. That message is sent by your phone and your carrier, not by us.
Location
When location sharing is on, the app records your latitude and longitude, your device's battery level, whether it is charging and whether Low Power Mode is on, the name of a saved place if you are at one, the time of the reading, and how long you have been in roughly the same spot. Battery and Low Power Mode are what let the app tell your family "phone may have died" instead of leaving them guessing.
Each reading also carries a random identifier for the install of the app that wrote it, which the database rules use to check the reading came from your own device.
Motion, driving and crash detection
If you allow Motion & Fitness, your phone works out whether you are driving, cycling, walking or still. That result is stored with your position, along with your current speed while you drive or cycle and your direction of travel, so your family sees "Driving" and how fast, and nothing once you stop. Only the current value is kept. A new reading replaces it, and there is no speed or driving history. The raw motion sensor readings never leave your phone.
If you turn on crash detection, the app watches the motion sensors on your phone while you drive. Whether it is switched on is stored with your position so your family can see who it covers. If it sends an SOS for you, that alert also records that it came from a possible crash and your fastest speed in the seconds before it.
Fam360 asks for background location. That is what keeps the map honest when the app is closed. A family map that only updates while someone is staring at their phone is not much use in the moment it matters. iOS shows you a reminder of this permission periodically, and you can withdraw it at any time in Settings.
The app also records whether your operating system currently grants location permission, so that other members see "location is off for this person" instead of a stale pin they might mistake for a current one.
Your family
The family's name, who created it, who is in it, each member's role (owner, admin or member), the relationship label chosen for them, when they joined, and the invite code they joined with. Invite codes themselves are stored so they can be checked and expired.
What your family creates
- Saved places: a name and a location for Home, School, Work and so on.
- Place alerts and reminders: the rules for being told when someone arrives at or leaves a place, and reminders set for a time, which our server sends when they fall due.
- Calendar events: titles, times and details you add to the shared family calendar.
- SOS alerts: your location, battery level, the time, and any message you typed, sent to the family.
- Activity records: a feed of what happened in the family: who joined, who arrived somewhere, which alert was resolved, and "Are you OK?" check-ins with their replies.
Device and delivery
A push notification token for each device you sign in on, so alerts can reach you. Whether you are currently online, and when that last changed. This is held in a separate presence database keyed only by your user id.
If you add the Fam360 widget to your Home Screen, your family's names, photos and last known places are copied to storage on your phone that only Fam360 and its widget can read. That copy never leaves the phone and is cleared when you sign out. While an SOS you sent is active, a Live Activity on your own Lock Screen shows it, using the same data the alert already carries.
Subscription
Whether your family has an active Fam360 subscription, which product it is, which store it came from, and when it expires. Purchases are processed by Apple and recorded through RevenueCat. We never receive your card details.
Product analytics
Which screens of the app you open and when (the map, the calendar, the SOS screen, sign-up and so on), and when the app is installed, updated, opened or sent to the background, along with your device model, iOS version, app version, time zone and language. Once you are signed in these are tied to your account id, a random string that means nothing outside Fam360. Analytics never receive your name, your email address, your position, or anything you or your family type into the app. They go to PostHog, in its EU region.
The server that checks subscriptions and sends notifications also sends its operational logs to PostHog. Those carry account and family ids and details of each request, such as its path and whether it succeeded. No names, messages or locations.
What it never collects
- No advertising identifier, and no advertising SDK of any kind.
- No crash-reporting SDK, and no analytics that follow you across other apps or websites.
- No health or medical information. The app has no field for it, and the Motion & Fitness readings described above stay on your phone; only the result ("Driving") is shared.
- No contacts, no photo library beyond the single picture you choose as an avatar, no microphone, no camera.
- No browsing history, and no data from other apps on your phone.
- This website sets no cookies and makes no third-party requests. Its fonts are served from this domain, so no font CDN sees your visit.
How location is shared
Location sharing is either on or paused, and you switch it under Settings → Share my location:
| Setting | What happens |
|---|---|
| On | Your position updates for the families you have joined while you use the app, and in the background if you allowed "Always" location access. |
| Paused | Your position stops going anywhere. Your stored position is deleted, place alerts about you stop working, and your family sees in Activity that you paused sharing. |
| Sending an SOS | Your current position is attached to the SOS, even while sharing is paused, because sending one is a request for your family to find you. |
A member of a family can read the positions of the other members of that family. That is the product. Two safeguards keep it to exactly that and no wider: the app filters the map down to confirmed members, and the database rules independently refuse a write unless a membership record exists for the family being written to. Neither trusts a claim the writing device makes about itself.
When you leave a family, or are removed from it, your membership record is deleted and your position stops being readable by that family.
Why we may hold it
For anyone in the UK or the European Economic Area, the lawful bases under the UK and EU GDPR are:
- Performance of a contract: your account, your family membership, the shared map, alerts and the calendar. Without these there is no app to provide.
