Privacy Policy

1. Information used by FamilyHub

• Account and family information: your email address, account identifier, display name or alias, sign-in provider, public cryptographic keys, family membership, roles and device registrations. Authentication is provided through Firebase Authentication and, when chosen, Apple or Google sign-in. Your sign-in password does not serve as your family encryption key.
• Locations, Places and trips: when enabled, precise device locations, location times and accuracy, saved Places and privacy zones, arrival/departure events, recorded routes and trip details. Background location can support these features while the app is closed or not in use, subject to device permissions and operating-system restrictions.
• Family conversations and shared records: messages and associated sender/time information, device labels and other records you choose to share with your family. Family content is associated with your family and account so authorized members can use it.
• Device and service information: device identifiers, push-notification tokens, permission and connectivity state, presence/activity signals and technical request metadata such as IP addresses and request times. Motion, step and power signals can help the app choose which of your devices represents you on the map.
• Recovery and local storage: encrypted key backups and information needed for account recovery and synchronization. Devices store settings, cached family records and protected key material locally. Keep your recovery phrase private; it is needed to restore encrypted keys.
• Purchases, when available: product, transaction, entitlement and subscription status needed to manage paid access. A platform store or payment provider processes payments; do not send payment-card details through family chat or support.

2. Why information is used

We use this information to authenticate accounts, establish trusted family membership, synchronize records between authorized devices, display shared locations and trips, deliver notifications, support recovery, operate available paid features, protect the service against misuse and investigate technical failures. FamilyHub is not an emergency service, and location or notification delivery is not guaranteed.

3. Encryption and what remains visible

Family-shared records are encrypted on member devices before replication and decrypted on authorized member devices. The relay stores and transports encrypted records. Account and directory information, public keys, membership, routing identifiers, device registrations and operational metadata are not all end-to-end encrypted: the service needs them to authenticate and route updates.

Other authorized family members can view information you share and may retain copies or screenshots. Encryption does not prevent a recipient from using information they can read. Protect your device, sign-in credentials and recovery phrase. We cannot recreate a lost recovery phrase for you.

4. Who receives information

• Your family: authorized members receive shared records according to membership and app permissions. Family admins manage membership and can receive family arrival/departure alerts.
• Service providers: hosting and network providers transport or store service data; Firebase Authentication handles account authentication; Apple Push Notification service and Firebase Cloud Messaging handle notification delivery and device tokens. Map services process requests needed to display maps or resolve locations. These services can receive technical metadata needed for their operation.
• Optional features: sign-in and payment providers process the information needed for the feature you choose. If you download an on-device assistant model, the model host receives the download request and network metadata. On-device inference processes the selected family conversation on the device; downloading a model does not require uploading that conversation to the model host.
• Required disclosures: information may be disclosed when required by applicable law or necessary to protect the service and people from misuse. This does not give us access to encrypted content for which we do not hold decryption keys.

Service providers and family members may be in countries other than yours. Their systems and applicable local laws may differ.

5. Your choices

Use Settings to change location sharing, select the device representing you, review permissions and manage notifications. Device settings control location, motion and camera access. The camera is used for invite QR scanning when you choose that action. Denying a permission limits the related feature; you can continue using unrelated features.

Privacy zones and location modes affect how locations are recorded or shared; they do not erase information already delivered to family members. Stopping location sharing does not delete previously shared trips or messages. A private invitation grants access to your family network, so share invitations only with people you trust.

6. Retention and deletion

Account, directory and recovery-backup records are retained while needed to provide the account and service. Shared records and device caches are kept according to the applicable feature and family history; sampled location history is bounded separately from saved trip routes. Removing information from one device may require synchronization before other connected devices reflect the change.

You can initiate account deletion from Settings → Account → Delete Account. Reauthentication is required. A family admin may need to resolve family ownership before deletion can finish. Deletion removes the account's active directory records, cloud key backups and this device's stored keys through the deletion flow. Family members may keep previously shared history; deleting your account cannot erase screenshots, exports or copies already held by other people.

Operational, security or transaction records may be retained where needed for service security, disputes or applicable legal obligations. Backups and disconnected-device copies may not disappear immediately. If applicable retention, access or deletion rights require assistance, contact us below. Deleting an account is separate from cancelling any subscription through the provider that bills it.

7. Families and children

Parents and guardians should supervise a child's use and provide any consent required by applicable law. FamilyHub is intended for transparent, consent-based family sharing, not covert surveillance. If you believe a child's information was provided improperly or that a family membership is unsafe, contact us so we can investigate available account and service actions.

8. Questions and privacy requests

Depending on your location and applicable law, you may have rights to request access, correction or deletion of personal information, to withdraw consent or object to certain uses, or to raise a concern with your privacy regulator. We may need to verify that you control the account before acting. Please describe the request and the account email; never send passwords, recovery phrases, invitation keys or other people's private messages.

Contact QSparx Inc. using the contact details on our company website, or write to:

9. Policy changes

We may update this policy as the service changes. The effective date identifies this version. Material changes will be communicated through an appropriate app or service notice. Review the current policy when deciding which features and sharing settings to use.