Privacy Policy

Last updated: January 11, 2026

At Famely, we take your privacy seriously. This policy explains what information we collect, how we use it, and your rights regarding your data.

1. Introduction

This Privacy Policy explains how Famely ("we", "us", or "our") collects, uses, shares, and protects your personal information when you use our platform.
Famely is operated by an individual based in Finland. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
By using Famely, you acknowledge that you have read and understood this Privacy Policy.
If you do not agree with this Privacy Policy, please do not use Famely.

2. Data Controller

The data controller responsible for your personal data is Famely, operated from Finland.
For all privacy-related inquiries, you can contact us at: famelydevelopment@gmail.com
We will respond to your inquiries within 30 days as required by GDPR.

3. Information We Collect

Account Information: Username, email address, and password (securely hashed using Argon2). We also store a normalized version of your email to prevent duplicate accounts.
Profile Information: Any information you voluntarily provide, including your bio, profile picture, social media links, tags, and badges.
Usage Data: Information about how you interact with Famely, including Spotlight history, profiles viewed, likes given and received, favorites, and search queries.
Device Information: Device type, operating system, app version, unique device identifiers, push notification tokens, and general location (country/region) derived from your IP address.
Log Data: IP addresses, browser type, access times, pages viewed, referring URLs, and other standard server log information.
Communications: Records of your communications with us, including support requests and feedback.
Invite Data: Information related to the invite/referral system, including invite codes and relationships between inviters and invitees.

4. How We Use Your Information

Provide Services: To operate Famely, including the Spotlight feature, profile discovery, search functionality, and social connections.
Profile Review: To review all profiles before they appear in Spotlight or search results, ensuring community safety and guideline compliance.
Personalization: To personalize your experience and provide relevant content based on your preferences and usage patterns.
Communications: To send you verification emails, password resets, security alerts, and important service updates. We may also send optional notifications about Spotlight selection or likes received.
Analytics & Improvement: To analyze usage patterns, identify trends, and improve our platform's features, performance, and user experience.
Safety & Security: To detect, prevent, and address fraud, abuse, security incidents, and violations of our Terms of Service.
Legal Compliance: To comply with legal obligations, respond to lawful requests, and protect our rights and the rights of others.

5. Legal Basis for Processing (GDPR)

Contract Performance: Processing necessary to provide you with our services as outlined in our Terms of Service (e.g., account creation, profile display, Spotlight participation).
Legitimate Interests: Processing for our legitimate business interests, such as improving our services, preventing fraud, and ensuring platform security, provided these interests are not overridden by your rights.
Consent: Processing based on your explicit consent, such as optional push notifications or marketing communications. You may withdraw consent at any time.
Legal Obligation: Processing necessary to comply with legal requirements, court orders, or regulatory requests.

6. Information Sharing & Disclosure

Public Profile: Your profile information (username, bio, profile picture, social links, tags, badges) is publicly visible to all Famely users when you appear in Spotlight, search results, or when users visit your profile directly.
We Do Not Sell Your Data: We never sell, rent, or trade your personal information to third parties for their marketing purposes.
Service Providers: We share data with trusted third-party service providers who assist in operating our platform, including cloud hosting, database services, email delivery, and analytics. These providers are bound by strict data processing agreements.
Legal Requirements: We may disclose information when required by law, court order, or government request, or when necessary to protect our rights, safety, or property, or that of our users.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
With Your Consent: We may share information for other purposes with your explicit consent.

7. Cookies & Tracking Technologies

Essential Cookies: We use essential cookies to maintain your session, remember your authentication status, and ensure the platform functions correctly. These are necessary for the service to operate.
Analytics: We may use basic analytics to understand how users interact with Famely in aggregate form. This helps us improve the platform.
No Third-Party Advertising: We do not use third-party advertising cookies or tracking pixels. We do not display ads on Famely.
Mobile App: Our mobile app may collect device identifiers and usage statistics for crash reporting and performance monitoring.
Your Choices: Most browsers allow you to block or delete cookies. However, blocking essential cookies may prevent you from using Famely.

