Privacy Policy

Fmly.Club is designed to keep your family's board - members, chores, points, calendar, and rewards - in your browser's local storage on the device you use it on. The app works this way whether or not you ever enable sync.

Some information does reach our servers even on the free plan. When you create a household you verify an email address (used for billing and account recovery), and the free plan includes a single-device cloud backup so you can recover your board if you lose or reset that one device. Recovering or backing up a board means your board data is transmitted to and stored on our servers. Upgrading to Pro adds multi-device sync, which keeps your board in step across every device in the household.

We do not run advertising, use third-party analytics on your family's data, or sell or share it. The sections below explain exactly what stays on your device, what reaches our servers, and how long we keep it.

Your board is held in your browser's local storage on the device you use. That is convenient and private, but local storage is not permanent. Your board can be erased if you or your browser:

• clear site data, cookies, or browsing history for Fmly.Club;
• reset, reinstall, or switch browsers;
• uninstall the app or lose, damage, or replace the device;
• use private or incognito browsing, which discards storage when the window closes.

We cannot recover a board that exists only on your device - if it is not backed up to our servers, we never had a copy to restore. Keeping your own copy is your responsibility. Use Manage, then Your data, then Download your data to save a complete copy you control, and keep your recovery email current so the single-device cloud backup (free) or sync (Pro) can bring your board back where that option is available. This mirrors the disclaimers in our Terms of Service.

The data controller for your personal data is Allu Limited, trading as Fmly.Club. You can reach us at privacy@fmly.club.

On the device, and on our servers whenever backup, recovery, or sync transmits it, the board may contain:

• Each family member's nickname, an avatar colour, a role (adult or child), a join date, and an optional time zone. We do not ask for or store full names, surnames, dates of birth, photos, location, or contact details for members.
• Chores, schedules, calendar events, points, and rewards you enter
• Your household's country and region (used to pick starter content and time zones)
• The account owner's email address (for account recovery and billing)
• Device identifiers (a locally generated ID per device, used for backup, sync, and access control)

The household PIN is stored only as a salted one-way hash, never in plain text, on your device and (when backed up or synced) on our servers.

We practise data minimisation: we collect only what the app needs to work. We do not run advertising, use third-party analytics on your family's data, or sell or share it.

To protect the service from abuse we briefly process the IP address of the device making certain requests:

• When you request an email verification code, we store the request's IP address for a short window (about 10 minutes) to rate-limit code requests, then it is removed.
• When a device looks up an invite code, we store only a one-way hash of a coarse IP "bucket" (not the raw address) for about 24 hours to detect automated probing, then it is removed.

This short-lived, first-party processing rests on our legitimate interest in preventing abuse and keeping the service secure. We do not use IP addresses for advertising, profiling, or tracking, and our own application logs do not record IP addresses or household content.

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your data under the following legal bases:

• Contract performance: processing necessary to provide backup, recovery, sync, and billing to you.
• Legitimate interest: keeping the service secure and preventing abuse (including the short-lived IP processing described above).
• Consent: where you have opted in (for example, enabling sync, providing an email address, or turning on digest emails).

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability - receive your data in a structured, machine-readable format
• Object to processing based on legitimate interest
• Withdraw consent at any time without affecting the lawfulness of prior processing
• Lodge a complaint with your local data protection supervisory authority

To exercise any of these rights, contact us at privacy@fmly.club. We will respond within 30 days.

Fmly.Club is directed at parents and guardians, who set up and run the household. Children use Fmly.Club only as members within a household created and controlled by an adult; they do not hold their own accounts and are not asked to provide any personal information themselves.

Fmly.Club is built to be used by families, including young and pre-reading children. Because of that we take specific care:

• There are no individual child accounts. We never ask a child for an email, password, or any personal information.
• The account holder is always an adult (18 or older). To create a household, the adult verifies an email address and affirms that they are the parent or legal guardian of the children in the household. An in-app attestation to this effect is part of the setup step.
• The adult controls every child entry. Children never type in their own details; an adult adds each member and chooses the nickname and avatar colour.
• No advertising, no third-party analytics, no data sharing.
• The only member information stored is a nickname, an avatar colour, a role (adult or child), a join date, and an optional time zone - no age, birthdate, photo, location, or contact information is collected from children.

A parent can review their household's data (via Download your data) and delete it entirely at any time (via Delete this board). Parents may also contact us at privacy@fmly.club to review, delete, or refuse further collection of their child's information.

If you are a California resident, you have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to know: what personal information we collect, use, disclose, and sell.
• Right to delete: request deletion of your personal information.
• Right to opt-out: we do not sell or share your personal information for cross-context behavioural advertising.
• Right to non-discrimination: we will not discriminate against you for exercising your privacy rights.
• Right to correct: request correction of inaccurate personal information.

To exercise these rights, contact us at privacy@fmly.club. We will verify your identity before processing any request.

