Privacy Policy
Your family privacy is our highest commitment. FamilyConnect is built around strict data isolation, zero commercial ad tracking, and complete user ownership.
1. Information We Collect
To provide collaborative family coordination services, FamilyConnect collects only the information necessary for your household to operate:
- Profile & Contact Information: Member names, nicknames, email addresses, optional phone numbers, roles (parent, teen, kid), and optional avatar images.
- Household Shared Content: Chores/tasks, shared expenses and settlement ledgers, dinner RSVPs, family recipes, student grade entries, family polls, grocery checklists, and Family Lounge chat messages.
- Push Notification Tokens: If you grant permission, device push tokens (Apple Push Notification Service / APNs) are stored securely to deliver chore reminders, meal notifications, and family chat alerts.
2. Multi-Tenant Household Data Isolation
FamilyConnect operates a strict multi-tenant architecture. Every record in our database is scoped by an immutable household_id.
Access to a household requires either creating the household or authenticating with the cryptographically generated 6-character household invite code. No user outside your household can view, query, or mutate your family data. Cross-household queries and data pooling are architecturally blocked.
3. Photo & Camera Privacy
When attaching photos in Family Lounge chat or avatar profiles on iOS, FamilyConnect utilizes the system PhotosPicker which runs out-of-process. FamilyConnect never accesses or scans your private photo library—the app only receives the specific photo item you explicitly choose to share.
Photos are shared exclusively with members of your designated household and are never indexed, analyzed for facial recognition, or shared with third parties.
4. Zero Third-Party Tracking & No Ads
FamilyConnect does not sell, rent, or monetize your personal data. We do not participate in third-party data broker networks, nor do we include ad-tracking SDKs.
Under Apple Privacy Manifest guidelines, FamilyConnect declares NSPrivacyTracking = false with zero tracking domains.
5. Data Retention & Instant Household Deletion
You maintain complete sovereignty over your family information. At any time, you can permanently delete your household and all associated records directly from within the app:
Navigate to Household Settings → Clear All Data (Clean Slate). Executing this action initiates an immediate server-side cascade delete that purges your household record, member accounts, chores, expenses, chat messages, and photo attachments from active databases and local device storage.
6. Contact & Data Privacy Inquiries
For privacy inquiries, data export requests, or compliance questions, please contact our privacy and engineering team:
Email: support@ndclabs.app
NDC Labs, LLC • FamilyConnect Platform Privacy & Security