Family Board
Sign In

Privacy Policy

Last updated: October 2026

1. Who we are

Family Board is a family organisation service operated by an individual sole trader in the United Kingdom. If you have any questions about this policy or your personal data, please contact us at hello@familyboard.app.

2. What data we collect

  • Account information: your name and email address when you register.
  • Family configuration: your family name, the names of family members you add, and your home location (used to display local weather on your boards).
  • Device information: identifiers for kiosk devices you register to your account.
  • Billing information: subscription and payment data. Payment card details are handled entirely by Stripe and are never stored on our servers.
  • Usage data: session identifiers and standard server logs used to operate the service securely.
  • Calendar access: if you choose to connect a Google or Microsoft calendar, the access tokens needed to show your events on your boards. See section 6.

3. How we use your data

  • To provide and maintain the Family Board service.
  • To process subscription payments and manage your billing.
  • To display relevant information (weather, calendar, family content) on your registered boards.
  • To communicate with you about your account or service updates.

We do not sell your data or use it for advertising.

4. Legal basis for processing (UK GDPR)

We process your personal data on the following lawful bases:

  • Contract: processing necessary to provide the service you have signed up for.
  • Legitimate interests: maintaining service security, preventing fraud, and improving the product.

5. Third-party processors

We share data with the following sub-processors only to the extent necessary to operate the service:

  • Cloudflare, Inc. — cloud infrastructure and data storage (Cloudflare D1). Data is processed in accordance with Cloudflare's Privacy Policy.
  • Stripe, Inc. — payment processing. Stripe is PCI-DSS compliant. See Stripe's Privacy Policy.

6. Google and Microsoft calendar data

Connecting a calendar is optional. If you connect a Google or Microsoft (Outlook / Microsoft 365) account, this is how we handle the data we receive from it.

  • What we access: read-only access to events in your main calendar for the next 30 days: each event's title, description, start and end time, and whether it lasts all day. We also read the calendar's name so the dashboard can show which account is connected. We cannot create, change or delete events, and we do not access your email, contacts or any other data in the account.
  • How we use it: only to show your upcoming events on the boards registered to your family. We do not use calendar data for anything else.
  • What we store: we store the access tokens your boards need to keep fetching events, linked to your family account in our database (Cloudflare D1). We do not store your events on our servers. Each board fetches them directly from Google or Microsoft when it loads, and holds them in the board's browser only while they are displayed.
  • Sharing: we do not sell calendar data, share it with anyone else, use it for advertising, or use it to train AI or machine learning models. Nobody at Family Board reads your calendar data unless you ask us to for support, or we are required to by law.
  • Removing access: click Disconnect on the Calendar page in your dashboard. This deletes the stored tokens straight away and, for Google, revokes our access. You can also remove access at any time from your Google Account permissions or your Microsoft account's app permissions.

Family Board's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Cookies

We use a single session cookie (sessionId) strictly necessary to keep you logged in. We do not use tracking or advertising cookies.

8. Data retention

We retain your account and family data for as long as your account is active. If you delete your account, your data will be removed within 30 days, except where we are required to retain it for legal or financial record-keeping obligations.

9. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Erase your data ("right to be forgotten").
  • Restrict processing in certain circumstances.
  • Data portability — receive your data in a structured, machine-readable format.
  • Object to processing based on legitimate interests.

To exercise any of these rights, email hello@familyboard.app. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

10. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email or by displaying a notice in the dashboard. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related queries: hello@familyboard.app