Privacy policy

Who is responsible

Familial is operated by Brubytes, based in Belgium. For privacy questions or requests, email [email protected].

Information in the app

Account and profile information may include your email address, sign-in identity, display name, profile photo, and family membership. Everyone, including grandparents, signs in with their own account and has a role in each family they belong to: owner, relative, or grandparent.

When you use Familial, it processes the photos, voice recordings, reactions, and other moment information you share, along with check-in times, help requests, and delivery or viewing information. Device notification tokens are used to deliver push notifications.

If you grant location permission, a location can be attached to a check-in or help request. You can send a check-in without location access. Camera, photo-library, and microphone access support the features you choose to use. You can manage device permissions in your device settings.

Why information is used

Information is used to sign you in, connect your family, share and play moments, show check-ins, deliver notifications, and protect accounts against misuse.

Who can receive it

Your family can access shared information according to family membership and the moment’s sharing settings. Private moments are intended for their sender and the grandparents in the family, and are otherwise viewed by Brubytes only if reported, as described under “Reports, blocking and moderation”. Anyone who has your family code can join the family and see what it shares. Keep the family code and invitation links private.

Familial uses a Supabase project hosted in Europe for account, database, and media services, Firebase Cloud Messaging for push notifications, and Cloudflare Turnstile for sign-in abuse protection, and Resend to send operator alert emails about new reports. Those emails contain no content or names. When a family member views a check-in map, their device requests map tiles from the OpenStreetMap Foundation’s tile servers, which receive the viewer’s IP address and the requested map area. To show a readable address, coordinates are sent to the device’s platform geocoding service (Apple on iOS, Google on Android). Apple or Google may also process information when you choose their sign-in service. Hosting the Supabase project in Europe does not mean all providers process all information exclusively in Europe. Contact Brubytes for information about the providers involved in processing your data.

Reports, blocking and moderation

When a moment or a person is reported, Brubytes may view the reported item, including a private moment, to review it. Brubytes does not otherwise review private moments.

A report records the reporter, the reported moment or person, the reason, the time, and the outcome. Reports, and the records Brubytes keeps of moderation actions such as removing content or suspending an account, are kept for up to 12 months and then deleted. While a report is being reviewed, Brubytes may keep the reported item, such as the photo or voice recording, until the review finishes, even if its author has deleted it or deleted their account. It is then deleted. The alert email sent to the operator for each new report carries only a report reference, whether a moment or a person was reported, the reason, and the time.

Blocks are stored for as long as your account exists. When you accept the terms in the app, the version you accepted and the time are recorded.

This website

The website itself does not include analytics, advertising trackers, contact forms, or tracking cookies. Images are served with the website. Email links open your own email application.

The website is hosted on Cloudflare Pages. Cloudflare processes technical request information, such as IP addresses, requested URLs, browser information, and access times, to deliver the website and protect it against abuse. Cloudflare operates a global network, so technical information may be processed outside your country. We do not add visitor analytics or advertising trackers.

Retention and deletion

The app provides controls to delete moments, location history, and accounts. Deleting an account removes that account’s check-ins, location history and moment-viewing marks; the family and moments shared by other family members remain.

Location-history records older than 90 days are removed by scheduled daily maintenance. Photos and voice recordings are retained to make shared moments available until deleted through the service or as part of account or family deletion. Media-file deletion is processed asynchronously, so removal from storage can follow removal from the app. Deletion from the app does not necessarily remove copies in provider backups or technical logs at the same time. Contact Brubytes for help with deletion.

Your choices and rights

Depending on the law that applies to you, you may have rights to access, correct, erase, restrict, or receive a portable copy of your information, and to object to certain processing. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.

Send requests to [email protected]. We may need to verify your identity before handling a request. You may also lodge a complaint with your local data protection authority.

People appearing in your moments

Only share photos, recordings, and information you are entitled to share. Take particular care with children’s information and with anyone who cannot make their own privacy choices. Familial is intended for people aged 16 and over. If you help someone use the app, respect their choices and only act with their permission or appropriate legal authority.

Changes to this notice

When this notice changes, its updated date will change. We will explain material changes to how information is handled before they take effect.

Contact

Brubytes
[email protected]