Privacy Policy

famagenda (“we,” “our,” or “us”) is a family scheduling hub that helps households stay coordinated by surfacing calendar events, detecting scheduling conflicts, and delivering daily agenda notifications. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

We collect only the minimum information necessary to provide the service:

• Account information: Your name, email address, and profile photo provided via Google Sign-In.
• Phone number: Optionally provided by you for SMS notifications. We do not collect it automatically.
• Time zone and preferences: Your time zone and digest delivery time, which you configure in the app.
• Calendar access credentials: OAuth tokens that authorize famagenda to read your calendar. These are encrypted at rest using AES-256-GCM and never stored in plaintext.
• Family group membership: Which family group you belong to and your role (admin or member).

We do not store calendar event content. Your calendar events are fetched fresh from your calendar provider each time they are needed and are never persisted in our database.

• To authenticate you via Google Sign-In.
• To fetch your calendar events and generate your family's daily agenda.
• To detect scheduling conflicts among family members.
• To deliver evening digest notifications and conflict alerts via SMS and push notification.
• To send agenda addition prompts to other family members at your request.

We do not use your information for advertising, profiling, or any purpose beyond operating the service.

If you provide your mobile phone number and enable SMS notifications, you consent to receive text messages from famagenda, including daily family agenda digests, scheduling conflict alerts, and event confirmation messages. Message frequency varies (up to 3 messages per day). Message and data rates may apply.

You may opt out at any time by replying STOP to any famagenda message. Reply HELP for assistance. You may also remove your phone number at any time in the app settings at famagenda.app/settings.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. SMS opt-in data and consent, including your phone number and messaging preferences, will not be shared with any third parties for marketing or promotional purposes under any circumstances. All categories of data described in this policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Consent disclosure. Before any phone number is submitted, famagenda presents the following consent language at the point of opt-in, making the nature of the messages, the opt-out method, and the message/data rate disclosure clear to the user. The same disclosure appears at every place a phone number can be entered:

famagenda relies on the following third-party services to operate:

• Google LLC — Authentication and calendar data access. Governed by Google's Privacy Policy.
• Supabase Inc. — Database hosting for account and family connection data, stored in the United States. See Supabase's Privacy Policy.
• Twilio Inc. — SMS delivery. Your phone number and message content are transmitted to Twilio for the purpose of sending and receiving text messages. Twilio's handling and retention of that data is governed by Twilio's Privacy Policy.
• Expo — Push notification delivery for mobile devices. See Expo's Privacy Policy.
• Vercel Inc. — Web application hosting. See Vercel's Privacy Policy.

famagenda requests the following Google API scopes:

• https://www.googleapis.com/auth/calendar — To read your calendar events and create a shared family calendar.
• https://www.googleapis.com/auth/calendar.events — To add events to your calendar when you accept an agenda prompt from a family member.

famagenda's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Account and family data is retained until you delete your account.
• Calendar event snapshots (used for change detection) are automatically purged after 24 hours.
• Pending agenda prompts are retained until accepted or dismissed.
• Upon account deletion, all your data is permanently removed within 30 days.

Calendar credentials are encrypted at rest using AES-256-GCM before storage. All data is transmitted over TLS. Access to production systems is restricted to authorized personnel only.

famagenda is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, please contact us and we will delete it promptly.

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated data.
• Revoke Google Calendar access at any time via your Google Account permissions.
• Disconnect your phone number or turn off SMS notifications at any time in the app settings.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date. Continued use of the service after changes constitutes acceptance of the updated policy.

Questions about this Privacy Policy? Contact us at privacy@famagenda.app.