Privacy

When you choose Allow analytics, we use PostHog (US hosting) and Google Analytics 4 to measure public page visits, broad traffic source and screen-size categories, scroll milestones, and Get started clicks. Nothing loads or is sent before you choose. Google Analytics uses first-party cookies (_ga) with a random identifier; PostHog uses a random browser identifier that expires after seven days. Neither gets access to your FamDesk account or family records. Google advertising features and ad personalization are turned off.

We send only the public page address without query strings or fragments, never form contents, names, email addresses, assistant messages, or family information. Neither service records your screen. PostHog requests go through our server, which does not forward your IP address or user-agent. Google Analytics runs in your browser, so Google receives your IP address and browser details as part of the connection; Google states it does not log or store IP addresses for Analytics 4.

Use Analytics preferences to decline or withdraw permission. Withdrawing stops future collection by both services, removes the local identifier and deletes Google Analytics cookies on this site; it does not automatically erase events already sent. Browser Global Privacy Control and Do Not Track signals disable collection. This choice is separate from optional advertising measurement in the app.

FamDesk^TM is a private family management platform. When this page says "we" or "us", it means the small team behind FamDesk.

FamDesk stores the information you choose to add to your household: details about children, dependents, and pets, plus contacts, links, notes, and follow-ups. It also stores the account information needed to sign you in and the membership records that connect people to a household.

You decide what to enter. If you would rather not record something in FamDesk, leave it out. FamDesk does not store usernames, passwords, or sign-in details for other services — links save the web address of a portal or form, nothing more.

Each household in FamDesk is a separate, private space. Household information is available to the account that created it and to members who were invited to join it. You view one household at a time, so information from different households is not mixed together.

People join a household by invitation. An invite is sent to a specific email address and is accepted inside the app by creating an account or signing in with that same address. You choose who to invite, and you can decide not to invite anyone at all.

Connecting a mailbox is separate from signing in with Microsoft and requires an additional permission step. Microsoft Mail.Read and Mail.Send permissions can allow broad mailbox access. FamDesk uses them for bounded message searches, messages you select, matching replies to requests, and emails you explicitly send from your connected mailbox.

We store encrypted access and refresh tokens to maintain the connection, not your mailbox password. Disconnecting in FamDesk stops future access through that connection. You can also revoke permission with Microsoft. Disconnecting does not remove messages already saved in your requests.

You review imported email content before adding it to a request, where people with permission to view that request can see it. When you send an email, the recipients you select receive the content you approve, including recipients outside your household. Saving a contact or emailing someone does not give them access to your household or requests.

FamDesk can create example household data so you can explore the product before entering anything real. Sample data is clearly example content and can be removed.

The FamDesk website at famdesk.org is a public marketing site. It does not require an account, and it does not read or display information from your household. Links labeled “Get started” take you to the FamDesk app at famdesk.app.

Lifestyle photography on this website is illustrative imagery, not photos of FamDesk customers.

FamDesk offers an AI-generated question-and-answer experience on this website and a how-to guide inside the signed-in app. Both process the question you type to provide an answer. Both may use conversation history. The in-app assistant also receives the name of the page you are viewing so it can give more relevant directions.

Both assistants send requests directly to OpenAI. Optional health-record organization in the app also uses OpenAI models. FamDesk disables stored responses. OpenAI may retain abuse-monitoring logs for up to 30 days, with exceptions under its data policy.

The website assistant does not access household records. In the app, general help works in read-only mode and does not look up saved details. An optional household-answer mode can use selected records you already have permission to view, after household access is enabled and you opt in. Relevant details are sent to the AI service to answer your question. You can turn this off in the app.

When you use the public assistant, a security cookie lasting 24 hours helps limit automated or excessive requests. We keep a pseudonymous identifier, usage counts, temporary blocks, and hashes used to detect repeated questions. These abuse-control records do not contain the question text and are eligible for cleanup after two days of inactivity. This cookie is separate from optional analytics.

Separately, an optional setting lets the in-app assistant propose additions or edits to supported records. Nothing is saved automatically: each suggested change is shown to you first, and it is only saved after you review and confirm it. Suggestions stay within the access you already have, and no changes are ever made on their own.

If you turn these features on, FamDesk may store a few personal preferences — such as your choices for these settings — for your member account and household. They are only used when the features are on, and you can edit or delete them at any time in the app.

If the assistant gets something wrong or misses the point, you can save a private correction. A saved correction shapes your own assistant use within that household only — it is not shared with other household members, and nothing is passed along automatically. If you choose to submit a mistake report, authorized FamDesk team members can review it. Lessons that apply to everyone are a separate step: the FamDesk team removes personal details and approves a generalized version of what to do differently before it becomes part of the shared guidance, and approved lessons can be revised or retired later. Nothing is uploaded on its own: conversation transcripts and household records are never automatically pooled. This uses reviewed guidance, not automatic retraining of the AI. If the assistant also keeps small preferences you choose, they stay personal to your account and household. This all runs on the same FamDesk systems described above, with no new outside services.

FamDesk is a private place to organize everyday household details. It is not a medical, legal, or regulatory records system and is not a replacement for official records — those stay with the providers and institutions that issue them.

You can edit or delete the information you add, remove sample data, and choose whether to invite other members. If you want your account or household removed, contact us and we will help.

Questions about privacy? Send feedback from inside the app and we will follow up.