FamilyPin Privacy Policy

Last updated: September 30, 2026

1. Introduction

ClearStack Apps ("we", "us", "our") operates the FamilyPin mobile application. FamilyPin lets a family share location with each other, on each person's own terms. This policy explains what the app collects, why, who can see it, how long it is kept and how to delete it. It covers FamilyPin only; the rest of ClearStack Apps is covered by our main privacy policy.

2. Location Data, and When It Is Collected

FamilyPin collects your location data only while your own sharing switch is on Live or Places only, and it keeps collecting it while the app is closed or not in use until you change the switch. A notification shows on your phone the whole time. The app explains this and asks you before any location is read, and you can turn sharing off, pause it until the next morning, or switch to Places only at any time.

  • Live: your latest position (latitude, longitude, accuracy and time) is stored so your family can see you on the map. On the family plan, a point is also kept every ten minutes, or sooner after 120 metres of movement, as a seven-day history.
  • Places only: your position is read on your phone to tell whether you arrived at or left one of your family's named places. Only the arrival or departure and the place name are stored; your position is not.
  • Paused or Off: nothing is collected. Your last position is removed from the map when you pause or turn sharing off.
  • Check in and SOS: when you tap Check in or send an SOS, that one position is sent to your family, whatever your switch says.

3. What Else FamilyPin Stores

  • Your account: your email address, your password (held by Google Firebase Authentication and never seen by us) and the name you give.
  • Your family: its name, who is in it and their roles, the named places your family's adults create, and the family's events: arrivals, departures, check-ins, SOS alerts, low-battery alerts, and people joining and leaving.
  • Battery level and charging state of your phone while you share, so your family knows why a phone may stop updating.
  • Your alert settings: whose alerts you muted and your quiet hours.
  • Push notification tokens for your phone, so alerts can reach you, and the app's language, so they arrive in it.
  • SOS text contacts: the two phone numbers you may add are kept on your phone only and never sent to us.
  • Purchase check: if an adult buys a plan, the Google Play purchase token, used only to confirm the purchase with Google and to renew or end the plan. We never see or store card details.

4. Crash Reports and Analytics

  • Firebase Crashlytics (Google LLC): crash reports, device model, operating system and app version, so we can find and fix bugs.
  • Firebase Analytics (Google LLC): basic usage events such as app opens and screen views.

These never include locations, places, names or messages. FamilyPin shows no ads and does not collect the advertising ID. Location data is never sold, never shared with advertisers and never used for anything but showing it to your family.

5. Who Can See It

  • The members of your family see your position (on Live), your current place, your battery, your events and, on the family plan, your seven-day history.
  • Every member can see who is in the family and what each person shares.
  • Nobody outside your family can see any of it. We do not look at family data. Google stores it for us as our processor.

6. Where It Is Stored

On Google Cloud (Firebase) in the United States, encrypted in transit and at rest.

7. How Long It Is Kept

  • Your latest position is replaced by the next one, and removed when you pause or turn sharing off.
  • History points are deleted after seven days.
  • Family events are deleted after thirty days.
  • You can delete your own history at any time from the Me tab.

8. Leaving, Deleting and Exporting

  • Leave the family: your member record and your history are deleted from the family.
  • Delete my account (Me tab): you leave the family, and your history, settings and account are deleted. This cannot be undone. Step-by-step: delete your FamilyPin account.
  • Delete the family (adults): every member, place, event and history point of the family is deleted.
  • Export my data (Me tab): a file of what we hold about you: your member record, history, events about you and your alert settings.
  • By email: write to support@clearstackapps.com from the address on your account and we will delete it within 30 days.

9. Permissions

  • Location, including in the background: only while your sharing switch is on Live or Places only, as described above.
  • Notifications: the sharing notification, and alerts from your family.
  • Run at start-up and ignore battery optimisation: so sharing continues after the phone restarts, while your switch is on.
  • Internet: to send and receive your family's updates.

10. Children

FamilyPin is for families. Children under 13 should use FamilyPin on a phone set up and managed by a parent or guardian. There is no way to share someone's location without it showing on their own phone.

11. Your Rights

Under UK GDPR, EU GDPR and similar laws you can ask to access, correct or delete your data, and object to how it is used. Email us at the address below. You can also complain to the UK ICO or your local data protection authority.

12. Changes to This Policy

We may update this policy. The date at the top shows the latest version.

13. Contact Us

Questions or requests: support@clearstackapps.com or clearstackapps.com/contact.