SECURITY
Family data deserves enterprise-grade care.
Health records and schedules are sensitive. We treat them that way: encrypted storage, Google-authenticated access, role-based visibility, and no marketing tracking on any page.
Encryption at Rest and in Transit
Medical profiles, medication logs, and immunization records are encrypted at rest and delivered over TLS. No cleartext family data leaves the database.
Google OAuth Sign-In
No separate passwords to manage. Each family uses a single Google sign-in and invites members; sessions are managed by Google's identity layer.
Role-Based Access Control
Parents get admin rights. Children get read-only views. Access decisions happen on the server, not just in the UI — children cannot edit even by manipulating requests.
No Third-Party Trackers
We do not run advertising pixels, session replays, or data-broker integrations on pages that render family or health content.
Minimal Permissions on Google Calendar
We request only the scopes required to create the shared family calendar, read events you've put there, and write updates back. Nothing else.
Data Export and Deletion
Families own their data. Export it at any time as JSON. Request full deletion and we remove everything, including backups, within 30 days.
Ready to run your household with clarity?
Set up your family in under five minutes. One Google sign-in covers up to ten people.