Privacy Policy

Famenza is a family scheduling app. We collect only what we need to run the features you use, we don't sell your data, and we put you in control — including one-tap deletion of your account (and, when the last parent leaves, all of your family's data).

When you ask the assistant to read an email, photo, or message, that content is sent to our AI provider (OpenAI, or Anthropic for some requests) solely to extract structured details (like a date or a task). Requests to OpenAI carry its do-not-store setting; requests answered by Anthropic are kept only as Anthropic's commercial terms allow; neither provider trains its models on them. By default, AI suggestions wait for your approval; your family's trust level can let Famenza apply confident additions on its own — each one is logged and can be undone, and deleting or changing what you already have always waits for you. The AI processing switch under Settings → AI assistant turns off the AI features you use in the app: those requests are refused before anything is sent, and the rest of the app keeps working. It also covers two things that run in the background: emails that arrive at your forwarding address are kept unread until AI is turned back on, and the budget's month-end review note is not written.

The budget is optional and only parent users can see it — a child, including one using a parent's device in kid mode, cannot open it. Famenza never asks for your bank log-in and does not connect to your bank. Statements you upload are read and then discarded: we keep the transactions (date, amount, and the description your bank printed) and the file's name, not the file itself. Shop and item names go to our AI provider to suggest categories, and a PDF statement is read in full by AI; CSV and OFX files are read by our own server, not by AI. Money records belong to the family, so they are deleted when the last parent user deletes their account. Details: Household money in the full policy.

We deliberately avoid inferring or learning preferences about sensitive topics (health, religion, politics, finances) and avoid auto-saving sensitive places (like clinics or courthouses). When something is blocked, it's recorded so you can see what was refused. (These filters govern what the app learns about you; the budget, if you use it, does store your spending — see above.)

Data is encrypted in transit. Authentication tokens are stored in your device's secure storage in the phone apps, and in your browser's storage on the web. Access is scoped to your family — other families can't see your data unless you choose to share something with them (a play date group, a watch party, a caregiver link).

You can view, edit, and delete your content at any time. From the app you can delete your account (which removes your user account; the family's shared data goes when the last parent user deletes theirs — that page is readable without signing in, and links through to the control itself), reset your schedule, export your calendar as an .ics file, or download a copy of your family's data as JSON (Settings → “Download my data” — events, routines, tasks, lists, places, preferences, meals and shopping, and household money; not in it yet: coupon savings, gift cards, and co-parenting and care-circle expenses). We keep a short record of each deletion request — your account id, a one-way hash of your email, and the IP address it came from — so we can show it was honored; it holds none of your family's content. For anything else — including a copy of data the export doesn't cover — email support@famenza.com and we'll handle it directly.

Famenza is designed for parents to manage their household. Children appear as roster entries managed by a parent; we don't market to children or build advertising profiles of anyone.

Questions about privacy? Email support@famenza.com.