FamListFamList← Home

FamList Privacy Policy

Last updated: 2026-09-23

What we collect

To run FamList we collect:

  • Email address — used as your account identifier for sign-in
  • Display name and avatar — so household members can identify you
  • Dietary profile— allergies and other health-related dietary needs, dietary mode (which may include a religious diet such as Kosher or Halal), dislikes, free-text “taste in your own words,” and cooking preferences, used to filter and weight AI recipe suggestions. Because this can include health information and can reveal religious belief, we treat it as sensitive personal data: it is used only to generate recipes for your household and is never used for advertising or shared with data brokers
  • Pantry items, shopping list entries, saved recipes, and cooking-log entries — the household's shared content
  • AI usage counters — per-day per-user counts of AI calls, used to enforce fair-use quotas

When you scan a receipt, we send the photo to our AI provider (Google Gemini) for parsing. We do not retain the photo on our servers after the response is returned. Google retains prompt and image inputs to the Gemini API for a limited period (up to 60 days) for abuse review per their published Gemini API terms. When anyone in your household asks for recipe suggestions, we send the household's pantry, what is expiring, and the name and dietary profile of everyone eating (allergies, diet, health limits, dislikes and their own notes) to the same AI service under the same handling terms. That includes your profile when someone else asks, so their recipes avoid your allergies.

The first time you use an AI feature, the app says what it sends and asks before sending anything. You can turn AI off in the app's Settings, under AI features; with it off, your phone sends nothing to the AI.

When you scan a product barcode, the app looks it up directly with Open Food Facts, a public product database, which receives the barcode and your device's IP address. Product photos for those items load from Open Food Facts.

To protect the service from abuse, our server records security events, such as refused or rate-limited requests, with the account and IP address involved. These records are deleted after 90 days, or with your account.

Why we collect it

To provide household pantry tracking, shared shopping lists, AI recipe suggestions, and receipt scanning. We do not sell or share your data with advertisers, data brokers, or third parties for marketing purposes.

Where it lives

  • Your data is stored in Google Firebase (Firestore + Cloud Storage).
  • Authentication is handled by Firebase Auth.
  • Receipt parsing and recipe-generation requests transit through our backend (hosted on Railway) to Google Gemini for the AI processing step.
  • Standard TLS protects all transport.

Retention

We keep your data for as long as your account is active.

When you delete your account in the Settings screen, your personal data (profile, avatar, AI usage records) is erased immediately, and you are removed from every household. You can also leave a household without deleting your account, from your own member card in the app. Your authored cooking-log entries are anonymized (your name removed) so other household members' history stays coherent.

Your rights

Under GDPR (and equivalent provisions under CCPA), you can:

  • Access and edit your profile via the Edit profile screen
  • Export your data by emailing joe@jamelna.com or via Settings → Request a copy of my data. We process the request within 30 days (Article 20)
  • Delete your account at any time via Settings → Delete account (Article 17)
  • Contact us about anything privacy-related at joe@jamelna.com

Third-party processors

Children

FamList is intended for users 13 and older. We do not knowingly collect data from children under 13. Adult household members should not create accounts for children.

Changes to this policy

If we materially change what we collect or how we use it, we'll notify users via email and update the “Last updated” date above.

Contact

For privacy questions or data requests:
Joe Meléndez — joe@jamelna.com