- Consent: location access, Motion & Fitness and push notifications, all of which the operating system asks you for separately and both of which you can withdraw at any time in iOS Settings without deleting your account.
- Legitimate interests: keeping the service secure, preventing abuse of invite codes, fixing faults, and understanding which parts of the app are used through the product analytics described above.
- Vital interests: sending an SOS alert with your location, including one crash detection sends, to your family, where that is needed to protect someone's life.
Who else touches it
We use a small number of service providers. They process data on our instructions and are not permitted to use it for their own purposes.
| Provider | What it does |
|---|---|
| Google (Firebase) | Authentication, the main database holding accounts, families, locations, places, events and alerts, and the presence database. |
| Google Sign-In | Optional sign-in. Google confirms who you are and passes us your name, email and profile photo. |
| Expo | Push notification delivery. Our server hands alert text and your device's push token to Expo's push service, which passes them to Apple. Your phone never sends a push itself. |
| Apple | Sign in with Apple, push notification delivery to your device, subscription purchases through the App Store, and Apple Maps: the map, place search, addresses and driving routes. For those, Apple receives the coordinates or search text being looked up, without your name or account id. |
| RevenueCat | Records which family has an active subscription. Receives a purchase identifier, not your card details. |
| Render | Hosts the small server that checks subscription state, sends activity notifications and sends reminders when they fall due. |
| PostHog | Product analytics and server logs, held in PostHog's EU region. Receives screen views, device details and account ids, not names, email addresses, positions or anything you type. |
We do not sell personal information, and we do not share it for cross-context behavioural advertising. Under the California Consumer Privacy Act, we have not sold or shared personal information in the preceding twelve months.
How long it is kept
- Your position is a single current record per person per family. A new reading replaces the previous one. The app does not keep a location history you can scroll back through.
- Invite codes expire seven days after they are created.
- Alerts, calendar events, saved places and activity records stay until you or your family delete them, or until the family is deleted.
- Your account and profile stay until you delete your account. Deleting it removes your profile, your sign-in, your location, the places, alerts, events, invite codes and activity records you created, the alerts others set about you, and your subscription record at RevenueCat, and takes you out of every family. A family you created passes to its longest-standing member, or is deleted with everything in it if nobody else is in it. Deleting your account does not cancel an App Store subscription; cancel that in your Apple ID settings.
- Analytics events and server logs are kept for the retention period of our PostHog plan and then removed. Deleting your account does not remove them automatically; email us and we will delete the analytics tied to your account id.
Your rights and controls
Most of what you might want to do is a control inside the app:
- Stop sharing your position: turn off Settings → Share my location, or revoke location permission in iOS Settings. You stay in your family either way.
- Stop notifications: turn them off for Fam360 in iOS Settings.
- Leave a family: your membership record is deleted and your position stops being readable by that family.
- Delete your account: Settings → Delete account (also on the subscription screen). It is a button in the app, not an email you have to send and then chase.
Beyond that, depending on where you live you have the right to ask for a copy of your data, to have it corrected, to have it deleted, to restrict or object to how it is used, and to have it sent to another service. California residents additionally have the right to know what is collected and to not be discriminated against for exercising these rights.
Write to fam360@woozlyai.app and we will answer within one month. If you are in the UK or EEA and are not satisfied with our answer, you may complain to your national data protection authority.
Children
Fam360 is designed for a family to use together, and a family may well include children. Accounts are intended to be created and managed by an adult. The app is not directed at children under 13, and we do not knowingly collect personal information from a child under 13 who is using it without a parent or guardian having set the account up and agreed to this policy.
Analytics are turned off for anyone under 16. When the birthday on an account says its holder is under 16, the app stops sending analytics as soon as they sign in, and never links the few events from before sign-in (such as opening the app) to their account.
A parent or guardian who set up a child's account can see what is held about that child in the app, change it, stop the child's location being shared, or delete the account outright. If you believe a child under 13 has an account that no parent or guardian agreed to, write to fam360@woozlyai.app and we will delete it.
Security
Traffic between the app and our providers is encrypted in transit, and the data is encrypted at rest by the providers named above. Who may read or write each record is enforced by server-side database rules rather than by the app alone, so a modified client cannot talk its way into another family's data.
Subscription state is writable only by our server, never by an app on a phone. No security is perfect, and we will not pretend otherwise. If something goes wrong that affects you, we will tell you.
International transfers
Our providers operate globally, and your data may be processed on servers outside your country, including in the United States. Where data leaves the UK or the EEA, it is covered by the transfer mechanisms those providers offer, such as the European Commission's standard contractual clauses.
Changes
If this policy changes, the date at the top of this page changes with it. If a change materially affects how your data is used, we will say so in the app rather than rely on you re-reading this page.
Contact
Sarad Chhetri
fam360@woozlyai.app
Questions about using the app are answered on the support page.