Familygram — Privacy Policy

Last updated 2026-05-18

Familygram is a private, invite-only photo app for families. This policy explains what we collect, how we use it, and your rights.

Who runs Familygram

This deployment is operated by the admin who installed Familygram for their family. There is no shared service — each family runs its own instance.

What we collect

• Account info from Google sign-in: your email, name, and profile picture URL. Provided by Google when you tap "Continue with Google." Used to identify you in the app.
• Photos you upload: stored in the admin's private Cloudflare R2 bucket. Visible only to allowlisted family members.
• Captions, comments, likes, mentions: stored in the admin's private Cloudflare D1 database.
• Authentication session: a short-lived token issued by Ory Network, stored on your device in iOS Keychain.

What we don't collect

• No analytics, telemetry, or crash-reporting telemetry of any kind.
• No location data.
• No contact list or other device data beyond the photo you choose to upload.
• No advertising identifiers.

Where it's stored

Photos go to Cloudflare R2 (encrypted at rest). Account info and posts go to Cloudflare D1 (encrypted at rest). Authentication is handled by Ory Network. None of this data is shared with third parties beyond those infrastructure providers.

Who can see your data

Only family members whose email the admin has explicitly added to the allowlist. Removing someone from the allowlist stops them signing in but leaves their existing posts visible to other family members.

How long it's kept

Your account, posts, comments, and uploaded photos are kept indefinitely. You can delete them at any time via the app (delete individual posts/comments) or delete your account entirely via the "Delete my account" button on the Profile screen, which removes all your data within seconds.

Your rights

You can:

• See everything we have about you — it's all visible in the app.
• Delete individual photos / comments — via the post detail screen.
• Delete your entire account and all your data — via the Profile screen.
• Ask the admin to remove your email from the allowlist — preventing future logins.

Children

Familygram is for use among consenting family members. Don't sign in children's accounts without their parent's consent. We don't knowingly collect data from children under 13.

Contact

The admin of your family's Familygram instance is the contact for any privacy question. If you're not sure who that is, ask whoever invited you.