Privacy Policy
Operator and scope
Effective date: 4 October 2026. Famni is operated by David Voskanyan. Contact team@beautyai.app for support and privacy requests. This policy describes the Famni app and its family location service, including its pre-release version.
Account and family information
We process account name, email address, opaque account ID, selected language, authentication/session records and linked Apple or Google identity. Email passwords are stored as hashes. We process family memberships, roles, invitations, sharing preferences, place and trip labels, check-in text, alert and acknowledgement records, and abuse reports. Family relationships form a social graph; Famni does not read your phone address book.
Location and permissions
When you enable sharing, we process precise or approximate coordinates, observation time, accuracy, movement and battery state to show locations and history and provide place and trip alerts. Background sharing requires the relevant system permission and your sharing choice. Administrators cannot remotely enable another member’s sharing. Camera frames are used on your device to scan invitation QR codes and are not uploaded as camera images. Biometric checks use the operating system; we do not receive face or fingerprint templates.
Devices, notifications and purchases
We process installation/device identifiers, session records, push tokens, last-seen time, language and notification preferences. Push text is generic and does not contain coordinates, destinations or check-in messages. Apple or Google handles payments. RevenueCat and our backend process account and transaction identifiers, subscription state and purchase history to verify and restore access. We do not receive payment-card numbers. A paid plan applies to one designated Famni family and is separate from Apple Family Sharing.
Limited product analytics
We process an allowlist of activation and subscription events that may be linked to your internal account ID. These event payloads exclude coordinates, message text, family names and invitation secrets. Famni does not sell personal information or use location data for advertising tracking.
Android SDK information
Google Maps on Android processes IP addresses, device and SDK metadata, a Maps-specific pseudonymous identifier, SDK crash information and map interaction events such as camera movement or zoom. Google uses this information to operate, maintain and improve its services. Firebase Cloud Messaging and Firebase Installations process installation identifiers, app version and related service metadata for device registration and notifications. These SDK data flows are separate from Famni’s limited product-event payloads. RevenueCat processes purchase history and the authenticated Famni account identifier for subscription verification and analytics; Famni does not send account names, email addresses, message text or coordinates as RevenueCat customer attributes.
Purposes and legal bases
We process account, family, notification and subscription data to provide the service you request and administer purchases. Location sharing and optional permissions require your choice and, where applicable, consent; you can withdraw it in the app and system settings. We use proportionate security and abuse-prevention processing for legitimate interests and retain records where law requires it. Where applicable, you can object to legitimate-interest processing.
Who receives information
Chosen family members receive only the information permitted by your sharing choices and server authorization. Approximate sharing restricts precision and detailed location information. We use service providers for hosting, storage, authentication, maps, email, notifications and purchase verification: AWS, Apple, Google/Firebase, RevenueCat and Expo, as relevant to the enabled service. Support email uses our Google-hosted business mailbox. Providers may process information in countries outside yours. Where applicable, transfers require an adequacy decision or suitable safeguards, such as standard contractual clauses. Contact us for information about applicable safeguards. We may disclose necessary information to comply with law or address misuse. Information another member has already viewed or copied cannot be recalled.
Retention
Location history is configured to expire after up to 2 days on the free plan and up to 30 days with a verified family plan. Current-location records expire after 2 days without updates; idempotency records expire after 7 days. Temporary verification and recovery tokens and export links expire at their designated times. These operations rely on a running maintenance worker. Account, membership, place/trip, activity and analytics information is retained while needed to provide the service, resolve disputes, prevent abuse or meet legal requirements; these records do not all share the location-history expiry. Deleted records may remain in backups until backup expiry. Before public launch, production cleanup and backup expiry must be verified; the current staging backup rotation is 7 days. Minimal deletion tombstones are retained to prevent restored backups from reviving deleted accounts or history.
Controls and deletion
You can select precise or approximate sharing, pause sharing, revoke devices/sessions, leave a family, block or report a member, delete history, request an export and delete your account from Settings. A family owner must transfer ownership before account deletion. For an email request, use the Account Deletion page; we verify account control before acting. Provider revocation may be retried when a provider is unavailable. Deleting the app or account does not cancel a store subscription. Records that must be retained for legal, billing, fraud or dispute purposes may remain subject to those obligations.
Security and your rights
Production access requires encrypted HTTPS connections and authenticated server authorization. Location data is processed on the server to provide sharing and alerts; it is not end-to-end encrypted. No measure guarantees absolute security. Depending on your country, you may request access, correction, portability, deletion, restriction, objection or withdrawal of consent and may complain to a local data-protection authority. Email team@beautyai.app with the subject “Famni Privacy Request”.
Family use and children
Famni is being prepared as a family service for parents and children. Its App Store content rating does not verify age or parental consent. Child-account registration and the applicable guardian-consent workflow are not yet ready in the pre-release version. Do not register children through the current pre-release account flow. Before child accounts are enabled, we must establish applicable age eligibility, give parents direct notice of the data collected and family recipients, obtain and record verifiable parental consent where required before collecting a child’s personal information or precise location, and provide verified guardians with access, deletion and consent-withdrawal controls. A family invitation, paid subscription or content rating does not replace that consent. The current pre-release account flow does not authorize child accounts. If a child’s data has been provided without the required consent, email team@beautyai.app with “Famni Child Privacy”; we will verify the request and take appropriate restriction and deletion steps. This pre-release limitation must be resolved before launching the intended child-account service.
Policy changes and service limits
Policy updates show a revised effective date; material changes receive notice where required. SOS alerts do not contact emergency services, and location or alert delivery is not guaranteed.