Fam360
Fam360
Privacy Policy
Who this is from
Fam360 is published by legal entity — replace before submission, registered in country — replace before submission. In this policy, "we" and "us" mean that publisher, and "you" means the person using the app.
For anything in this document, including a request to see or delete your data, write to support@REPLACE-ME.invalid.
The short version
Fam360 exists to show a family where its members are and to raise an alarm quickly. To do that it stores your location, your account details, and the things your family creates together — places, events, alerts.
Your location is visible to the members of families you have joined, and to nobody else. It is not sold, not shared with advertisers, and not used to build a profile of you. The app carries no advertising SDK and no third-party analytics or crash-reporting SDK.
You can stop sharing at any time without leaving your family, and you can delete your account from inside the app.
What Fam360 collects
Your account
Your name, email address, and whether that email has been verified. If you sign in with Google, your name, email address and Google profile photo come from Google. If you sign in with an email address and password, authentication is handled by Firebase Authentication and we never see your password.
The personal details form also asks for your date of birth, and optionally your phone number, a profile photo and a short status message. A photo you choose yourself is cropped on your device and stored with your profile record.
Location
When location sharing is on, the app records your latitude and longitude, your device's battery level, the name of a saved place if you are at one, the time of the reading, and how long you have been in roughly the same spot.
Fam360 asks for background location. That is what keeps the map honest when the app is closed — a family map that only updates while someone is staring at their phone is not much use in the moment it matters. iOS shows you a reminder of this permission periodically, and you can withdraw it at any time in Settings.
The app also records whether your operating system currently grants location permission, so that other members see "location is off for this person" instead of a stale pin they might mistake for a current one.
Your family
The family's name, who created it, who is in it, each member's role (owner, admin or member), the relationship label chosen for them, when they joined, and the invite code they joined with. Invite codes themselves are stored so they can be checked and expired.
What your family creates
- Saved places — a name and a location for Home, School, Work and so on.
- Place alerts — the rules for being told when someone arrives at or leaves a place.
- Calendar events — titles, times and details you add to the shared family calendar.
- SOS alerts — your location, battery level, the time, and any message you typed, sent to the family.
- Activity records — a feed of what happened in the family: who joined, who arrived somewhere, which alert was resolved.
Device and delivery
A push notification token for each device you sign in on, so alerts can reach you. Whether you are currently online, and when that last changed — this is held in a separate presence database keyed only by your user id.
Subscription
Whether your family has an active Fam360 subscription, which product it is, which store it came from, and when it expires. Purchases are processed by Apple and recorded through RevenueCat. We never receive your card details.
What it never collects
- No advertising identifier, and no advertising SDK of any kind.
- No third-party analytics or crash-reporting SDK. We do not measure how you use the app.
- No health or medical information. The app has no field for it.
- No contacts, no photo library beyond the single picture you choose as an avatar, no microphone, no camera.
- No browsing history, and no data from other apps on your phone.
- This website sets no cookies and makes no third-party requests. Its fonts are served from this domain, so no font CDN sees your visit.
How location is shared
Location sharing has four modes, and you choose yours:
| Mode | What happens |
|---|---|
| Always | Your position updates for your family in the background and while you use the app. |
| Family only | Your position is shared with families you have joined, on the same terms. |
| Emergencies only | Your position is attached to an SOS alert you send, and is not shown on the day-to-day map. |
| Off | Your position stops going anywhere. |
A member of a family can read the positions of the other members of that family. That is the product. Two safeguards keep it to exactly that and no wider: the app filters the map down to confirmed members, and the database rules independently refuse a write unless a membership record exists for the family being written to. Neither trusts a claim the writing device makes about itself.
When you leave a family, or are removed from it, your membership record is deleted and your position stops being readable by that family.
Why we may hold it
For anyone in the UK or the European Economic Area, the lawful bases under the UK and EU GDPR are:
- Performance of a contract — your account, your family membership, the shared map, alerts and the calendar. Without these there is no app to provide.
- Consent — location access and push notifications, both of which the operating system asks you for separately and both of which you can withdraw at any time in iOS Settings without deleting your account.
- Legitimate interests — keeping the service secure, preventing abuse of invite codes, and fixing faults.
- Vital interests — sending an SOS alert with your location to your family, where that is needed to protect someone's life.
Who else touches it
We use a small number of service providers. They process data on our instructions and are not permitted to use it for their own purposes.
| Provider | What it does |
|---|---|
| Google (Firebase) | Authentication, the main database holding accounts, families, locations, places, events and alerts, and the presence database. |
| Google Sign-In | Optional sign-in. Google confirms who you are and passes us your name, email and profile photo. |
| Expo | Push notification delivery. Alert text and your device's push token pass through Expo's push service on the way to Apple. |
| Apple | Push notification delivery to your device, and subscription purchases through the App Store. |
| RevenueCat | Records which family has an active subscription. Receives a purchase identifier, not your card details. |
| Render | Hosts the small server that checks subscription state and sends activity notifications. |
We do not sell personal information, and we do not share it for cross-context behavioural advertising. Under the California Consumer Privacy Act, we have not sold or shared personal information in the preceding twelve months.
How long it is kept
- Your position is a single current record per person per family. A new reading replaces the previous one — the app does not keep a location history you can scroll back through.
- Invite codes expire seven days after they are created.
- Alerts, calendar events, saved places and activity records stay until you or your family delete them, or until the family is deleted.
- Your account and profile stay until you delete your account.
Your rights and controls
Most of what you might want to do is a control inside the app:
- Stop sharing your position — set sharing to Off, or revoke location permission in iOS Settings. You stay in your family either way.
- Stop notifications — turn them off for Fam360 in iOS Settings.
- Leave a family — your membership record is deleted and your position stops being readable by that family.
- Delete your account — this is a button in the app, not an email you have to send and then chase.
Beyond that, depending on where you live you have the right to ask for a copy of your data, to have it corrected, to have it deleted, to restrict or object to how it is used, and to have it sent to another service. California residents additionally have the right to know what is collected and to not be discriminated against for exercising these rights.
Write to support@REPLACE-ME.invalid and we will answer within one month. If you are in the UK or EEA and are not satisfied with our answer, you may complain to your national data protection authority.
Children
Fam360 is designed for a family to use together, and a family may well include children. Accounts are intended to be created and managed by an adult. The app is not directed at children under 13, and we do not knowingly collect personal information from a child under 13 who is using it without a parent or guardian having set the account up and agreed to this policy.
A parent or guardian who set up a child's account can see what is held about that child in the app, change it, stop the child's location being shared, or delete the account outright. If you believe a child under 13 has an account that no parent or guardian agreed to, write to support@REPLACE-ME.invalid and we will delete it.
Security
Traffic between the app and our providers is encrypted in transit, and the data is encrypted at rest by the providers named above. Who may read or write each record is enforced by server-side database rules rather than by the app alone, so a modified client cannot talk its way into another family's data.
Subscription state is writable only by our server, never by an app on a phone. No security is perfect, and we will not pretend otherwise — if something goes wrong that affects you, we will tell you.
International transfers
Our providers operate globally, and your data may be processed on servers outside your country, including in the United States. Where data leaves the UK or the EEA, it is covered by the transfer mechanisms those providers offer, such as the European Commission's standard contractual clauses.
Changes
If this policy changes, the date at the top of this page changes with it. If a change materially affects how your data is used, we will say so in the app rather than rely on you re-reading this page.
Contact
legal entity — replace before submission
support@REPLACE-ME.invalid
Questions about using the app are answered on the support page.