Privacy Policy

Famble is currently operated from Finland by its founder as an individual, who is the data controller for the personal data described here. For the controller’s identity and any privacy request, contact us at hello@famble.co. We intend to transfer operation of Famble to a Finnish company once it is registered, and will update this page accordingly. In this policy, “Famble”, “we” and “us” refer to that operator.

Famble is GDPR-first and built for families in Europe, but it is available to users elsewhere; this policy applies to everyone who uses it.

Famble helps a household turn messy inputs — emails, reminders, appointments, bills, tasks, and documents — into clear plans. Famble drafts proposals using AI. A person in your household reviews and confirms them. Famble does not change your calendar, tasks, bills, or household records on its own.

We collect the following categories of personal data:

• Account & profile: your email address, and any name, photo, phone number, time zone, and notification preferences you provide.
• Household & members: the household you create or join, the people you add (including children and other family members who are not Famble users), and details you enter about them such as names, birthdays, ages, roles, and notes.
• Content you put in:items you forward or upload (such as school emails, photos, and documents), plus the events, tasks, lists, meal plans, bills, and other records you or Famble create — and which of Famble’s proposals you confirm or dismiss.
• Connected Google Calendar data: if you choose to connect Google Calendar (see below), the event details Famble reads on a read-only basis.
• Technical & usage data: basic information needed to run and secure the service, such as log and device data. Our marketing site uses privacy-friendly, cookieless analytics; we do not use advertising or cross-site tracking cookies.

We use your personal data to:

• provide the service — read the inputs you give Famble and draft the proposals you review and confirm;
• operate, secure, maintain, and improve Famble;
• communicate with you about your account, invitations, and important changes.

Our legal bases under the GDPR are: performance of a contract (to provide the service you sign up for); consent (for optional integrations such as Google Calendar, which you can withdraw at any time); and our legitimate interests (to keep Famble secure and working). We do not sell your personal data, and we do not use it for advertising.

Famble uses AI to read your inputs and draft proposals. To do this, the content you give Famble — such as the text of forwarded emails, photos, documents, notes, and the relevant household context — is sent to our AI provider, Anthropic (the Claude models), which processes it on our behalf to return structured suggestions.

• AI proposes; a person in your household confirms. Nothing takes effect until you approve it.
• Data sent for AI processing is scoped to your household and used to generate your proposals. We do not sell it, and we do not use it to train AI models.
• AI proposals can be imperfect, which is exactly why every suggestion is yours to review, edit, or dismiss.

Your household can have its own Famble email address. When you forward a message to it, Famble stores and reads that message (and its attachments) to draft proposals, in the same way as anything else you add. Because forwarded messages may contain other people’s information (for example, a school or another parent), only forward content you have the right to share.

Connecting Google Calendar is optional. If you choose to connect it:

• Famble requests read-only access only (the calendar.readonly scope). Famble cannot create, edit, or delete anything in your Google Calendar.
• Famble reads event details such as title, time, location, and your own attendance status to show your schedule and draft proposals. It does not read event descriptions/notes.
• Your Google sign-in tokens are stored encrypted. When you disconnect, Famble revokes its access at Google and deletes the calendar events it had synced.

Famble’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

We do not sell your data. We share it only with service providers (“sub-processors”) who process it on our behalf to run Famble, under contracts that require them to protect it:

• Supabase — database, authentication, and file storage (hosted in the EU, Ireland).
• Anthropic — AI processing of your inputs to draft proposals.
• Vercel — application hosting.
• Cloudflare — email routing and website delivery.
• Inngest — background processing (such as running extraction and calendar sync).
• Resend — sending transactional email (such as invitations and notifications).
• Google — only if you connect Google Calendar.

We may also disclose data where required by law, or to protect the rights, safety, and security of Famble and its users.

Your core data is stored in the EU (Ireland). Some of our sub-processors are based outside the EU/EEA, including in the United States. Where personal data is transferred outside the EU/EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

• We keep original images and PDFs from forwarded emails and uploads until you delete them; you can delete a capture and its original files at any time, or contact us to request deletion. We are adding automatic retention controls to remove these originals after a limited period. The structured items you confirm remain as household records unless you delete them.
• Your account and household data are kept while your account is active, and deleted when you delete your account (see below).
• Integration tokens are kept only while the integration is connected, and removed when you disconnect or delete your account.

We use reasonable technical and organizational measures to protect your data, including encryption in transit, encryption of sensitive integration tokens at rest, strict per-household access controls (row-level security), and limiting access to credentials and production data. However, no method of transmission or storage is completely secure; while we work to protect your data, we cannot guarantee absolute security.

Under the GDPR you have the right to access your personal data, and to rectify, erase, restrict, or object to its processing; to data portability; and to withdraw consent (for example, by disconnecting an integration) at any time. To exercise any of these, email hello@famble.co.

You also have the right to lodge a complaint with a supervisory authority. In Finland this is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).

You can review, edit, and delete individual items and plans in your household at any time, and disconnect any integration you’ve added. To delete your account and household data, contact us at hello@famble.co and we will delete it. When we delete your account, we remove your personal data, except where we must retain limited information to meet legal obligations.

Famble is intended for adults running a household. Children are not Famble users. An adult account holder may add information about children in their household (such as a name, age, or schedule) to help coordinate family life, and is responsible for that information and for having the authority to provide it.

We may update this policy as Famble develops. We’ll change the “last updated” date above and, for material changes, let you know.

Questions about privacy or a request about your data? Email hello@famble.co.