Privacy policy
Effective October 20, 2026
Who operates the service
54MediaGroup LLC operates Family Connections. For privacy questions, deletion requests, or complaints, contact fkhosti@gmail.com. This policy covers the Family Connections website, iPhone/iPad app, and Android app.
Information we collect
We process your sign-in identifier, name and email, authentication-provider identifiers, verification status, family memberships, and any profile details you supply. Family content can include names, relationships, dates, locations, biographies, stories, photos, video, files, invitations, and messages. You choose what to add; do not submit another person’s private information without permission or another valid basis.
We also process subscription status, transaction identifiers and purchase-to-family mappings, upload reservations, security/rate-limit records, support requests, safety reports, and limited service diagnostics. We do not receive your full payment-card details from Apple, Google Play, or Stripe.
How information is used
We use this information to authenticate accounts, operate shared family spaces, store and deliver content, send invitations and verification messages, confirm subscriptions, prevent duplicate billing, provide support, investigate abuse, enforce our terms, and maintain service reliability. We do not sell family content or use it for behavioral advertising.
Who can see family content
Family content is shared with the creator and invited members of that family. All family members can read family chats, including conversations listing only some relatives as participants. Those participant lists do not create private direct messages. Blocking hides a person’s content for you; it does not remove their family membership or prevent them seeing shared content.
Files use shareable download links. Anyone given a working link may be able to open the file. Recipients may save content independently. Keep invitation links, file links, and exports private. Reports intentionally share the selected content and report details with authorized Family Connections safety staff; the person reported is not notified by the report workflow.
Service providers and international processing
Google Firebase provides authentication, database storage, and file storage. The mobile apps also offer Google sign-in. Their SDKs may process account identifiers, device identifiers, approximate location, usage information and diagnostics for sign-in, security and service analytics; Google Sign-In may process a phone number associated with the Google account. Firebase service diagnostics are not linked to your identity. We do not use these services for advertising tracking. Apple processes iPhone/iPad subscriptions and Apple sign-in. Google Play processes Android subscriptions. Stripe processes website subscriptions. SMTP2GO delivers service email. Rollbar supports filtered website error diagnostics. Hosting and these service providers may process information outside your country, subject to their applicable data-protection terms and safeguards.
Providers receive information needed for their role. We require service-provider handling consistent with this policy and applicable law. Apple, Google Play, and Stripe also process payment information under their own privacy policies. Family content may be disclosed when required by law, to protect safety and security, or as part of a business transfer with appropriate notice and safeguards.
Retention and deletion
We retain active family content until it is removed or its family space is deleted. Ordinary message deletion becomes restricted after seven days; this rule does not prevent privacy deletion or safety moderation. Cancelling a subscription does not itself delete content.
Every signed-in person can start permanent account deletion from Delete my account. Deletion removes the sign-in and associated account data. Family spaces created by that person, including shared content, are deleted. In families they joined, their linked profile and authored content are removed; other relatives’ independently contributed content remains. Copies saved by other people cannot be recalled.
Website subscriptions for deleted spaces are cancelled. Apple and Google Play subscriptions must be cancelled separately through the purchaser’s original store. Apple, Google Play, or Stripe may retain transaction records as required for payments, tax, fraud prevention or law. Safety reports expire after 90 days and are removed during the next daily cleanup. Temporary security and deletion markers expire after 24 hours and are removed during daily cleanup; non-reversible purchase-token hashes may be retained to prevent deleted subscriptions recreating accounts, and limited records may be retained longer if legally required. Deletion interrupted by a service outage is resumable from the app or website. Contact us if you need help completing it.
Your choices and rights
You can edit your profile, choose what to upload, decline optional photo permissions, block people, report content, cancel subscriptions, and delete your account. The creator can export family data; other members may contact support for access to their own personal data without receiving other relatives’ private information.
Depending on your location, you may request access, correction, deletion, portability, restriction, objection, or withdrawal of consent by emailing us. We may verify your identity before fulfilling a request. Withdrawal does not affect prior lawful processing. You may also complain to your local data-protection authority. We respond under the deadlines applicable to your request.
Age eligibility
Account holders must be at least 16 years old. An authorized account holder may add a younger relative’s family-tree profile with appropriate parental permission. We do not offer unsupervised child accounts. Contact us if an account or profile was created without the required authorization.
Security and changes
We use authenticated access controls and transport encryption. Shared download links, screenshots, exports, and recipients’ saved copies have limits described above. No service can guarantee absolute security; report suspected unauthorized access to support. We update this policy as the service changes and show its effective date here. Material changes are communicated through the service where appropriate.