Privacy Policy

Effective October 2, 2026 · Version 2026-10-02

Fammit is a family organizer made by Caridad Studios LLC ("we", "us"). This policy covers the Fammit app for iPhone, iPad and Android, the web app at fammit.app, the wall display and the home-screen widgets. It says what we keep, why, who helps us run Fammit, and how to delete it. How we handle children's information, and a parent's rights over it, is set out in more detail in our Children's Privacy Notice, which is part of this policy.

The short version: what your family puts in Fammit is there to run Fammit for your family. We don't sell it, we don't show ads, and we don't share it for advertising.

What we keep

Your family and its members

• A parent's email address and password when they create a family. Passwords are stored only as salted hashes, never in readable form.
• Each member's name, role (parent or kid), color, and what they choose to add: a photo, a banner picture, birthday, a short bio, a favorite quote, interests, and a favorite treat.
• A four-digit PIN for each member, used to sign in on a shared device.
• When a grown-up agrees to our terms: that they confirmed they're 18 or older (we check the date of birth they enter but don't keep it), which versions of the documents they agreed to, the consents they gave, and the date, time, IP address and device of the agreement. We keep this as a record of consent.

What the family does in Fammit

• Calendar events, chores, completions, allowance and giving balances, goals, meal plans, recipes, grocery lists, wishlists, feed posts, comments, photos and videos.
• The family's home address, if a parent adds it, to work out drive times to events, when to leave, and the local weather.
• Emails forwarded to the family's private Fammit address, if a parent turns that on, so the dates in them can be offered for the calendar. We keep the dates found and the email's sender and subject, not the whole email.

Wall displays

• A screen a parent pairs (for example a tablet on the wall) shows the family's calendar, chores, routines, meals, lists and photos to anyone who can see it. It signs in with its own display link, which a parent can turn off at any time.

Only if you turn it on

• Health data. If a member turns on health sync, Fammit reads that member's daily totals (like steps, active minutes, distance and sleep) from Apple Health so step and activity goals update themselves. Health data is used only for those goals. It is never used for advertising and never shared with anyone outside the family.
• Contacts. When you invite people to an event, you can pick them from your contacts. Only the people you pick, with the name, phone number or email you choose, leave your phone. The rest of your contacts stay on the device.
• Connected calendars. If you connect a Google, iCloud or Outlook calendar, Fammit reads the calendars you choose and, for the one you choose as the family calendar, adds and updates events. The sign-in token for that account is stored encrypted.
• Grocery store account. If a parent connects a Kroger-family store account (Kroger, Smith's and others), Fammit keeps the chosen store, the products the family picks for list items, and an encrypted sign-in token that lets it add items to the family's cart. Fammit can't see your payment details or place orders; you check out in the store's own app.
• Paying for prints. Calendars, photo books and books paid ahead are paid on Stripe's own checkout page. Stripe takes and keeps the card details under its own privacy policy; Fammit never receives or keeps them, saves no card for later and never charges anyone without them on that page. Fammit keeps what was ordered, the amount and whether it was paid.
• Notifications. If you allow notifications, we keep your device's notification token so we can send reminders and family updates.
• Text messages. A grown-up can link their mobile number in Settings › You › Text Fammit by confirming a code we text to it. We keep that number so they can text things to the family's list and calendar, get replies, and, if they choose it, a morning agenda. A host can text an event invitation to a guest whose number they enter; we keep that number to send the invitation, the guest's reply, one reminder the evening before and the host's updates about that event. Reply STOP to any of our texts to stop them, HELP for help. Message frequency varies, and message and data rates may apply. We don't share mobile numbers, or anyone's consent to receive texts, with third parties or affiliates for their marketing or promotional purposes. Twilio delivers the texts for us (below).

How we use it

Only to run Fammit for your family: to show the family its calendar, chores, lists and feed, to send reminders, to keep members signed in, to answer when you ask the assistant, and to keep Fammit secure and working. We don't build advertising profiles, we don't track you across other apps or websites, and we don't sell personal information.

