Famloop is a family location and safety app. It only works if it handles location — the most sensitive category of data most people carry — so this policy tries to be specific rather than broad. Where we say we delete something, we mean it is deleted; where something is kept, we say what and for how long.
This policy is published by Aifinity Solutions ("Aifinity Solutions", "we", "us"), the developer of Famloop and the controller of the information described here.
These are the four promises Famloop shows you in the app before you join or start a Loop, and they are the commitments this whole policy exists to keep:
In practice that means: we do not sell your personal information; we do not share it with advertisers; there is no advertising SDK in the app; Famloop cannot locate anyone who has not installed the app, joined a Loop and granted location permission themselves; and every member of a Loop can see the full membership of that Loop.
When you create an account we collect and store: your name (first and last, and the display name shown to your Loop), your email address and whether it has been verified, and the sign-in method you used (email and password, Google, or Apple). Sign-in itself is handled by Google Firebase Authentication.
You may optionally add: a phone number (stored in international E.164 format), a profile photo, and a home address. We also store your app language, time zone, device platform and app version so the app behaves correctly and so support can reproduce problems.
We record the versioned consent you give before joining or starting a Loop, together with the date and the version of the consent text you saw.
This is the core of the service. While you are a member of a Loop and sharing is on for that Loop, we collect and store, for that Loop:
| Data | Why it exists |
|---|---|
| Latitude, longitude and accuracy | Your position on the family map |
| Speed and speed accuracy | Drive detection and, on Premium, driving alerts |
| Nearest street address and place name | So the app can say "at School" rather than a pair of coordinates |
| Device battery level | Low-battery alerts, and to explain a position that has stopped updating |
| Timestamp of the fix | So the app can show how fresh a position actually is |
| Sharing and permission state | So your Loop is told you have paused sharing rather than shown a stale position as if it were current |
Location history. Individual position points are also stored as a history trail, so you and your Loop can see where you have been. Every stored point carries an expiry timestamp and is deleted automatically — see section 7.
Famloop requests precise location. If you grant only approximate location the app still works, but positions, arrival alerts and Safe Arrival Timers will be correspondingly imprecise. Famloop also collects location in the background — see section 5.
Famloop includes group chat for each Loop and one-to-one direct messages between Loop members. We store the message text, the sender, and the times it was sent and edited. A message can also carry a shared location — a snapshot of where you were when you sent it.
Messages are not end-to-end encrypted. They are encrypted in transit and at rest, and access is restricted by server-side rules to the members of that Loop or conversation, but we are technically able to access them — for example to respond to a valid legal request or to investigate abuse.
When you delete a message it is marked as deleted and stops being shown, but the record is retained until the Loop itself is deleted. Copies already delivered to other members' devices, or contained in their notifications, are outside our control.
If you contact support from inside the app we receive your message, the category you chose, a reply address, your app version and your account identifier. You may optionally attach a diagnostic report; the app shows you exactly what it contains before you send it, and it never includes your location history, your messages or your invite codes.
If you subscribe, Google Play or the App Store processes the payment — we never see your card or payment details. We receive and store a record of your subscription status, product and renewal dates through RevenueCat, so the app knows what your family is entitled to.
Stating this plainly, because family location apps have a reputation to overcome:
| Purpose | Data used | Legal basis (EEA/UK) |
|---|---|---|
| Showing your position to your Loop and theirs to you | Location, profile | Consent; performance of a contract |
| Location history, arrival and departure alerts, Safe Arrival Timers, SOS | Location, places, timers | Consent; performance of a contract |
| Chat and direct messages | Messages, profile | Performance of a contract |
| Low-battery, offline and driving alerts | Battery level, speed, connection state | Consent; performance of a contract |
| Sending notifications | Push tokens, notification preferences | Performance of a contract |
| Managing your subscription and your family's entitlements | Purchase records | Performance of a contract |
| Fixing crashes and keeping the app reliable | Crash reports, app version, device platform | Legitimate interests |
| Understanding which features are used | Anonymous product analytics | Legitimate interests |
| Responding to support requests | Support tickets, account details | Legitimate interests; performance of a contract |
| Preventing abuse, fraud and misuse of the service | Account and usage data as needed | Legitimate interests; legal obligation |
We do not use your information to make decisions about you by automated means that produce legal or similarly significant effects, and we do not use your data to train machine-learning models.
Famloop collects location in the background — including when the app is closed or not in use — so that your family can see where you are, and so that arrival alerts, Safe Arrival Timers and SOS work when you most need them. Without background permission, your Loop can only see you while the app is open on screen.
On Android, background collection runs as a foreground service with a persistent notification that is visible the entire time Famloop is tracking. On iOS, the system shows its own location indicator. You are never located silently.
You control this completely:
This is the main sharing that happens, and it is the point of the app. Members of a Loop you join can see your display name, profile photo, current position, battery level, location history for the period the Loop's plan retains, your arrivals and departures at that Loop's saved places, your Safe Arrival Timers and your SOS alerts. Every member can see the full membership list, so you always know exactly who can see you.
Loop administrators can additionally invite and remove members and manage the Loop's saved places. Leaving a Loop removes your membership and your location history in that Loop.
