Privacy Policy

Effective 06.10.2026

Family Assistant is a small, independently run app that helps a family share shopping lists, tasks, a calendar, kids' pocket money and a weekly meal plan. This policy explains what we store, why, and how to have it removed. Questions: yan@rateof.ru.

What we store

• Your account: email address, an optional display name, and your password as a one-way hash — we never see the password itself.
• Your family's content: family name and members with their roles, shopping lists, tasks, meal plans, kids' allowance settings and transactions, calendar events created in the app, and the family's time zone.
• Children without email: parents can add a child by name only. We store just that name; the child cannot sign in.
• Invitations: the email address a parent invites, so we can send the invitation.
• Google Calendar (only if a parent connects it): the Google account email and access/refresh tokens, encrypted at rest, plus the ID of the calendar the family picked.
• Telegram (only if a parent links a group): the group's chat ID.
• Yandex Alice (only if linked): the anonymous Yandex user ID Alice sends us, and recent link attempts to block code guessing.
• A session cookie that keeps you signed in. We use no analytics, advertising or tracking cookies.
• Server logs (requests and errors) for running and debugging the service, kept for a limited time by our hosting provider.

Google user data

When a parent connects Google Calendar, Family Assistant asks for access to the Google account's calendars and email address. We use it only to:

• list the account's calendars, so the parent can pick the family calendar;
• show that calendar's events in the app and the Telegram bot;
• create, change and delete events when a family member asks the app or the bot to;
• show which Google account is connected.

Events from Google are read live when you open the calendar; we don't keep copies of them. Google data is never sold, never used for advertising, and never shared with anyone except as needed to show it to members of your own family. Family Assistant's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

A parent can disconnect Google at any time in Family → Calendar setup → Disconnect Google. This revokes our access and deletes the stored tokens. You can also remove access at myaccount.google.com/permissions.

Who can see your data

Only members of your family see your family's content. Messages the bot posts in a linked Telegram group are visible to everyone in that group. We do not sell or rent personal data.

Service providers

To run the app we rely on:

• Railway: hosting and the database;
• Google: Calendar (if connected), email delivery of invitations, and web fonts;
• Telegram: the bot (if linked);
• Yandex: the Alice voice skill (if linked).

Each of them processes data under its own privacy policy.

How long we keep data

We keep your data while your family uses the app. Disconnecting Google, Telegram or Alice deletes the related link data straight away. To delete your account or your whole family's data, email yan@rateof.ru from the address you signed up with. We delete it within 30 days.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it — email yan@rateof.ru. If you are in the EU/EEA or the UK, you can also complain to your local data protection authority.

Children

Children use Family Assistant as part of a family set up and managed by a parent. Parents decide which children are added and can remove them at any time.

Security

Passwords are hashed, Google tokens are encrypted at rest, and all traffic uses HTTPS. No system is perfectly secure; if something goes wrong that affects your data, we will tell you.

Changes

If this policy changes, we'll update this page and its date. For significant changes we'll also let families know in the app.