Privacy Policy

• Account & profile data — full name, nickname, email address, profile photo, date & place of birth, city, occupation, and other profile information you provide.
• Family content — photos, videos, messages, comments, event notes, arisan/shared-fund data, and family tree content you upload.
• Technical data — IP address, device & browser type, language, and activity summaries for security and service improvement.
• Payment data — for paid subscriptions, processed by a third-party payment provider; we do not store your card number.
• Authentication data — if you sign in with Google, we receive basic identity (email, name, photo) according to the permissions you grant.

• To provide, operate, and maintain the service and sync content between family members.
• To secure accounts, prevent abuse, and detect suspicious activity.
• To send important notifications, updates, and (with consent) family moment alerts.
• To improve product quality through aggregate analytics that do not personally identify you.
• To comply with applicable legal obligations in Indonesia.

We process data on the basis of: (a) your consent ; (b) performance of the service agreement ; (c)legitimate interests for security and service improvement that do not override your rights; and (d) legal obligation — under the Personal Data Protection Law (UU No. 27/2022) and, where applicable, other data protection regulations.

We do not sell your data. We only share data with parties needed to run the service, under confidentiality agreements and limited access:

• Infrastructure providers — data storage & authentication (Supabase) and hosting (Vercel).
• Authentication providers — such as Google, if you choose to sign in with Google.
• Payment providers — payment gateways (e.g. Midtrans/Xendit) for subscription transactions.
• Legal obligation — when required by law or a lawful order.

Inside the app, content is only visible to family members (and branches/spaces) with the right access, per the privacy settings and roles (owner/admin/member) of that family.

• Encryption in transit (HTTPS/TLS) and row-level access controls (Row Level Security) on the database.
• Internal access restrictions: only authorized personnel, on a need-to-know basis.
• Family files stored in a private bucket per family.

Although we do our best, no system is 100% risk-free. We will notify you as required by law if an incident affects your data.

We keep data while your account is active or as needed to provide the service and meet legal obligations. If you delete your account or request it, we delete or anonymize your data within a reasonable period, except data we must retain by law.

• Access — to know and obtain a copy of your data.
• Correction — to fix inaccurate data.
• Deletion — to request deletion of data (the “right to be forgotten”).
• Portability — to export your family data.
• Withdrawal of consent — to withdraw consent at any time, without affecting the validity of prior processing.
• Objection — to object to certain processing based on legitimate interests.

Requests can be made via the contact below; we will follow up within a reasonable time.

We use cookies and local storage that are required to keep your login session and preferences (e.g. language). Non-essential analytics cookies are only used with your consent, and you can manage them via the cookie consent banner.

This service is intended for adult families. Accounts for minors must be created and managed by a parent or guardian. We do not knowingly collect children's personal data without parental/guardian consent.

Data may be processed on servers located outside Indonesia by our infrastructure providers. In such cases, we ensure adequate protection under applicable regulations.

We may update this policy from time to time. We will notify you of material changes via the app or email. The “last updated” date above shows the latest version.

Questions or privacy requests? Contact us at privacy@famconnect.app. We are committed to protecting your family's data. 🔒