Privacy Policy

Who can use Family Hub

Only household members approved by the administrator can access the private application. The application uses Cloudflare Access and Google Sign-In, along with its own authorized-user list, to control access.

Information we handle

• Google sign-in information: Google account identifier, email address, display name, and potentially profile photo, to identify approved users and maintain their sessions.
• Shared Google Calendar events: Event titles, start and end times, locations, and descriptions from a designated family calendar, retrieved using the Google Calendar API.
• Household content: Notes, task lists, task completion information, and related records entered by approved members.
• Authentication information: Session cookies and Google OAuth tokens required to sign in and retrieve calendar data.

How Google data is used

Google account information is used for sign-in and authorization. Family Hub currently requests read-only Google Calendar event permission. The application uses that authorization to display the designated shared family calendar to approved members. It does not use that permission to create, edit, or delete Google Calendar events.

Calendar details from the designated shared calendar may be visible to all authorized Family Hub members. A member's other Google calendars are not part of the shared-calendar display.

Storage and security

Family Hub runs on privately administered infrastructure. Application records are stored in a PostgreSQL database. Google OAuth tokens are encrypted before they are stored. Access to the application is restricted by authentication and access controls. Encrypted backups may be stored on a private network-attached storage device.

Google account credentials (passwords) are not requested or stored by Family Hub. Google handles the Google sign-in and consent flow.

Sharing and service providers

Family Hub is intended for use by approved household members. Google provides authentication and Calendar API services; Cloudflare provides public connectivity and access protection. Information is not used for targeted advertising or sold to data brokers. Other authorized household members may see shared calendar events, notes, and tasks.

Retention, removal, and access requests

Records are kept while necessary for household use and backup/recovery. A household member can ask the administrator to revoke their access and remove account-related records where feasible. Copies may remain temporarily in retained backups. Google permissions can also be revoked in the user's Google Account security settings.

Google API data use

Family Hub uses information received from Google APIs only for the user-facing sign-in and calendar functionality described here, consistent with the Google API Services User Data Policy, including applicable Limited Use requirements.

Changes to this policy

This policy will be updated if Family Hub's features or data handling change materially. The effective date at the top of this page will be updated.

Contact

For privacy, data-access, or account-removal requests, contact the Family Hub administrator at mike.psi@gmail.com.