We share information with a small number of processors who act on our instructions:
| Provider | What it handles |
|---|---|
| Google Firebase (Google LLC) | Authentication, the database holding your account, location and messages, profile photo storage, push delivery, server functions, crash reporting and analytics |
| Google Maps Platform | Rendering maps, searching for places, and estimating routes and arrival times |
| RevenueCat | Managing subscription status and entitlements |
| Aptabase | Privacy-focused product analytics. The app's analytics events are restricted by design to fixed feature names and counts — they cannot carry your email, coordinates, names or invite codes |
| Google Play / Apple App Store | Processing payments and managing subscriptions |
We may disclose information if we are legally required to, or where we believe in good faith it is necessary to comply with a valid legal process, enforce our Terms, or protect the rights, property or safety of our users or the public.
If Famloop is involved in a merger, acquisition or sale of assets, your information may transfer as part of that transaction. We will give notice in the app before your information becomes subject to a different privacy policy.
We do not sell your personal information. We do not share it with advertisers, data brokers, or any third party for their own marketing or profiling. We do not share your location with anyone outside the Loops you have joined and the service providers listed above.
| Data | Retention |
|---|---|
| Location history — Free plan | 2 days. Older points are deleted automatically by a scheduled job. They are removed from the database, not merely hidden from the app. |
| Location history — Premium Family | 365 days, then deleted automatically. Every point additionally carries a hard expiry of no more than 366 days, enforced by the database itself. |
| Current position | Overwritten by each new position; removed when you leave the Loop or delete your account |
| Messages | Retained until the Loop is deleted. Deleting a message hides it but retains the record. |
| Safety events, timers, saved places | Retained while the Loop exists; deleted with the Loop |
| Account profile | Until you delete your account (see below) |
| Push tokens | Deleted when you sign out on that device or delete your account |
| Support tickets | Up to 24 months, so we can follow up on recurring issues |
| Purchase and subscription records | As long as required for tax, accounting and audit obligations |
| Crash reports | Per Firebase Crashlytics' retention, currently up to 90 days |
Settings → Delete account. For your security it requires a recent sign-in. It cannot be undone. When you delete your account we immediately and permanently delete:
To be straightforward with you about what is not instantly erased: your core account record is first marked as deleted and deactivated, which immediately and permanently locks the account out of every Loop, all history, all messaging and all safety features. That marked record is retained for a limited period so that deletion cannot be reversed by re-registering and so we can meet legal and anti-abuse obligations, and is then purged. Messages you sent remain visible to the Loops you sent them to, as they are also those members' records of their own conversations.
If you only want your trail gone, Settings → Delete my history deletes your saved location history in every Loop and leaves your account, your Loops and your current position untouched.
Depending on your state — including California, Colorado, Connecticut, Virginia, Utah, Texas and others with comparable laws — you may have the right to know what personal information we collect and why, to access a copy of it, to correct it, to delete it, and to appeal a refusal of any of these. You have the right not to be discriminated against for exercising them.
For the purposes of the California Consumer Privacy Act, the categories we collect are identifiers, personal information under Cal. Civ. Code § 1798.80, commercial information (subscription records), internet and app activity, precise geolocation, audiovisual information (profile photos), and inferences drawn from arrival and departure activity. We disclose these to the service providers listed in section 6 for the business purposes listed in section 4.
We do not sell personal information and we do not share it for cross-context behavioural advertising, and we have not done so in the preceding twelve months. We do not knowingly sell or share the personal information of consumers under 16.
The fastest way to exercise these rights is directly in the app — Export my data, Delete my history and Delete account do exactly what the words say, immediately and without needing to contact us. You may also email info@aifinitysolutions.com. We will verify your request against your account and respond within the period the applicable law requires. You may use an authorised agent where the law permits.
If you are in these regions you have the right to access, rectify, erase, restrict and port your personal data, to object to processing carried out on the basis of legitimate interests, and to withdraw consent at any time — withdrawal does not affect processing already carried out. Aifinity Solutions is the controller. You also have the right to lodge a complaint with your local supervisory authority.
Famloop is built for families, and that makes this section important.
If you believe a child under 13 has provided us with personal information, contact info@aifinitysolutions.com and we will delete the account and its data promptly. A parent or guardian may at any time review, request deletion of, or refuse further collection of their child's information by contacting us at the same address.
All traffic between the app and our servers is encrypted in transit with TLS, and data is encrypted at rest by our infrastructure provider. Access to your data is enforced by server-side security rules that restrict every record to the account or Loop it belongs to, rather than by the app alone — so the restriction holds even against a modified client. Your app-lock PIN is held only in your device's secure keystore and is never transmitted. We restrict internal access to production data to the people who need it to operate the service.
No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal data we will notify you and the relevant authorities as required by law.
Famloop's infrastructure is operated in the United States. If you use Famloop from outside the United States, your information will be transferred to and processed there, where data protection laws may differ from those in your country. Where required, these transfers rely on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism offered by our providers.
We may update this policy as the app changes. The "Last updated" date at the top always reflects the current version. If a change is material — particularly any change to what we collect, who we share it with, or how long we keep it — we will notify you in the app before it takes effect, and where the law requires it we will ask for your consent again.
For any privacy question, or to exercise any right described above:
Aifinity Solutions
Email: info@aifinitysolutions.com
Web: aifinitysolutions.com
Postal address: [REGISTERED ADDRESS]