Privacy Policy

Last updated: August 2, 2026

FamilyHub is a private, single-household application built and operated by Haifa Sekkouah for her own family's personal use. It is not offered as a public service, and is not available for signup by anyone outside this household.

What this app does

FamilyHub displays a shared calendar (merged from each family member's connected Google and/or Microsoft accounts) on a kitchen-wall iPad, and lets household members create, edit, and delete calendar events from that display. Those changes are written back to the real Google Calendar or Microsoft Outlook Calendar account they belong to. FamilyHub also provides a simple shared shopping/task list feature, unrelated to calendar data.

What data we access

With each family member's explicit consent (via Google or Microsoft's own OAuth sign-in flow), FamilyHub accesses:

• Google Calendar data, via the Google Calendar API, using the https://www.googleapis.com/auth/calendar.events.owned scope, limited to events the connected account owns.
• Microsoft Outlook Calendar data, via the Microsoft Graph API, using the Calendars.ReadWrite delegated permission and limited to the signed-in user's own calendars.

We only ever read and write calendar event data (titles, times, attendees where applicable, and whether an event is all-day). We do not access email, contacts, files, or any other data from these accounts.

How we use this data

• Calendar events are synced into a private database (hosted on Supabase) roughly every 5 minutes, so they can be displayed on the household's kiosk display.
• When a household member creates, edits, or deletes an event from the kiosk display, that change is written back out to the real Google or Microsoft calendar it belongs to, keeping FamilyHub in sync with each person's actual calendar.
• Family-wide events are created individually on each invited family member's own calendar, linked internally so that edits and deletions apply to every copy.

How we store and protect this data

• All data is stored in a private Supabase project, accessible only to household members who have explicitly signed in.
• Access is restricted at the database level (Postgres Row-Level Security) so that each household's data is only visible to that household's own authenticated members.
• OAuth refresh tokens (used to access Google/Microsoft calendars) are stored server-side and are never exposed to client devices. Only backend server functions can use them to communicate with Google or Microsoft on the family's behalf.
• We do not sell, rent, or share calendar data with any third party, advertiser, or other organization. Data is used exclusively to provide the calendar-sync and display features described above, for this one household.

Data retention and deletion

• Calendar data is retained for as long as a family member's calendar account remains connected to FamilyHub.
• If a family member disconnects their Google or Microsoft account, or asks for their data to be removed, their stored refresh token and synced event data are deleted from our database.
• Disconnecting FamilyHub does not delete or modify anything on the original Google or Microsoft calendar itself — only the copy held inside FamilyHub is removed.

Your rights

Since FamilyHub is operated privately for this household, any family member can ask the app's operator (contact below) at any time to disconnect their calendar account and/or delete their data from FamilyHub.

Changes to this policy

This policy may be updated as the app changes. The "Last updated" date at the top will reflect the most recent revision.

Contact

Questions about this policy or your data can be directed to: haifa.sekkouah@gmail.com