Privacy Policy

Last updated: June 2026

What we collect

Family Planner is a self-hosted family organizer. We store the data you enter: your name, email, family member names, the chores/events/lists/ messages/rewards you create, and your progress (XP, streaks, completed chores). That's it. No analytics sold to third parties, no advertising, no tracking pixels.

Where your data lives

Your data is stored in a PostgreSQL database hosted on our infrastructure. Passwords are hashed with bcrypt (cost factor 12). Session cookies are httpOnly, signed JWTs with 7-day expiry. Email verification is required before login. Rate limiting and CSRF protection are in place on all state-changing endpoints.

Your rights

  • Access: GET /api/users returns your profile.
  • Export: GET /api/users/export returns a JSON file with all your data.
  • Delete: DELETE /api/users removes your account and all associated data (GDPR Article 17).
  • Rectify: PATCH /api/users to update your name/age.

Children's data (COPPA)

Family Planner is designed for use by families with children. Child accounts (under 13) must be created by a parent. We do not knowingly collect data from children directly. If you believe a child account was created without parental consent, contact us to remove it.

Email

We send transactional emails only: email verification, password reset, chore completion notifications to parents. No marketing email, ever. You can opt out of notification emails in Settings.

Backups

Database is backed up daily. Backups are retained for 14 days (rolling) plus 4 weekly snapshots. Backups are integrity-tested on every run.

Contact

For privacy questions or to exercise your rights: privacy@ashbi.ca