FamCheck
← FamCheck

Privacy and terms

Plain English. It is short because most of it is built into how the thing works, not promised.

What we hold

The days you highlight, the events and routines you type, the notes you dictate, the care notes you write, the checklists sitters tick, and any documents you upload. To sign you in we keep a peppered hash of your email address rather than the address itself, and the address exists only inside a sign-in record that deletes itself in fifteen minutes. If you arrived here from a search ad, or from any other tagged link, what that address carried sits on your family record until you delete it: the click id Google or Microsoft put there, where the link said it came from, the campaign tag, the keyword we bid on (the word we paid for, never what you typed), how it was matched, and the time of the click. The next section says exactly what we do with them. If you subscribe, two ids from Stripe sit there too, and Paying below says exactly what they are. Nothing else.

What we never ask for

No diagnoses. No therapy notes. No mental-health history. No insurance or ID numbers. No social security numbers. The care notes are for instructions, where the inhaler is, what to avoid and why, what to do if something happens, and deliberately not for a medical file. That is a design decision, not an oversight.

Who can see what

What we do not do

We never show you an advertisement. No tracking of you as a person, no third-party analytics, no cookies that follow you anywhere, and no profile of you or your children. The app loads no outside scripts, fonts or images, so there is no third party in the page to sell anything to, and we do not sell, rent or share your calendar, your notes, your documents or your children with anybody. We do keep a plain count of how many people opened a page and how many started a free week, whole numbers only, never tied to you and never joined to your family. That is how we know whether this is worth building.

What an ad joins to your family, said plainly, because we buy search ads. If you got here by clicking one, the click id that Google or Microsoft put in that address is kept on your family record, with the tags listed above beside it. When something happens we paid to find out about, you opened the sample, you started the free week, you added a card, you paid, we hand that click id back to them in a file, with the name of that one step, the date and the amount. That is how we learn which ad brought a real family. The click id and that one step is all that goes back. Never your email, never your name or your children's, never a day on your calendar, never a note, never a document. Delete your family and the click id goes with it. The rows already written carry nothing that points back to you and expire on their own within 120 days. If you did not arrive from an ad, none of this exists for you.

If you type a question into the Ask box on the front page, that question and the answer it got are kept for 90 days with nothing attached that says who asked, and a question we could not answer is kept for 180 days so the missing answer gets written. Please do not put a name in it.

Paying

The calendar itself needs no card, and a free code never touches the payment company at all. The free week of the full plan starts when you add a card.

If you do subscribe, the card is typed on Stripe's own page, and so is the page where you later change it or cancel. We never see or store your card number. We do not hand Stripe your email either, so what it knows about you is what you type there, and it keeps its own record of a payment that we cannot delete for you.

What comes back to us is two ids, one for the customer and one for the subscription. We keep those, whether you are paid up, and the date the period ends. No card number, no name, no address. Delete the family and those ids go with it, and we cancel the subscription at Stripe in the same act.

Your file is yours

You can download everything we hold, any time: the calendar, events, notes and record as one file, and each uploaded document on its own, from Your data in the app. We offer it to you before you delete anything, on purpose.

Deleting

You can remove yourself, or delete the whole calendar, from the same place. When you delete, it is gone, the calendar, the documents, every sitter link, the share link. We keep no copy and there is nothing to restore.

The one thing that stays is the answers to the three questions we ask on the way out, if you choose to answer them, and they are stored with nothing that points back to you. Records says exactly what that means.

One exception, and it protects you both. If two people are on a calendar, neither can delete it while the other is still there. It holds a custody history that might matter to either of you. Each of you can leave and take your own copy; the record stays with whoever remains. Once you are the only one left, you can delete all of it.

Security, honestly

Each family's calendar is stored separately and cannot be reached from another family's sign-in. Sign-in is by emailed link or a passkey, there is no password to steal. Sitter links carry only what you sent and expire by themselves.

What we cannot claim: no independent security firm has audited this. It is a small product built carefully and reviewed by its makers. If that matters to you, it should weigh in your decision.

This is not legal advice

FamCheck can print a clear record of what happened, and people do use it in custody matters. We are not lawyers, this is not legal advice, and nobody can promise a court will accept any particular record. Ask someone qualified about your own situation.

The plain terms

Reaching a person

Write to hello@famcheck.co.

Last updated 19 September 2026.