Who helps us run Fammit

These companies process data for us, only to provide the feature listed:

• Cloudflare: hosting, the database and photo storage.
• Anthropic and OpenAI: the assistant, reading a recipe or schedule from a photo or a forwarded email, turning a voice note into text (only when you leave "Transcribe" on; a voice note posted as audio only is never sent), and making event and category artwork. Only what you send to those features goes to them. They may keep it for a limited period (generally no more than 30 days) for safety and abuse monitoring, and may not use it to train their models. Profile photos are never sent to them.
• Google: address lookup and drive times (Google Maps), and your Google Calendar if you connect it.
• Open-Meteo and MET Norway: the weather forecast, which receives your home's coordinates and nothing else about you.
• Expo, with Apple and Google's notification services: delivering push notifications, with your device's notification token and the notification's text.
• Google (Programmable Search): recipe searches, which send the words you search for.
• Apple and Microsoft: your iCloud or Outlook calendar, if you connect one.
• Kroger: store and product search, and your cart, if you connect a store account.
• GIPHY: GIF search, which sends the words you search for.
• Resend: account emails, such as password resets, consent confirmations and the morning agenda.
• Twilio: sending and receiving text messages, with the phone number and the message.
• Instacart: when you send a list or a recipe to Instacart, the item names and amounts.

Some product links that open from Fammit, like wishlist items and grocery searches, carry an affiliate tag, so the store knows the visit came from Fammit and may pay us a commission if you buy. The store handles your visit under its own privacy policy.

Who in your family sees what

Everything is shared inside the family by design: members see the family calendar, chores and feed. Parents can see and manage kids' profiles. If you connect with relatives, they see only what you choose to share with them. Photos and videos open through signed links that can't be guessed and aren't listed anywhere. When a parent posts a photo that says where it was taken, we keep that place with the post (the spot, and its town, state and country) for the household to see; a tap opens it in Maps. We never read it from a child's post. Connected relatives see the town only, never the spot, and it's never on a page of posts. If you share an event's invite link, anyone with that link can see the event and its photos. If a parent sends a page of posts, anyone with that link can see those posts, with their photos, videos, voice notes and comments, until the page expires or is stopped. If the parent chooses to let a video play in the message, the recipient's messaging app (iMessage) keeps a copy of that video in the conversation, and stopping the page doesn't remove it. Children appear on it by first name only, and where a photo or video was taken is removed. We keep a record of the parent's confirmation that they're a parent or guardian of the children on it.

Children

Kids use Fammit inside a family that a parent creates and manages. Accounts are opened only by grown-ups who confirm they're 18 or older; a parent adds each child's profile, decides what it holds, and consents to our handling of the child's information before we collect it. We don't knowingly collect personal information from a child except through a family a parent has set up, we don't advertise to children, and we never use children's information to train AI models. A parent can review, change or delete a child's information at any time in the app, or by writing to us. The Children's Privacy Notice explains this in full.

If you believe a child has given us information without a parent's consent, write to [email protected] and we'll delete it.

Google user data

Fammit's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Calendar data from Google is used only to show and keep the family's calendar in Fammit. It isn't used for advertising, isn't sold, and isn't used to train AI models, and no person at Fammit reads it except with your permission, for security, or where the law requires.

How long we keep it, and deleting it

• We keep a family's information while the family uses Fammit. A family that hasn't been used for 24 months may be deleted after we email the family's address.
• Server logs are kept for no more than 30 days. Records of agreement and consent are kept while the family exists and for as long afterward as the law requires.
• Disconnecting a calendar or store account in Settings deletes its sign-in token.
• A parent can delete posts, events and other items in the app. To remove a person's profile and everything about them, write to us.
• To delete your whole family and everything in it, write to [email protected] from the family's email address. We delete it within 30 days, apart from anything the law requires us to keep.

On this device

The app and fammit.app keep your sign-in, which house this device belongs to and a few display preferences in the device's own storage (the secure store on a phone, local storage in a browser). They're needed to keep you signed in and aren't used for tracking. We don't use advertising or analytics cookies.

Your rights

Wherever you live, you can ask us for a copy of your information, to correct it, or to delete it, and we'll answer within 30 days. Residents of states with consumer privacy laws (such as California, Colorado, Connecticut, Utah, Virginia and Texas) have these rights by law, along with the right to opt out of the sale of personal information, targeted advertising and profiling. We don't do any of those, so there's nothing to opt out of. We won't treat you differently for using your rights. To make a request, write to [email protected] from your family's email address; we'll verify the request comes from you, and you can appeal a decision by replying to our answer. An authorized agent can make a request for you with your signed permission.

Security

Everything travels over encrypted connections. Sign-in tokens for connected accounts are encrypted before they're stored, passwords are stored only as salted hashes, and photos open only through signed links. No system is perfectly secure, but we work to keep your family's information safe and to tell you promptly if something goes wrong.

Changes

If we change this policy in a way that matters, we'll say so in the app before the change takes effect, and ask grown-ups to agree again where the change needs it. The date at the top shows the latest version.

Contact

Caridad Studios LLC · 1475 E Waterfall Way, Fruit Heights, UT 84037 · (801) 436-7768 · [email protected]