Contents

  1. Who we are
  2. Information we collect
  3. How we use your information
  4. Our legal bases
  5. When we share information
  6. How we keep data secure
  1. How long we keep information
  2. International transfers
  3. Your rights
  4. Children’s privacy
  5. Changes to this policy
  6. How to contact us

1) Who we are

FamilySafe (“we”, “us”) is a UK-based company providing a secure digital vault for families. We are the data controller for your personal data when you use our website and services, except where we act as a processor for organisations that invite you to use FamilySafe.

2) Information we collect

  • Account information— name, email, password (hashed), settings.
  • Vault content— documents, notes, and sensitive fields you choose to store.These are encrypted on your device before upload and are not visible to us.
  • Usage and device data— log data, app events, device type, and approximate location (from IP) for security and fraud prevention.
  • Support communications— messages you send us via email or forms.
  • Cookies and similar— see ourCookie Policyfor details and choices.

3) How we use your information

  • Provide and secure the service (authentication, end‑to‑end encryption, backups, fraud prevention).
  • Operate features like sharing with trusted contacts and emergency access.
  • Respond to support requests and improve our product.
  • Communicate service updates, security notices, and important changes. You can opt‑out of marketing at any time.
  • Comply with legal obligations.

4) Our legal bases

Under the UK GDPR, we rely on the following legal bases: performance of a contract (to provide the service), legitimate interests (to keep our platform secure and improve it), and consent (for optional analytics/marketing cookies and certain communications).

5) When we share information

We do not sell your data. We may share limited personal data with:

  • Service providerswho help us run FamilySafe (e.g., secure hosting, email). They act under contracts and can’t use your data for their own purposes.
  • Trusted contacts you choose(e.g., family, solicitor) when you share items or enable emergency access.
  • Law enforcement or authoritieswhen required by law.

6) How we keep data secure

  • End‑to‑end encryptionof vault content: files and sensitive fields are encrypted on your device before upload. We cannot decrypt them.
  • Transport securitywith TLS for data in transit.
  • Zero‑knowledge design: only you and your approved users hold the keys.
  • Backups and integrity protectionto guard against loss or tampering.
  • UK‑based, GDPR‑aligned operations; preparing for ISO 27001 certification.

For a plain‑English overview, see Security (For Families). For technical details, see Security (For Professionals).

7) How long we keep information

We keep your account data for as long as your account is active. You can delete items in your vault at any time. If you close your account, we delete or anonymise your personal data within a reasonable period, unless we need to keep it to meet legal or regulatory requirements.

8) International transfers

We primarily store data in the UK. If we transfer personal data outside the UK/EEA, we use appropriate safeguards (such as Standard Contractual Clauses) and additional measures where needed.

9) Your rights

You have rights under the UK GDPR, including the right to access, correct, delete, or restrict how we use your personal data, and the right to object to certain uses. You can also request data portability and withdraw consent where we rely on consent. You have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

In practice, you can access and export most of your information directly in FamilySafe. For other requests, contact us using the details below.

10) Children’s privacy

FamilySafe is designed for adults and older teenagers managing family records. If you believe a child has provided us with personal data without appropriate consent, please contact us and we will take steps to delete such information.

11) Changes to this policy

We may update this policy from time to time. If we make material changes, we’ll notify you by email or in‑app notice. The latest version will always be available on this page with the effective date at the top.

12) How to contact us

Email: privacy@familysafe.app

Postal: FamilySafe HQ, Sisters of St Joseph, Halifax, West Yorkshire, HX4 8BS

If you are in the EEA, you may also have the option to contact your local data protection authority.

This policy is provided for transparency and does not constitute legal advice. Please consult your legal counsel to tailor it to your operations.