Privacy policy

Who runs this

Famylin (famylin.com and its subdomains: Travel, Schedule, Shopping, Poker Night and Finance) is a personal project, not a business. It has no ads, sells nothing, and is used by people the family knows. Signing in does not give you access to any app; an admin approves each person for each app.

Signing in with Google

You sign in with your Google account. From Google we receive your name, email address and profile picture (the openid, email and profile permissions). Your email is how every app recognises you and how admins approve your access. We keep a list of who has signed in, which apps they asked for, and whether each request was approved.

Sign-in is kept in a cookie on famylin.com that is shared by all the apps, so signing in once works everywhere and signing out anywhere signs you out everywhere. A second cookie remembers whether you chose the light or dark theme. There are no analytics, advertising or tracking cookies.

Google Calendar (Schedule only)

The Schedule app can sync the family calendar with Google Calendar. Only if you choose “Connect Google Calendar” in Schedule, it asks for permission to see and edit your Google Calendar events (the https://www.googleapis.com/auth/calendar permission) with offline access. Schedule then stores:

• a Google access token and refresh token, so it can keep syncing when you are not on the page;
• the calendars you choose to sync, and their events: title, description, time, location, recurrence and who is attending.

Schedule uses this only to show your events in the family schedule and to write events you create or change in Schedule back to your Google Calendar. It does not read your email, contacts or files.

Famylin’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google is never sold, never used for advertising, never used to train AI models, and is not shared with anyone except to provide the features described here. People can read it only when they are members of your family in Schedule or an admin keeping the service running.

You can disconnect at any time from your Google account’s third-party connections, after which Schedule can no longer read or change your calendar.

What each app keeps

• famylin.com (the hub): your name, email, picture, which apps you have access to, and admin roles. If you connect an AI assistant to Famylin, the permissions you gave it and a log of what it did.
• Travel: trip itineraries that members write: dates, flights, hotels, bookings, notes, and who each trip is shared with. Bookings may include confirmation numbers and traveller names that members enter.
• Schedule: family members, calendars, events, saved places (addresses), travel-time estimates, and, if you turn them on, browser push notification subscriptions.
• Shopping: the household shopping list and who added or changed each item.
• Poker Night: players’ names and emails, game nights, RSVPs, seating, buy-ins, cash-outs and the resulting wins and losses. Invitations and reminders are sent by email.
• Finance: used only by its owners. It stores a link to their brokerage account (encrypted access tokens), account balances, positions, and proposed and placed trades. No one else’s data is in it.

What is public

Most of Famylin is visible only to approved members. Two apps have, or are getting, a public view meant to be shared:

• Poker Night: game nights can be viewed by anyone, but without names. A public visitor sees counts (how many RSVPed, how many are out), buy-ins, and wins and losses for anonymous players (“Player 1”, “Player 2”). Names are shown only to signed-in members who were at that game.
• Travel: a trip is public only if its owner turns that on. A public trip shows dates, flights (airline, flight number, times) and hotels (name, address and dates). It never shows who is travelling, how many people are going, or confirmation numbers.

Schedule, Shopping and Finance are never public.

Who else handles the data

Famylin uses a few services to run. Each gets only what it needs:

• Google, for sign-in and, in Schedule, Calendar sync.
• Railway, which hosts the apps and their databases.
• Resend, which delivers emails (Poker Night invitations and reminders, Finance notices): your email address and the message.
• Charles Schwab, for Finance only, which its owners link themselves.
• Your browser’s push service (for example Google, Apple or Mozilla), if you turn on Schedule notifications.

Nothing is sold, rented or shared for marketing.

Keeping and deleting data

Data is kept for as long as you use the apps. To see what is stored about you, correct it, or have it deleted, ask the admin who approved your access. We will delete your account, your access records and your Google tokens within 30 days. Shared records that other people rely on, like a poker night’s results, are kept but your name is removed from them.

Security

All traffic uses HTTPS. Brokerage tokens are encrypted in the database. Access is checked on every request, so removing someone takes effect immediately. No system is perfectly secure, and this is a family project, so please don’t store anything you would not want a family IT person to be able to see.

Children

Famylin is not directed at children. Family members under 13 may appear in the family schedule or on trips as entered by a parent, but do not get their own accounts.

Changes and contact

If this policy changes, the date at the top changes too. Questions? ask the admin who approved your access.