Famy · famy.world

Your family's data belongs to your family. No ads, no selling, no strangers. We store what you add, show it only to your family, and delete it when you ask.

The people on your tree and how they are related; dates and places you record; photos and avatars you add; the messages of support and memories your family writes; your email address and password (hashed, never readable); and which of eight product events happened, so we can tell whether the beta is working.

When you add a relative, we store the basics (name, relationship, dates). If they're invited, the invitation email tells them what exists about them — and every person can say “remove me” at any time — a short hold, no account needed, and it is honoured, forever.

That email is also the notice the law requires when data about someone is collected from somebody else. A profile that has not been claimed stays deliberately minimal, and is never shown with dates or photographs to anyone outside the family.

Accounts are 13+. Younger children exist only as profiles cared for by their parents, visible to close family only.

Famy runs on our own servers and our own database. Beyond that, these services touch data on our behalf: Cloudflare carries the traffic between your phone and us; Komoot's Photonreceives the place names you type when you search for a town — and, when you keep where someone went to school, studied, worked or lived, that school, workplace or home name as you typed it, so Famy can offer the place on the map (a place name only — never who it belongs to, and never your device's address, because the lookup is made by our server rather than your phone); OpenFreeMap serves the map you see on a place, also through our server, so it never sees your phone; and Anthropicreceives the sentence you speak or type during setup, when the AI helps turn it into a tree, and the words of such a place answer, when it helps turn them into a map search (the offer says “Matched by Famy”, and nothing is kept until you say yes).

Email is sent through SendGrid: it receives the address you type and the message Famy writes, nothing else about your family. Invitations, the “you were added” notice, password recovery and your daily digest go this way; every one of them ends with a way to stop.

Three more things, said plainly. If you turn on notifications, your phone's push subscription is stored with your account so Famy can reach it, and nothing else. Chat messages are stored on our servers like posts — readable by the people in that chat and by us if we must look, never end-to-end encrypted, and never sold. Feedback you send from the app goes to the founder's own inbox, with the screen you sent it from, so it can be answered.

For as long as your family wants it. Beta data is not wiped — it migrates to launch unless you ask us to delete it. Ask, and it goes.

You can see what we hold, correct it, take it with you, and have it deleted. “Remove me” is one tap and needs no account. Write to us at [email protected] and a person — not a queue — answers.

Datu valsts inspekcija · Elijas iela 17, Rīga LV-1050 · [email protected] — though we'd love the chance to fix it first.