Privacy Policy

• Your location is visible only to people in Loops you have joined. It is never public, never sold, and never shared with advertisers.
• Nobody can be added to a Loop without installing Famloop, entering an invite code and granting location permission themselves.
• Pausing sharing stops location uploads. It does not merely hide your pin.
• There are no ads and no advertising SDKs in Famloop.
• Location points are stored for up to 365 days regardless of your plan, even though the Free plan only displays the last 2 days. This is explained in full under "How long we keep it".
• You can delete your location history, or your whole account, from inside the app.

Famloop is operated by Aifinity Solutions. For anything in this policy, contact support@famloop.us.

Account information. Your name, email address and an optional profile photo. If you sign in with Apple or Google, we receive whatever that provider returns — with Apple's Hide My Email, that is a relay address and we never see your real one.

Location. When you turn sharing on, the app records your coordinates, the accuracy of the fix, the time it was captured, and your device's battery level. Speed is recorded when driving and speed alerts are in use. Each point is written to the Loops you are sharing with.

Places and timers. Saved places you create (Home, School, and so on), their radius, and any alert rules you set. Safe Arrival Timers store a destination, a deadline, and the Loop members you chose to be told if you do not check in.

Messages and safety events. Loop chat messages, direct messages, check-ins, SOS alerts and arrival/departure events. These are stored so your Loop can see them.

Device information. A push notification token per device, so alerts can reach you, and your notification preferences.

Purchases. If you subscribe or buy Premium Family Lifetime, your purchase is processed by Apple or Google. We never see your card details. We receive a record that the purchase happened so your Loop can be unlocked.

Diagnostic logs. The app writes technical logs that are deliberately free of personal data — identifiers, counts and rounded coordinates, never names or precise positions.

Famloop does not read your messages outside the app, your browsing, your screen time, your contacts, your photos (beyond a profile picture you choose), your call history or your other apps. It cannot locate a phone that does not have Famloop installed and signed in, and it has no hidden or invisible mode.

Only the members of Loops you have joined, and only while you have sharing turned on.

A Loop is private and invite-only. Invite codes expire and can be revoked. Leaving a Loop stops your location being shared with it.

Every member's location is shown with its real age — "Live", "Updated 26 minutes ago", "Offline", "Sharing paused". We do not present an old position as a current one, in either direction: you can always see how fresh what you are looking at actually is, and so can everyone looking at you.

This is the part most worth reading carefully, because the storage period and the display period are not the same number.

Location history is stored for up to 365 days, on every plan. Each location point is written with an expiry timestamp 365 days out, after which it is deleted automatically.

The Free plan displays only the last 2 days, and Premium Family displays the full 365. The Free limit is a limit on what the app shows you — it is not a shorter retention period. Points older than 2 days still exist on our servers until they expire, which is what allows an upgrade to reveal your earlier history immediately.

We are stating this plainly because "2 days of history" could reasonably be read as "Famloop deletes it after 2 days", and that is not what happens. If you want history gone before then, use Delete my history in Settings — that removes it immediately, across every Loop, and it is not a display setting.

Other data is kept while your account exists: your profile, your Loop memberships, saved places, timers, messages and safety events. Deleting your account removes your profile and your location data.

We do not sell your data, and we do not share it with advertisers. There are no advertising or analytics SDKs in Famloop.

We use a small number of service providers to run the app. They process data on our instructions only:

• Google (Firebase) — authentication, database, file storage and push notifications. This is where your account and location data is stored.
• RevenueCat — subscription and purchase status, so the app knows whether your Loop has Premium.
• Apple and Google — payment processing for in-app purchases, and delivery of push notifications to your device.

We may disclose information where the law requires it, or where it is necessary to protect someone's safety.

• Pause sharing — stops location uploads entirely. Your Loop sees "Sharing paused" rather than a frozen position.
• Delete my history — erases your saved location history in every Loop you belong to, immediately.
• Leave a Loop — stops sharing with that Loop.
• Revoke an invite code — codes also expire on their own.
• Delete your account — removes your profile and your location data.
• Revoke permissions — location and notification access can be withdrawn at any time in your phone's Settings. Famloop keeps working, with less of it available.

Depending on where you live you may also have rights to access, correct, export or erase your personal data. Email support@famloop.us and we will act on it.

Famloop is designed for families, and younger members are an expected part of that. A child's account is created and joined to a Loop by the family, and a child has the same controls as any other member — they can see who they are sharing with, and they can pause sharing.

We do not knowingly collect data from a child who has not been added to a Loop by their family. If you believe that has happened, email support@famloop.us and we will remove it.

Data is encrypted in transit and at rest by our infrastructure provider. Access to your Loop's data is enforced server-side, not just in the app: the database rules reject reads and writes from anyone outside your Loop, so a modified client cannot reach it either.

No system is perfectly secure, and we will not claim otherwise.

Our infrastructure runs on Google Cloud in the United States. If you use Famloop from elsewhere, your data is transferred there and handled under this policy.

If we change this policy in a way that matters, we will update the date at the top and, for significant changes, tell you in the app. Continuing to use Famloop after a change means the updated policy applies.

Questions, requests or corrections: support@famloop.us.

Aifinity Solutions