Privacy policy

Version 1 · In effect since October 27, 2026 · The same text the app shows.

1. Introduction

This privacy policy explains how Mouhcine Soukaki, an independent developer in Ontario, Canada, operating as FamSorted ("FamSorted", "we", "us"), collects, uses, shares and protects personal information when you use the FamSorted app on iPhone and iPad (the "App") and the website famsorted.ca (the "Website"), together the "Services".

We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for Québec residents, the Act respecting the protection of personal information in the private sector. By creating an account, you agree to this policy.

2. Information we collect

Information you give us:

  • Account information: your email address, your password (stored only as a one-way hash by our sign-in service), if you turn on two-step verification, the secret of your authenticator app, your display name and your language.
  • Household content: lists, calendar events, special days (for example birthdays you enter for family members), chores, meals, budgets, accounts, balances and values you type, transactions, recurring bills, savings goals, contribution room and the children you name on an RESP, using the label you choose.
  • Messages you send us: your message, your email address and, if you use Contact us in the App, the App version and the device model.

Information from your device, only when you choose to use it:

  • Events from the phone calendars you choose to share with your household.

Information from third parties:

  • Apple: if you use Sign in with Apple, an identifier and the email you choose to share (it can be a private relay address); if you buy Premium, the plan, its dates and its transaction number, of which we keep only a one-way fingerprint. We never see your payment card.

Information created as you use the Services:

  • Your acceptance of this policy and of the terms, with the version and the date.
  • Household activity: who joined or left, role changes, invitations and how many items an import added (never what they contained).
  • Technical logs kept by our hosting providers (such as internet addresses and request times), for security and troubleshooting.

3. Information we do not collect

We do not collect your social insurance number, your bank login or password, full card or account numbers, your location, your contacts, an advertising identifier, or anything about your use of other apps and websites. The Services contain no advertising, no analytics and no tracking technology, and we never sell or rent personal information.

4. Files processed on your device

Bank statements, receipts, photos and calendar (.ics) files you open in the App are read on your iPhone or iPad. The file is never sent to us and is deleted from the App once read. Only the transactions or events you review and keep are saved, and card and account numbers found in a statement are hidden before anything is saved.

5. How we use your information

We use personal information only to:

  • provide the Services: maintain your account, share what you choose with your household, and show your budget, upcoming bills and Insights;
  • keep the Services secure: two-step verification, preventing fraud and abuse, and investigating problems you report;
  • provide Premium and check your subscription with Apple;
  • answer your questions and requests;
  • comply with the law.

We do not use your information for any other purpose without your consent, unless the law allows or requires it.

6. Automated processing

Insights, recurring bills and estimates (such as contribution room or RESP grants) are calculated automatically from your own data, only to show them to you and your household. We make no automated decision about you that has legal or similarly significant effects, and we do not build profiles for marketing.

You consent to this policy when you create your account, and the App asks for your consent again when it changes. Camera, photos, phone calendars and notifications are optional: iOS asks first, and you can turn each one off in the iPhone Settings app at any time. You may withdraw your consent at any time by deleting your account; we then stop using your information, except what the law requires us to keep.

8. How we share your information

We share personal information only with the service providers that help us run the Services, only what each one needs, and under contracts that require them to protect it and use it only for us:

  • Supabase: database, sign-in and server functions. Your data is stored in its Canada (Central) region, in Montréal.
  • Resend (United States): sends sign-in and password emails. It receives your email address and the email itself.
  • Apple (United States): Sign in with Apple and App Store purchases, under Apple's own privacy policy.
  • Netlify (United States): hosts the Website and sees visitors' internet addresses.
  • Our email provider: messages you send to support@famsorted.ca or privacy@famsorted.ca.

Exchange rates come from the Bank of Canada; no personal information is sent to it.

People in your household see what is shared in that household, and owners see its activity. We may also disclose information when the law requires it (for example a court order or a lawful request from an authority), to protect the safety of a person, or to a buyer of FamSorted under this policy, in which case we will tell you first.

9. Storage and transfers outside Québec and Canada

Your household data is stored in Canada, in Montréal. We operate the Services from Ontario, so information may be accessed from outside Québec. Some service providers are in the United States (Resend, Apple and Netlify), where their local laws apply and authorities may be able to access information under those laws. Before communicating personal information outside Québec, we assess whether it will be adequately protected, as Québec law requires.

10. Data retention

  • Account and household content: as long as your account exists.
  • Household activity: 12 months. Invitations that were used, cancelled or expired: 30 days.
  • When you delete your account, your information is erased immediately; our hosting provider's backups and our providers' delivery logs expire on their own within 30 days.
  • Messages you send us: as long as needed to answer you, and at most 2 years.
  • A shared household you own is not deleted with your account: it passes to the member who has been in it longest.

11. Security

We use reasonable administrative, technical and physical safeguards: two-step verification available for every account, encryption in transit and at rest, strict separation so each household can read only its own data, and sign-in keys kept in your device's secure storage. Only the developer can access the systems that run the Services. No method of transmission or storage is completely secure, but we work to protect your information and review our safeguards regularly.

If a privacy breach creates a real risk of significant harm, we will notify you and report it to the Office of the Privacy Commissioner of Canada and, for Québec residents, to the Commission d'accès à l'information, and we keep a record of every breach.

12. Your rights

Subject to the law, you have the right to:

  • access the personal information we hold about you;
  • correct it if it is inaccurate or incomplete;
  • receive it in a structured, commonly used technological format;
  • have it deleted;
  • withdraw your consent;
  • know how it was used and to whom it was disclosed.

Most of this is available in the App: Settings → Privacy → Download my data, and Delete my account. For any other request, write to privacy@famsorted.ca. We respond within 30 days, at no cost, and may need to confirm your identity first. If you are not satisfied with our answer, you may file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Québec, with the Commission d'accès à l'information (cai.gouv.qc.ca).

13. Children's privacy

Only adults (18 and over) can create a household or buy Premium. Teens 14 to 17 can have an account only when a parent or guardian invites them into their household and accepts the terms for them. The Services are not intended for children under 14, and we do not knowingly allow them to have an account; if we learn that one does, we delete it. Parents may add information about their children (a name, a birthday, chores, an RESP) and remain responsible for it.

14. Cookies and the Website

The Website uses no cookies, no analytics and no forms, and loads nothing from other companies. Its host, Netlify, keeps technical logs (such as internet addresses) for a short time to deliver and protect the Website.

15. Changes to this policy

We may update this policy. The version and its effective date appear at the top. If we make a change, the App shows you the new version and asks for your consent before you continue, and we will not use your information for a new purpose without telling you first.

16. Contact us

Questions, requests and complaints about privacy go to our privacy officer, who is responsible for the protection of personal information at FamSorted: privacy@famsorted.ca.

Mouhcine Soukaki, operating as FamSorted, Ontario, Canada (mailing address on request).

Questions about your information: privacy@famsorted.ca