Privacy Policy

FamFrame ("FamFrame", "we", "us") provides a private space for families to share photos and videos, stored in each user's own Google Drive. This Privacy Policy explains what information we handle when you use the FamFrame mobile app and this website (together, the "Service"), and the choices you have.

By using the Service, you agree to the practices described here. If you do not agree, please don't use the Service.

FamFrame is built around a simple principle: you own your data. When you add a photo or video, it is uploaded directly to a single folder named "FamFrame" in your own Google Drive. This media is never uploaded to, stored on, or processed by FamFrame's servers.

To do this, the app uses Google's narrow drive.file permission, which grants access only to the files the app itself creates or that you explicitly open with it. FamFrame cannot see, read, or access any other files in your Google Drive.

When you use FamFrame, we access or receive:

• Google account profile. When you sign in with Google, we receive your name, email address, profile photo, and a Google account identifier, so we can identify you and show you to other family members in your albums.
• Album content and activity. Album names, invite codes, captions, comments/notes, and reactions you create.
• Nicknames. Any private nicknames you set for other members. These are visible only to you.

To run shared albums, we store a limited amount of information in Google Firebase (our backend). This does not include your photos or videos. It includes:

• Your account identifier, display name, email, and avatar URL.
• Albums you own or belong to, their invite codes, and the list of members.
• Pending join requests to albums.
• Captions, comments/notes, and references (IDs) to the media files in your Drive — not the media itself.
• A device push-notification token, if you enable notifications.
• Your private nicknames for other members.

FamFrame's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google Drive access to provide and improve the user-facing features of FamFrame (storing and displaying your albums).
• We do not transfer this data to others except as needed to provide the Service, comply with the law, or with your consent.
• We do not use Google user data for advertising, and we do not allow humans to read it, except with your consent, for security, to comply with the law, or where the data is aggregated and anonymized.
• We do not use Google user data to train generalized artificial intelligence or machine-learning models.

We use the information above to:

• Provide, maintain, and secure the Service.
• Display albums and members, and let you invite and manage family.
• Send notifications you've enabled (for example, when a new memory is added).
• Diagnose problems and prevent abuse.

We do not sell your personal information. We share data only with the service providers we rely on to operate FamFrame, and only as needed:

• Google — Sign-In and Google Drive storage.
• Google Firebase / Google Cloud — authentication, database, and hosting for the album metadata described above.
• Expo — delivery of push notifications to your device.
• Sentry — crash and error reporting to help us fix bugs.

We may also disclose information if required by law or to protect the rights, safety, and security of our users and the Service.

If you enable notifications, we store a device token so we can alert you about relevant activity in your albums. You can turn notifications off at any time in the app or in your device settings.

FamFrame is intended for use by adults (parents, guardians, and family members). It is not directed to children, and we do not knowingly allow anyone under the age of 13 (or the minimum age in your country) to create an account.

Albums often contain photos and videos of children. Those images are uploaded by the adults who control the album, who are responsible for obtaining any necessary consent and for deciding who they invite. If you believe a child has created an account, please contact us and we will address it.

You are in control of your data:

• Your media lives in your Google Drive. It stays there even if you stop using FamFrame, and you can delete it at any time from Google Drive.
• Leaving or deleting an album removes the related membership and metadata we hold for you.
• Revoking access — you can disconnect FamFrame from your Google account at any time via your Google account permissions.
• Account deletion — to delete your FamFrame account and the metadata we hold, contact us at privacy@famframe.app.

We use industry-standard measures to protect the information we hold, including encrypted connections and access controls that limit album data to its members. No method of transmission or storage is 100% secure, but keeping your media in your own Google Drive means your most sensitive content is protected by Google's security rather than ours.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing (for example under the GDPR or CCPA). To exercise these rights, contact us at privacy@famframe.app. We will respond in accordance with applicable law.

We and our service providers may process information in countries other than your own. Where we do, we take steps to ensure your information receives an adequate level of protection.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, notify you in the app.

This Privacy Policy is governed by the laws of Victoria, Australia, without regard to its conflict-of-laws principles.

If you have any questions about this Privacy Policy or how we handle your information, contact us at privacy@famframe.app.