8. International Data Transfers

Famely is operated from Finland (European Union). Your data is primarily processed and stored within the EU/EEA.
Some of our service providers may process data outside the EU/EEA. In such cases, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.
By using Famely, you acknowledge that your information may be transferred to, stored, and processed in countries outside your country of residence.
We take all reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

9. Data Retention

Active Accounts: We retain your personal data for as long as your account is active and as necessary to provide you with our services.
Account Deletion: Upon account deletion, we will delete or anonymize your personal data within 90 days, except where retention is required by law or for legitimate business purposes (e.g., resolving disputes, enforcing agreements).
Backup Systems: Data in backup systems may persist for a limited period after deletion as part of our standard backup retention cycles.
Anonymized Data: We may retain anonymized or aggregated data that cannot identify you for analytical purposes indefinitely.
Legal Retention: Some data may be retained longer if required to comply with legal obligations, resolve disputes, or enforce our agreements.

10. Children's Privacy

Famely is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16.
If you are under 16, you may not create an account or use Famely.
If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information as quickly as possible.
If you believe we have inadvertently collected information from a child under 16, please contact us immediately at famelydevelopment@gmail.com.

11. Data Security

Password Security: All passwords are hashed using Argon2, an industry-leading secure hashing algorithm. We never store passwords in plain text.
Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS/SSL (HTTPS).
Encryption at Rest: Sensitive data is encrypted at rest using industry-standard encryption methods.
Access Controls: We implement strict access controls and authentication mechanisms to limit who can access user data.
Security Monitoring: We continuously monitor our systems for potential vulnerabilities and security threats.
Incident Response: We have procedures in place to detect, investigate, and respond to security incidents.
No Guarantee: While we implement robust security measures, no system is 100% secure. We cannot guarantee absolute security of your data.

12. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR.
If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.
Notification will include the nature of the breach, likely consequences, measures taken to address the breach, and contact information for further inquiries.

13. Your Rights Under GDPR

Right of Access: You can request a copy of all personal data we hold about you.
Right to Rectification: You can update or correct inaccurate personal data at any time through the app or by contacting us.
Right to Erasure ("Right to be Forgotten"): You can request deletion of your account and personal data, subject to certain exceptions (e.g., legal obligations).
Right to Data Portability: You can request a copy of your data in a structured, commonly used, machine-readable format (JSON).
Right to Restrict Processing: You can request that we limit how we use your data in certain circumstances.
Right to Object: You can object to processing of your data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your residence, place of work, or where an alleged infringement occurred. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).
To exercise any of these rights, please contact us at famelydevelopment@gmail.com. We will respond within 30 days.

14. Third-Party Services

Famely allows you to link to and display content from third-party social media platforms (e.g., Twitter/X, Instagram, TikTok, Discord, etc.).
When you add social links, we only store the link/username you provide. We do not access your accounts on those platforms.
Your interactions with third-party services are governed by their respective privacy policies. We encourage you to review them.
We use the following categories of third-party services:
• Cloud Infrastructure: For hosting and data storage
• Database Services: For storing user data securely
• Email Services: For sending transactional emails
• Push Notification Services: For mobile app notifications
We carefully select providers that meet our security and privacy standards.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
For significant changes, we will provide notice via email and/or a prominent in-app notification at least 14 days before the changes take effect.
Minor changes (such as clarifications) may be made without prior notice.
Your continued use of Famely after the effective date of any changes constitutes acceptance of the updated Privacy Policy.
The "Last Updated" date at the top indicates when this policy was most recently revised.
We encourage you to periodically review this Privacy Policy to stay informed about how we protect your information.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: famelydevelopment@gmail.com
Response Time: We will respond to your inquiries within 30 days.
For GDPR-related requests, please include "GDPR Request" in your email subject line to help us process your request promptly.