Privacy-First Architecture

FamilyOne Privacy Policy

Last Updated: September 5, 2026 • Effective Date: September 5, 2026

1. Our Fundamental Commitment

FamilyOne was designed from day one to protect household confidentiality. We do not sell your personal, medical, or financial information to third parties, data brokers, or advertisers. Our business model is funded purely by subscription memberships.

2. Information We Collect

  • Account Identity: Display name, email address, phone number, and bcrypt-hashed password credentials.
  • Household Records: Profiles of family members, medical entries, prescriptions, allergy registries, cash book ledgers, and calculation histories you choose to create.
  • Vault Documents: Encrypted files uploaded to the Vault storage engine, stored under cryptographic tenant identifiers.
  • Device & Session Tokens: Anonymized push notification tokens (APNs / FCM) and refresh tokens strictly for session authentication.

3. Medical & Household Isolation Guarantees

FamilyOne enforces strict technical invariants in its relational database layer:

Adult Privacy Invariant: Records created by an adult are private by default and cannot be accessed by other adult household members unless explicitly shared.
Tenant Isolation: Cross-household database operations are cryptographically rejected at the authorization layer.
Admin Barrier: Platform operations personnel have zero query capabilities over medical diagnosis text, transaction memos, or document binary files.

4. Third-Party Integrations & Providers

When you use external features, we interact with verified service providers under least-privilege boundaries:

  • bKash: Tokenized checkout in Bangladesh. We do not store your bKash PIN or account balance.
  • Stripe: Hosted checkout for international credit/debit cards. Zero card numbers touch our servers.
  • Apple App Store & Google Play: In-app purchase validation via server-to-server cryptographically signed receipts (JWS / Developer API).
  • Open-Meteo: Weather forecasts requested via truncated coordinates without transmitting user identifiers or IP history.

5. Data Retention & Deletion Rights

You retain complete ownership over your household data. You may request a full export of your household records or account deletion at any time from the app settings or by writing to support@familyone.us.