FamilyChaosFamilyChaos

Privacy Policy

Effective date: 2026-09-17 · Version 1.6

1. Who We Are

FamilyChaos is operated by Justin Robinson (“we”, “us”, “our”). For privacy questions, contact us at privacy@familychaos.ca.

2. What Data We Collect and Why

We collect the following personal data:

  • Account data: display name, email address, hashed password — needed to create and authenticate your account.
  • Family content: calendar events, lists, chore assignments, bills, notes, meal plans, and recipes — the core service you signed up for.
  • Vault entries: passwords and secure notes stored in the Vault are end-to-end encrypted on your device. We store only encrypted ciphertext and never have access to the contents.
  • External calendar connections: if you choose to connect Google Calendar, Microsoft Calendar, iCloud, or an ICS feed, we store encrypted OAuth credentials or the ICS URL and import event data (titles, descriptions, times, and locations) from those services. We do not access your external account beyond the calendar data you specifically grant access to.
  • Child member data: display name, date of birth, parental consent record — required to comply with COPPA, GDPR Article 8, and PIPEDA when a child joins the family. See our Children's Privacy Notice.
  • Billing data: payment information is processed by Stripe. We do not store your card number.
  • Technical data: IP address (used briefly at child invite time to determine applicable privacy law — not stored), device session metadata (user agent, last active time).
  • Website analytics: when you visit our marketing website (familychaos.ca), our self-hosted Umami analytics collects page views, browser type, device type, and referring URL. Umami does not use cookies, does not collect personal data, and does not track you across websites. All analytics data is processed and stored on our own servers in Canada and is not linked to your account.

3. Legal Basis for Processing

  • Contract performance (Art. 6(1)(b) GDPR — processing necessary to deliver the service you signed up for): account data, family content, external calendar connections, billing data.
  • Parental consent (Art. 6(1)(a) + Art. 8 GDPR / COPPA / PIPEDA — explicit consent from a parent or guardian): child member data.
  • Legitimate interest (Art. 6(1)(f) GDPR — purposes we have a reasonable basis to pursue without overriding your rights): IP-based jurisdiction detection (brief, in-flight, non-stored); website analytics (aggregate, non-personal, cookieless page-view data collected by self-hosted Umami and used to improve the site).

4. Who We Share Data With

  • Stripe — payment processing. Subject to a Data Processing Agreement.
  • Hosting provider — database and compute infrastructure. Subject to a Data Processing Agreement.
  • AWS SES — transactional email delivery (invites, consent emails). Subject to AWS's Data Processing Agreement.
  • Google LLC — if you connect Google Calendar, event data is retrieved via the Google Calendar API. Subject to Google's Data Processing Terms.
  • Microsoft Corporation — if you connect Microsoft Calendar, event data is retrieved via Microsoft Graph. Subject to Microsoft's Data Processing Terms.
  • Apple Inc. — if you connect iCloud Calendar, calendar data is retrieved via Apple's CalDAV service.
  • We do not sell your data. We do not share your data with advertisers. We do not share your in-app account or family data with any analytics provider.

5. International Transfers

All personal data is stored, processed, and backed up in Canada (OVHCloud, Quebec). Transactional emails are delivered via AWS SES in the ca-central-1 (Montreal) region. No personal data is transferred outside Canada for storage or processing purposes.

Canada has an EU adequacy decision under GDPR Article 45, meaning transfers of personal data from the European Economic Area (EEA) to FamilyChaos are permissible without additional safeguards.

6. How We Protect Your Data

We implement security procedures to protect the confidentiality and integrity of your personal data:

  • Encryption in transit: all communication between your device and our servers is encrypted using TLS (HTTPS).
  • Encryption at rest — OAuth credentials: Google Calendar, Microsoft Calendar, and iCloud OAuth tokens are encrypted with AES-128 (Fernet) before being stored in our database. The encryption key is derived from a secret that is never stored in the database itself.
  • Vault — end-to-end encryption: passwords and secure notes stored in the Vault are encrypted on your device with AES-256-GCM before being sent to our servers. We store only ciphertext and are technically unable to read Vault contents.
  • Password hashing: account passwords are stored as bcrypt hashes. We never store your password in plaintext.
  • Access controls: all data is scoped to your family. Members cannot access data belonging to other families.
  • Security headers: all API responses include security headers (X-Content-Type-Options, X-Frame-Options, Referrer-Policy) to defend against common web vulnerabilities.

No security measure is perfect. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities as required by applicable law.

7. How Long We Keep Your Data

  • Active account data: retained for the duration of your subscription.
  • After cancellation or trial expiry: data retained for 90 days, then permanently deleted. You may request immediate deletion at any time from Settings → Account → Delete family.
  • Parental consent records: retained indefinitely with the child's name removed, as required by law.
  • When a child member reaches the age of majority (18 in most jurisdictions), their data transitions from parental oversight to their own independent rights. The family admin is prompted to review the child's member status. The now-adult member may contact us at privacy@familychaos.ca to exercise their independent rights of access, correction, deletion, or portability with respect to their own personal data.
  • Backup copies: deleted within 7 days of the active data being deleted (automated backup expiry).

8. Your Rights

Depending on where you live, you have the right to:

  • Access the personal data we hold about you — Settings → Members → Export
  • Correct inaccurate data — Settings → Profile
  • Delete your account and data — Settings → Account → Delete
  • Restrict or object to processing — contact us at privacy@familychaos.ca
  • Data portability — request an export at privacy@familychaos.ca
  • Withdraw consent (children only) — Settings → Members → Withdraw Consent
  • Lodge a complaint with your supervisory authority (GDPR: your national DPA; Canada: OPC; US: FTC)

9. Cookies and Tracking

In the app: we use a refresh token stored in localStorage to keep you signed in. The app does not set any tracking, advertising, or analytics cookies.

On this website (familychaos.ca): we use self-hosted Umami analytics, a privacy-preserving tool that does not set any cookies, does not collect personal data, does not fingerprint your device, and does not track you across websites. Analytics data consists solely of aggregate page-view counts, browser type, device type, and referring URL. It is processed and stored on our own servers in Canada and is not linked to your account.

10. Contact Us

Privacy Officer: Justin Robinson
Email: privacy@familychaos.ca
We will respond within 30 days.