Privacy Policy

1. Who we are

FamiliaBase is operated by Charvah LLC, a limited liability company organised in the State of Minnesota, USA (“we”, “us”). We provide the FamiliaBase mobile application and related services (together, the “Service”) and are the data controller for the personal information described in this policy. You can reach us any time at hello@familiabase.com.

2. Information you give us

Account information

When you create an account we ask for an email address, a username, and a password (stored only as a salted hash — we never see or store your actual password). You may optionally add a display name, phone number, date of birth, and a profile photo.

Household content

FamiliaBase stores the content your household creates in the app. Depending on which features you use, that can include:

• Tasks & routines — chores, assignments, and completion records;
• Calendar & events — events, milestones, and memorable days such as birthdays and anniversaries;
• Budget & finance — expenses, income entries, budgets, recurring bills, and savings goals that you enter yourself (we never connect to your bank);
• Rewards — points, allowances, and redemptions within your household;
• Family chat — messages exchanged between household members;
• Photos & documents — images and files you upload, including any visibility settings you apply to them;
• Recipes & meal plans;
• Kids' affairs — school details, important dates, and contacts that parents or guardians record about their children;
• Spiritual life — faith preferences, observances, and journal entries, if you choose to use this module (see Sensitive information);
• Health & wellness — conditions, allergies, medications, and appointments, if you choose to use this module (see Sensitive information).

3. Information collected automatically

• Push notification token. If you enable notifications, your device registers a delivery token so we can send them. Turning notifications off, or signing out, removes the token.
• Security audit logs. For safety and accountability, actions that change data (for example approving a request or deleting a record) are logged with the acting account and IP address. Parents can review their household's activity log in the app.
• Error diagnostics. If the app or our servers encounter an error, a crash report may be sent to our error-monitoring service. These reports are configured to exclude personal information — no request bodies, cookies, or user identities.

We do not collect your location, contacts, browsing history, or data from other apps. We use no advertising SDKs and no third-party behavioural analytics.

4. Sensitive information

Two areas of FamiliaBase can hold specially protected categories of information, and both are entirely optional:

• Health records. The most sensitive health fields — conditions, allergies, medication details, and similar — are encrypted with a dedicated key before they are written to the database (field-level encryption), in addition to the encryption applied to all stored data. Health records default to being visible only to their owner; adults' health information is hidden from other adults unless deliberately shared, and access to children's records is limited to their caregivers.
• Spiritual life. Faith preferences and religious observances are used solely to show you relevant calendars, prayer times, and content you request. Journal entries marked private are visible only to their author — including children's journals, which parents cannot read.

We never use sensitive information for marketing or share it with third parties, other than the hosting infrastructure that stores it in encrypted form.

5. Children's privacy

FamiliaBase is a family app, and children participate only through a household that a parent or guardian creates and administers. A child joins by parental invitation (or as a profile managed by the parent), and the parent's consent to this policy covers the child's participation.

• Child accounts have restricted roles: children cannot see household finances, cannot change household settings, and interact with age-appropriate content areas.
• Parents and guardians can review their child's household activity, remove the child from the household, or delete the associated data at any time.
• We do not knowingly collect personal information from a child outside a parent-managed household. If you believe a child has provided information to us outside this structure, contact us at hello@familiabase.com and we will delete it.

6. How we use information

We use the information described above to:

• provide the Service — sync your household's content between members and devices;
• send notifications you've enabled (task assignments, reminders, bill due dates, and similar);
• send essential account email such as password resets and verification links;
• keep the Service secure — authenticate you, enforce household roles, maintain audit logs, and prevent abuse (including rate limiting);
• fix problems, using diagnostics that exclude personal details;
• respond when you contact us for support.

We do not sell or rent personal information, use it for third-party advertising, or make automated decisions with legal effects about you.

7. Sharing within your household

The point of FamiliaBase is sharing with your own household, so most content you create is visible to other members of your household according to the app's visibility rules — for example: household-wide, adults only, caregivers only, or private to you. Some rules are fixed for safety (children never see household finances); others you choose per item (such as document visibility or health-record sharing).

Remember that anything visible to another household member can be seen, and potentially saved, by that person. Choose your household members with the same care you'd use for your own home.

8. Service providers

We use a deliberately short list of processors:

Each provider processes data only on our instructions and under its own security and data-protection commitments. Beyond these, we disclose information only if the law genuinely requires it, or to protect the safety of users — and we will tell you unless we're legally prevented from doing so.

9. How we protect your data

• All traffic between your device and our servers uses TLS (HTTPS), enforced with HSTS.
• Stored data is encrypted at rest by our hosting providers; the most sensitive health fields carry an additional layer of application-level encryption with a separately managed key.
• Passwords are stored only as salted, iterated hashes.
• Access within a household is enforced server-side by role (parent, guardian, teen, child) on every request — not just hidden in the interface.
• Signed-out devices stop receiving notifications; deleted accounts have their sessions revoked immediately.
• Sensitive actions are recorded in a tamper-evident audit log.

No system is perfectly secure, but if we ever discover a breach affecting your personal information we will notify you and the relevant authorities as required by law.

10. Retention & deleting your account

We keep your information for as long as your account exists, so your household's shared history keeps working.

You can delete your account at any time in Settings → Delete account. When you do:

• your personal details (email, name, phone, date of birth, photo, notification token) are removed or irreversibly anonymised immediately;
• your sign-in stops working everywhere and existing sessions are revoked;
• shared household records you contributed to (for example an expense in the family budget) remain for the rest of the household, attributed to an anonymised “deleted user” rather than to you;
• residual copies in encrypted backups age out on a rolling basis.

Parents can likewise remove a child member from the household, and household administrators can delete entire households.

No longer have the app, or can't sign in? You can request deletion by email instead — see our data deletion page for both paths. Requests are completed within 30 days, and usually much sooner.

11. Your rights

Depending on where you live (including under the EU/UK GDPR and the Nigeria Data Protection Act), you may have the right to:

• access the personal information we hold about you;
• correct inaccurate information (most details are editable in the app);
• delete your information (built into the app — see above);
• export your information in a portable format;
• object to or restrict certain processing;
• complain to your local data-protection authority.

To exercise any of these, use the in-app tools or email hello@familiabase.com. We respond to every request and never discriminate against you for making one.

12. Where data is stored

Your household's data is stored in the European Union (Frankfurt, Germany). Some providers — push delivery and error monitoring — process limited data in the United States, under appropriate safeguards such as standard contractual clauses. Wherever your data is processed, this policy follows it.

13. Changes to this policy

If we change this policy in a meaningful way, we'll tell you in the app or by email before the change takes effect, and update the date at the top. Minor clarifications may be posted without separate notice. Continued use after a change means you accept the updated policy.

14. Contact us

Questions, concerns, or requests — we read every message: hello@familiabase.com

FamiliaBase is operated by Charvah LLC, a Minnesota limited liability company, United States.