In production, Fmly.Club sets no first-party cookies and uses no analytics, advertising, or tracking cookies, scripts, pixels, or fingerprinting. Because the only storage we use is strictly necessary to run the app, we do not show a cookie consent banner.

Instead of cookies, the app keeps your household data in your browser's local storage, with a few short-lived flags in session storage and a service-worker cache for offline use. None of that storage is transmitted to us on its own. A single strictly-necessary cookie (fmly-gate) is used only on our non-production preview site to control access; it is never set in production. For the full list, see our Cookie Policy.

We rely on the following service providers, who process data only to help us run Fmly.Club:

• Supabase (hosted database that stores your board when backup, recovery, or sync is used) - Privacy Policy
• Vercel (hosting and content delivery; processes standard request metadata such as IP addresses and browser headers as part of serving the site) - Privacy Policy
• Stripe (payment processing for Pro subscriptions). When you subscribe we send Stripe your household identifier and, if present, your owner email; we do not send Stripe member nicknames, chore content, names, or addresses - Privacy Policy
• Resend (sends our transactional and digest emails, such as verification codes, sign-in links, and the optional weekly digest). Email content can include member nicknames and chore names - Privacy Policy
• Slack (operational alerts to our own team). We send ourselves error and feedback alerts through Slack. Error alerts have emails and tokens stripped out; a feedback alert includes the free-text message you type into the in-app feedback box, which can contain whatever you choose to write, along with your household identifier - Privacy Policy

Our display fonts originate from Google Fonts but are self-hosted from our own servers at build time, so your browser does not connect to Google to load them and no data reaches Google when you use Fmly.Club.

If you are located outside the United States, your data may be transferred to and processed in the United States or other countries where our service providers operate. When backup, recovery, or sync is used, household data is stored in Supabase's infrastructure. We ensure appropriate safeguards are in place for cross-border transfers, including Standard Contractual Clauses (SCCs) where required by GDPR.

Your board always lives on your device in local storage. When backup, recovery, or sync is used, a copy is also stored using Supabase (a hosted Postgres provider) acting as our data processor, and access is restricted to the household's own authenticated devices. If you never back up or sync, your board stays only on your device.

We implement reasonable technical and organisational measures to protect your data, including access controls and regular reviews. Our hosting providers (Supabase and Vercel) encrypt data in transit (TLS) and at rest. However, no method of electronic transmission or storage is 100% secure, and data kept only in your browser's local storage is protected only by the security of your own device and browser.

In the event of a data breach affecting your personal information, we will notify affected household owners via the email address on file and, where required by law, the relevant supervisory authority, within 72 hours of becoming aware of the breach. The notification will include the nature of the breach, the data affected, and the steps we are taking.

Resolved history (completed and decided items) is kept for 30 days on the free plan and 6 months on Pro, then removed automatically; balances are preserved via periodic snapshots. Deleted items are purged permanently after a 60-day grace period.

A household that goes unused for a long time is cleaned up automatically, but only if it has an owner email on file: we send a warning email after about 30 days of inactivity, and if the household stays inactive for a full year we delete it automatically. Boards that were never backed up or synced are not on our servers to begin with.

If a Pro subscription lapses, the subscription becomes past due for a 7-day grace period. If it is not brought back, the household is downgraded to the free plan; your board is not deleted, but free-plan limits then apply (including the 30-day resolved-history retention above). We do not hold a separate copy of lapsed subscribers' data beyond this.

When you subscribe to Pro, Stripe creates a customer record that includes your owner email and billing history. When you delete your board, we remove your household data from our database immediately and also delete your Stripe customer record, which cancels any remaining subscription. Stripe may still keep transaction and payment records under its own retention schedule (for example, to meet tax and anti-fraud obligations); we do not control that retention. If the Stripe deletion fails for any reason we are alerted and complete it by hand, and you can always ask us to confirm at privacy@fmly.club.

• Export: download a complete copy of everything we hold on our servers for your household, including deleted records awaiting removal, at any time from Manage, then Your data, then Download your data. Each download is logged and limited to three per day per household.
• Delete: permanently delete your entire household, including the server copy where one exists, from Manage, then Delete this board. Deletion of the server copy is immediate.
• Access & correction: you can view and edit all of your family's data directly in the app.
• Withdraw consent: disable sync at any time to stop multi-device data transmission. Previously stored data can be deleted using Delete this board or on request.

For a device-only board we hold nothing on our servers, so an export or deletion request is served by the device itself using the controls above.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a new effective date and version number, and where possible, via an in-app notice or email to the household owner. Your continued use of Fmly.Club after the updated policy takes effect constitutes your acceptance of the changes. Previous versions are available upon request.

For privacy-related questions or to exercise your rights, contact us at privacy@fmly.club. For billing and general support, contact support@fmly.club.

If you are in the EEA and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.