Your family information deserves careful handling.

Information we collect and hold

Depending on the features you use, Family InSync may collect and hold:

• account information supplied through Sign in with Apple, such as an account identifier, name and email address or private relay address;
• household information, including household names, member roles, permissions and invited caregiver details;
• family-profile information, such as names, profile types, display details and pet information;
• health information entered by a user, including medications, instructions, dose and skipped-dose records, symptoms, temperatures, notes, action-plan details and related dates;
• supported medical-document contents and related information, such as title, category, provider, filename, file type, size and relevant dates;
• nutrition-label photos saved with food records;
• first-aid inventory information, including item names, quantities, storage locations, expiry dates and notes;
• audit and security information, such as the account that updated a household record, the time of the update and the affected record type;
• support correspondence and information you choose to provide when requesting help;
• basic technical information needed to operate and secure the public website; and
• privacy-preserving website statistics, including the date and page viewed and broad traffic-source or campaign categories.

We do not use advertising SDKs, third-party behavioural analytics or cross-app tracking. Our website statistics do not use cookies or persistent visitor identifiers, do not store IP addresses in analytics reports, and do not identify individual visitors. They measure page views rather than unique people.

Photos and documents

Handling differs by feature. Supported medical documents and nutrition-label photos can be uploaded to private cloud storage for authorised cross-device access. The app may also keep a copy in its private storage on the device. Authorised downloads use short-lived private links.

Other images may remain on the device, depending on the feature. Removing a local copy does not necessarily remove a cloud copy. Downloads, screenshots and exported copies held by recipients cannot be remotely recalled.

How information is collected

We collect information:

• directly from you when you enter, photograph or select it;
• from an authorised household member who enters information about another family member or pet;
• from Apple when you choose Sign in with Apple;
• automatically when the app authenticates, synchronises or records a security audit event;
• when you contact support; and
• when you visit the website, through an aggregate page-view request that records only the page, date and broad source or campaign category.

Why we use information

We use personal information to:

• create and secure your account and family space;
• provide medication, health, document, action-plan and first-aid features;
• synchronise authorised household records across supported devices;
• schedule notifications you request on your device;
• maintain record integrity, access controls and security audit history;
• diagnose faults, respond to support and privacy requests, and improve reliability;
• understand which website pages and launch campaigns are useful, using aggregate page-view statistics; and
• meet legal, regulatory and security obligations.

Family InSync does not use the information you enter to diagnose, prescribe or make automated clinical or treatment decisions.

Storage and service providers

Family InSync uses carefully selected service providers to operate the app and website:

• Supabase provides authentication, protected database infrastructure and private file storage. The primary Family InSync project is configured in the Sydney region.
• Apple provides Sign in with Apple and the App Store platform.
• OpenAI Sites and its infrastructure providers provide publishing and hosting for this public website.
• GoDaddy provides domain registration and DNS services.
• Microsoft 365 provides the support mailbox for correspondence sent to support@familyinsync.au.

Providers process information under their own infrastructure, security and privacy arrangements. Some may process limited account, support or operational information outside Australia. We do not sell personal information.

We may disclose information when reasonably necessary to operate the service, protect users or the service, investigate misuse, or comply with applicable law.

Security

We use safeguards designed for the sensitivity of the information, including encrypted network connections, protected device session storage, authenticated cloud access and database row-level access controls. No system can guarantee absolute security. Keep your device and account secure and contact us promptly if you suspect unauthorised access.

Notifications and device permissions

Family InSync asks for camera or photo-library access only when you choose to capture or select a supported image. It asks for notification permission only when a reminder or caregiver-alert feature needs it. You can change these permissions in your device settings.

Children and other family members

An adult account holder may enter information about children, teenagers, other family members and pets. The account holder is responsible for having the authority or consent required to enter and share another person’s information and for managing household access appropriately.

Access and correction

Authorised users can view and correct many household records in the app. To ask for access to or correction of personal information that cannot be managed in the app, email support@familyinsync.au. We may need to verify your identity and authority to protect the family space.

Retention and deletion

We retain account and cloud household information while it is needed to provide Family InSync, maintain security, meet legal obligations or resolve disputes. You may delete your account in the app or use the process described on our Account Deletion page.

Information stored only on a device remains there until it is removed through the app, the app’s storage is cleared, or the app is uninstalled. Deletion from active systems may not immediately remove information from protected backups; backup copies are removed as they rotate out under applicable retention schedules.

Privacy choices and consent

You can decline optional camera, photo-library and notification permissions, disable reminders, remove information where app controls are available, manage or leave shared household access where available, or delete your account. Withdrawing a permission may prevent the related optional feature from working but should not prevent unrelated app functions.

Privacy questions and complaints

Contact us if you have a privacy question, wish to make a complaint, or believe information has been handled incorrectly:

Please describe the issue without including unnecessary health information. We will review the matter and respond within a reasonable period. If you are not satisfied with our response, you may be entitled to contact the Office of the Australian Information Commissioner.

Changes to this policy

We may update this policy as Family InSync changes. We will publish the revised policy and its effective date here. If a change materially affects how we handle personal information, we will take reasonable steps to notify affected users before the change takes effect where appropriate.