Privacy Policy

1. Who we are

Fam is operated by Aether (“we,” “us,” or “our”) at fam.day. Fam lets authenticated users share photos, short videos, captions, comments, and reactions within a private circle (“Fam”) they belong to.

Contact: privacy@fam.day

2. Information we collect

Account and identity

• Email address: if you choose email sign-in or Sign in with Apple relays an address, for verification, account access, and account recovery.
• Name and profile details: display name and optional profile information you provide during onboarding.
• Apple ID token: if you use Sign in with Apple, we receive the authentication token Apple provides (not your Apple ID password).

Content you create

• Photos, videos, captions, comments, likes, and saves you post within your Fam.
• Invite codes or QR flows you use to join or create a Fam.

Technical and usage data

• Device type, operating system version, app version, and general diagnostic logs needed to operate and secure the service.
• Authentication session identifiers and timestamps.
• IP address and request metadata processed by our infrastructure providers when you use the app.

We do not sell your personal information.

3. How we use information

We use the information above to:

• Create and secure your account, including email one-time passcodes and Sign in with Apple.
• Deliver the Fam service: show your feed, store and display media within your circle, sync comments and reactions.
• Enforce access controls so only members of your Fam can see its content.
• Respond to support requests and protect against abuse, fraud, or security incidents.
• Comply with law and enforce our Terms of Service.

We do not sell your personal information or use your private content for advertising.

4. Who can see your content

Fam is private by design. Posts, comments, and media are visible only to members of the Fam they belong to, subject to our access rules and storage policies. Content is not published to a public feed, searchable directory, or open web URL.

Photos and videos are stored in private cloud storage with time-limited signed access links. They are not world-readable.

5. Email and in-app communications

We may send transactional emails and in-app notices for account access, security, product updates, support, and legal or service-related messages.

• Account access: email one-time passcodes are sent only when requested for sign-in or account recovery.
• Service messages: we may contact you about security, support, policy updates, or important changes to Fam.
• Optional updates: if we offer product updates or newsletters, you can unsubscribe from those messages.

You can stop receiving email codes by no longer requesting sign-in to that address. Some transactional messages may still be necessary to operate your account or meet legal obligations.

6. Service providers

We use trusted vendors to run Fam. They process data only on our instructions and for the purposes described in this policy:

• Supabase: authentication, database, and private media storage.
• Apple: Sign in with Apple authentication, when you choose that option.
• Cloud infrastructure: hosting, logging, and security operations supporting the above.

We require providers that handle personal data to maintain appropriate security and confidentiality obligations.

7. Retention

We keep account and content data while your account is active and as needed to provide Fam. Verification codes expire quickly and are not stored as long-term secrets.

If you delete your account or request deletion, we delete or anonymize personal data within a reasonable period, except where we must retain information for security, legal compliance, dispute resolution, or backup integrity (typically up to 90 days in backups).

8. Security

We use industry-standard measures including encrypted transport (HTTPS/TLS), access-controlled storage, row-level database policies, and signed URLs for media access. No method of transmission or storage is 100% secure; we work to protect your data and will notify you of significant breaches where required by law.

9. Your choices and rights

Depending on where you live, you may have the right to:

• Access, correct, or delete personal information we hold about you.
• Export a copy of your data.
• Object to or restrict certain processing.
• Withdraw consent where processing is consent-based (without affecting prior lawful processing).

To exercise these rights, email privacy@fam.day. We may need to verify your identity before fulfilling a request.

California residents: we do not sell personal information. You may request disclosure of categories collected and deletion as described above.

EEA/UK residents: our legal bases include contract performance (providing Fam), legitimate interests (security and abuse prevention), and consent (where required, such as optional communications).

10. Children

Fam is intended for users who can form a binding contract with us (typically 18+, or 13+ with parental consent where applicable). Fam is a private family-and-friends product; parents and guardians are responsible for minors they allow to use the app within their circle. If you believe a child has provided us personal information without appropriate consent, contact privacy@fam.day and we will take appropriate steps.

11. International transfers

We may process data in the United States and other countries where our providers operate. When we transfer data internationally, we use appropriate safeguards such as standard contractual clauses where required.

12. Changes

We may update this policy from time to time. We will post the revised version with a new “Last updated” date. Material changes may be communicated in-app or by email where appropriate.

13. Contact

Questions about this policy:

• Privacy: privacy@fam.day
• Support: support@fam.day