← Back to FamFlow365

Privacy Policy

Last updated: October 23, 2026

FamFlow365 ("we," "our," or "the App") is an AI-powered family management assistant that helps working parents plan smoother days, stay on top of schedules, simplify meals and routines, and reduce the mental load. This Privacy Policy explains how we collect, use, store, share, and protect your information - including data accessed through Google APIs.

1. Google User Data We Access

When you connect your Google account, FamFlow365 requests access to the following data through Google APIs:

Google Calendar (read-only):

  • Calendar event titles, dates, times, and locations
  • Event descriptions and attendee lists
  • Recurring event patterns

Gmail (read-only):

  • Email subject lines
  • Email sender names and addresses
  • Email date and time stamps
  • Email body text snippets (first ~200 characters)

We access this data solely for the purpose of providing the app's core features described below. We do not access email attachments, draft emails, contacts, Google Drive files, Google Photos, or any other Google services beyond Calendar and Gmail.

2. How We Use Google User Data

Google user data is used exclusively to provide and improve the following user-facing features within FamFlow365:

  • Morning Briefing: Calendar events and email snippets are analyzed to generate a daily summary of your schedule, potential conflicts, and items needing attention.
  • Schedule Conflict Detection: Calendar events are compared to identify overlapping commitments and timing gaps (e.g., drop-off and pickup conflicts).
  • School Email Detection:Gmail messages from known school-related senders are identified and surfaced so you don't miss important updates.
  • RSVP Tracking: Emails containing event invitations are detected so you can track pending responses.
  • Bill & Payment Reminders: Emails from known billing senders are identified to surface upcoming due dates.
  • Action Item Detection: Emails requiring follow-up actions are identified and presented as a checklist.
  • Weekly Planning: Calendar events across the upcoming week are analyzed to provide a busyness overview, key deadlines, and preparation suggestions.

Google user data is not used for advertising, marketing, market research, or any purpose unrelated to the user-facing features described above.

3. How We Share Google User Data

Google user data is shared with the following third-party service solely to provide the app's core AI-powered features:

  • Anthropic (Claude API):Calendar event data and email snippets are sent to the Anthropic Claude API for natural language processing. This processing generates the briefings, conflict alerts, and action items you see in the app. Anthropic's terms of service confirm that data sent through their API is not used to train their AI models. See Anthropic's Terms of Service.

We do not sell, transfer, or disclose Google user data to any other third parties, including data brokers, advertisers, or analytics providers.

We do not transfer or share aggregated or anonymized Google user data with any third party for any purpose other than providing or improving user-facing features of this application.

4. How We Protect Google User Data

  • Encryption in transit: All data transmitted between your browser, our servers, and third-party APIs is encrypted using HTTPS/TLS.
  • Database security: User data is stored in Supabase PostgreSQL with Row Level Security (RLS) policies, ensuring each user can only access their own data.
  • Authentication: User authentication is handled through Supabase Auth using OAuth 2.0, with tokens stored securely in HTTP-only cookies.
  • Minimal data storage: We do not store raw email content in our database. Email data is processed in-memory and only the AI-generated summaries (briefings, action items, detected bills) are cached temporarily to improve load times.
  • Access controls:Only the application's server-side API routes can access Google user data. There is no admin dashboard or employee access to individual user data.

5. Data Retention & Deletion

Retention:

  • Google OAuth tokens: Stored securely in our database for the duration of your account. Tokens are refreshed automatically and revoked when you disconnect your Google account or delete your FamFlow365 account.
  • Cached API responses: AI-generated summaries from email and calendar data are cached for 3-6 hours to improve performance, then automatically deleted.
  • Family profile data:Information you manually enter (children's names, schools, family notes) is stored for the duration of your account.
  • Raw Google data: Raw email content and calendar event data are processed in-memory and are not persisted to our database beyond the temporary cache described above.

Deletion:

  • You can disconnect your Google account at any time from the Settings page, which immediately revokes our access to your Google data and deletes stored OAuth tokens.
  • You can request complete account deletion by emailing support@famflow365.com. Upon request, all your data - including family profiles, cached responses, and authentication tokens - will be permanently deleted within 30 days.
  • Cached API responses are automatically purged after their TTL (3-6 hours) expires, regardless of account status.

6. Google API Services - Limited Use Disclosure

FamFlow365's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

  • We only use Google user data to provide or improve user-facing features that are prominent in the application's user interface.
  • We do not use Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
  • We do not allow humans to read Google user data unless we have your affirmative agreement, it is necessary for security purposes or to comply with applicable law, or the data has been aggregated and anonymized and used for internal operations.
  • We do not transfer or sell Google user data to third parties, except as necessary to provide or improve user-facing features, to comply with applicable laws, or as part of a merger or acquisition with user notice.

7. AI/ML Model Training Restrictions

FamFlow365 uses the Anthropic Claude API to process Google Workspace user data (Calendar and Gmail) for the sole purpose of generating personalized briefings and insights for the individual user.

  • Google user data is not used to develop, improve, or train generalized AI/ML models. Processing is limited to generating personalized outputs for the specific user whose data is being analyzed.
  • Google user data is nottransferred to any third-party AI/ML service that uses the data to train their models. Anthropic's API terms confirm that data submitted through their API is not used for model training.
  • The use of raw or derived user data received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. Other Data We Collect

In addition to Google user data, FamFlow365 collects:

  • Account information: Your name and email address from your Google or Microsoft account, used for authentication and to personalize your experience.
  • Family profile data:Children's names, ages, schools, activities, and family notes that you voluntarily enter to help the AI provide better context-aware suggestions.
  • Weather data: Your approximate location (city-level) is used to fetch local weather for your morning briefing via the OpenWeatherMap API.

9. Family Sharing

FamFlow365 allows you to invite family members or caregivers via an invite code. Shared family members can see shared calendar summaries and family profile information. Each user's email content and personal Google data remains private and is never shared with other family members within the app.

10. Children's Privacy

FamFlow365 is designed for use by parents and adult caregivers. We do not knowingly collect personal information from children under 13. The children's names and school information stored in family profiles are entered by the parent or guardian and are used solely to provide contextual AI assistance to that parent.

11. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and all associated data
  • Disconnect your Google account at any time, immediately revoking our access
  • Revoke FamFlow365's access to your Google account directly through your Google Account permissions page

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of FamFlow365 after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise any of your rights, please contact us at: support@famflow365.com

© 2026 FamFlow365. All rights reserved.