Privacy Policy

Family Vault is a private space for your family to keep the people, dates, and details that matter to you. Here's the short version: we don't track you, we don't sell anything, and we don't advertise. The app stores what your family enters, plus the few technical pieces needed to run your account, securely, and shows your family's information only to the family members you've connected to.

We don't track you

Family Vault has no interest in harvesting data about you. There is no tracking, no analytics profile of you, and no advertising. The information in the app is what you and your family choose to enter: names, how people are related, birthdays, household details such as an address, a temporary address someone is staying at, phone numbers and emails people add to their own profiles, profile photos, events, RSVPs, polls, and poll answers. You put it in; you can take it out. If you scan a paper invitation with the camera, it is read on your device and the picture is not sent to us.

Your account

To sign you in, we keep the email address you signed up with, stored encrypted, and use it only to sign you in and to send you account emails such as a verification code or a password reset. We keep a scrambled form of your password that cannot be turned back into the password itself. To deliver those emails, your address is passed to the service that sends them for us, which uses it for nothing else. We never use your email address for marketing and never share it with anyone else.

Where your family's information is kept

What your family enters is stored securely in Apple's CloudKit, on Apple's servers, inside a container dedicated to this app. Syncing between your devices runs through our service on Cloudflare, and profile photos are kept in Cloudflare storage under our own domain. Everything is encrypted, both as it travels and where it is kept, which makes it entirely unreadable to anyone who intercepts it or gets hold of where it is stored, and the app's data on your device is protected by your device's own encryption. We never sell your information, never use it for advertising, and never hand it to anyone outside your family.

Who can see what

One simple rule: a person or household is visible only to the family members you have connected to. Every record carries the list of accounts allowed to see it, and our service enforces that list on every sync. Someone outside your family cannot see your family's information.

How your device is verified

To stop anyone from impersonating your family's accounts, the app uses your device's built-in app verification (on Apple devices, App Attest) to confirm each request comes from a genuine copy of Family Vault. This protects access to your family's information. It is not used to track you.

Notifications

If you turn on notifications, we keep a device token so we can send the reminders you asked for, such as a family birthday, and alerts about activity you're part of. With it we keep your device's time zone and language, so a reminder arrives in the morning where you are and in your language, and the kinds of notifications you've turned off. A notification may name the family member it is about by first name, such as whose birthday it is, so it can appear on your lock screen.

Reporting and safety

If something another family member added seems inappropriate, you can report it or hide that person from your own view, right inside the app. Reports come to us so we can review and act on them. The list of people you've hidden is kept with your account and applies only to your own view.

If the app crashes

If you've chosen in your device's settings to share crash and analytics data with app developers, your device sends us a standard technical report when the app crashes, so we can find and fix the problem. These reports describe what the app was doing, not who you are, and are not tied to your account.

Deleting your information

You can delete your account from within the app at any time. Your sign-in, your email address and your password are removed. Because a family's records are shared, you stay in your family as a name and birthday only: your phone number, email, photo, and any temporary address are cleared, and your home's address is cleared too if nobody else with an account lives there. Removed records are marked for deletion and cleared from our service on a rolling basis. Events, polls, and answers you shared with relatives may remain visible to them.

Children

Family Vault is for a household to keep information about its own members, including children, at the discretion of the adults who manage the household. It is not directed at children as independent users.

Changes

If this policy changes in a meaningful way, we'll update the date above. Continuing to use the app after an update means you accept the revised policy.

Contact

Questions about your privacy? Reach us from inside the app (Settings, then Contact us) or through the contact page at getfamilyvault.app. If you write to us there, we receive the name, email address, and message you send, and we use them only to reply to you. If you write to us from inside the app, we receive your account email address, your message, any picture you attach, and basic facts about your device (its model, its operating system version, the app version, and its language and time zone) so we can understand and fix what you describe. We use these only to answer you. An AI assistant helps us sort your message and draft our reply for highest accuracy. We keep your messages to us for up to six months, and if you delete your account, your messages to us are deleted too.