Privacy policy

1. Scope and contact

This policy covers the FamilyMate website, Web app and iPhone/iPad app. The operator and data controller for FamilyMate is JunxuChen. Updated and effective: 2026-10-28. Contact [email protected] for privacy questions and data-rights requests.

2. Information we process

• Accounts and families: email, account identifiers, nicknames, family membership, roles and invitations. Sign-in, registration, verification and password recovery process the necessary credentials. Never email support a password or verification code.
• Optional profile information: selected avatar, child name or nickname, grade, school and leave information. Provide only what family coordination needs, not identity documents, medical diagnoses or unnecessary sensitive details in a schedule.
• Family content: schedule titles, dates, repetition, participants, pickup and reminder settings, confirmation requests, completion records, timer reports, rewards, points and time ledgers.
• Purchases, when offered: products, transaction identifiers, verification results, entitlements and beneficiary-family links. Apple handles App Store payments; FamilyMate does not ask for your full payment-card details.
• Operation and security: request times, network addresses, device/browser information and necessary error, access and operation records for running the service, troubleshooting and preventing misuse.
• Lock screen schedules: by default, minimal authorized schedule content already synchronized to your device supports locally scheduled cards. Local scheduling does not register Apple push tokens. Only when the deployment explicitly enables APNs background push do we register a random installation identifier and Apple device/activity push tokens to display and update cards on your device. Tokens are encrypted on the server, are not used for advertising tracking and are excluded from family data archives. Personal, family and individual schedule switches control display. Account deletion cleans up the associated bindings. Remote changes take effect after synchronization; offline devices and system limits can delay visible updates.

3. Why we use it

We use information to verify identity, enforce family and role access, synchronize schedules, confirm proposals, record confirmed points and time, handle purchases and restoration, send verification emails and respond to support requests. We do not use family content for targeted advertising or sell it to advertisers. This website includes no advertising or third-party behavioral analytics scripts.

4. Sharing within families and with providers

Authorized parents can manage family schedules, members and child profiles. Children mainly access information linked to themselves; collaborators access their own schedules and explicitly assigned pickup duties. Shared schedules, member names and progress are visible to the relevant authorized members. Invite people you trust and update membership or account links when access is no longer needed.

Cloud synchronization and account services use APIVIAX platform capabilities and entrusted hosting infrastructure and email-processing services. Apple processes information necessary for iOS purchases, refunds and system features. We require entrusted processors to use information only for the agreed service and provide protection equivalent to this policy. Contact the privacy address for the actual processors and processing regions. Disclosures required by law are limited to what is necessary.

5. Photos, reminders and local storage

Selecting an avatar reads only the image you choose; the app does not need your entire contacts list or continuous photo-library access. Clients prepare a thumbnail; iOS removes image metadata. The avatar is synchronized only when you save the profile, not merely when you select or preview an image.

iOS system alarms and notifications request their respective system permissions. Reminders and widgets may display schedule names and times; consider visibility on a lock screen or shared device. Declining or withdrawing permission does not grant account access to someone else. FamilyMate does not provide location tracking or require microphone or address-book access.

Devices keep necessary sign-in credentials, appearance/language preferences, authorized caches and pending timer reports. iOS stores sign-in credentials in Keychain and shares necessary snapshots with its extensions; Web uses browser storage. Sign-out and revoked access restrict old content, but ordinary sign-out may retain pending records isolated to their original identity. Clearing local storage is not account deletion.

6. Retention, deletion and necessary records

Information is kept for the period needed to provide the service and fulfill its purposes. You can edit profiles, change membership and reminder permissions, and use the available account-deletion flow. Its preview identifies the affected identity, services, families and retained records; family creators may need to transfer or dissolve families. Acceptance of a request is not confirmation that cleanup has finished.

Attributable profiles, avatars and content are handled under the cleanup rules. Shared history still needed by other members, de-identified records and transaction or security records required by law may remain. A name manually entered in shared text may need separate handling. Backup copies follow the actual maintenance cycle. Contact the privacy address to clarify retention or request handling of personal information in shared text.

Deleting an account, leaving a family, removing a child profile and canceling an Apple subscription are different actions. Account deletion does not cancel Apple subscriptions.

7. Children and guardians

FamilyMate is a family-coordination tool. Before creating a child profile, linking an account or providing a child’s information, a parent or guardian must have authority to provide it and fulfill applicable notice and consent requirements. A child role or family invitation does not itself verify legally required parental consent. If your jurisdiction requires additional verification that this service does not yet offer, do not create a child account or submit child information; contact the operator first.

Children’s information is not used for targeted advertising. Guardians can manage profiles they are authorized to manage or contact the privacy address to access, correct or request handling of information. Removing a profile alone does not delete the child’s sign-in account.

8. Your choices and security

Use the app to access or correct profiles, manage family access, withdraw reminder permissions and initiate available account deletion. Contact [email protected] for assistance with access, correction, deletion, restriction or other applicable rights. We may verify identity but will not ask you to email a password or verification code.

Production services use HTTPS, and clients and servers restrict access by identity and family permissions. No system can promise absolute security. Protect accounts, devices and invitations. Material changes will update this page’s date and be communicated appropriately; a policy update does not replace any renewed consent required by law.