Privacy Policy

Effective date: 2026-09-18

This policy describes what the Famivana app and its backend actually do with your information. It is written in plain language; the operator responsible for it is named in the Contact and operator section at the end.

1. What Famivana is

Famivana is an iPhone app for family caregivers who coordinate the care of an elderly or dependent family member. It organizes care information — medications, appointments, measurements, daily condition notes, symptoms, documents and tasks — and lets a family circle share it. Famivana organizes information; it does not interpret it medically and is not a medical device or a medical service.

The person using Famivana is the caregiver. Much of the information stored in Famivana is about someone else — the person being cared for. By entering that information you confirm that you are entitled to record it and, where required, that you have the care recipient's (or their legal representative's) consent.

2. On your device, or with an account

On your device only. Famivana works without an account. Everything you record stays on your iPhone, in a protected local store that is excluded from iCloud and iTunes backups. Nothing is uploaded, and we cannot see it.

With an account. When you choose a feature that needs other people or other devices — creating a family circle, inviting a caregiver, sharing a person's care record, or syncing across devices — you sign in, and the care records you choose to connect are uploaded to our backend so the family circle can share them. The app tells you which family circle will receive the data before the first upload.

3. Data we process

We collect only what the app needs to work. We do not use advertising, advertising identifiers, or third-party analytics or crash-reporting tools, and we do not track you across other companies' apps or websites.

Account data (with an account)

Your sign-in identity, from the method you choose: Sign in with Apple, Google sign-in, or an email magic link. For Apple and Google sign-in, the provider's authentication credentials (an identity token and, for Apple, an authorization code) are processed to authenticate you and establish your session. For email sign-in, your email address. We never receive or store a password.
A display name, language and time zone for your profile.
The email addresses of people you invite to your family circle, entered by you so the invitation can be matched to the right account.

Care and health-related data

Information you or your family circle record about a care recipient: name, date of birth, notes; medications, schedules and whether doses were taken or skipped; appointments; measurements such as blood pressure, weight or temperature; daily condition and symptom notes; family tasks. This is health-related data and is treated as sensitive in every part of the system.

Documents, scans and photos

Documents you add — files you import, or pages you scan with the camera. Camera access is used only while you scan a document; the scan becomes a document in the app. Text recognition on documents runs on your device, and the recognized text never leaves the device. Document files themselves are uploaded to private storage only when the care recipient is connected to a family circle and you sync.

Family and access data

Who belongs to which family circle; who may see which care recipient's records and at what level (manager, caregiver, viewer); document viewing and export permissions; invitations and their status; and access-recovery requests, including the short reason you type when requesting access.

Security and accountability records

Server-side records of security-relevant actions such as invitations, access grants, access-recovery decisions and account deletion. They contain action codes and identifiers, never care content. Some are kept after an account is deleted, in anonymized form (see section 7).

Purchase and subscription status

Whether a Premium subscription is active, in a grace period, cancelled or expired, and until when. Payment is handled entirely by Apple; we never receive your card or bank details.

Device and app data

Medication reminders are scheduled locally on your device. By default a reminder shows a neutral message; you may choose a detailed mode that adds the medication name and time. We do not collect device identifiers, location, contacts, or usage analytics.

4. Why we process it

To run the app and your account, and to keep your care records available to you.
To share and sync care records within the family circle you choose, with the access rules you set.
To determine whether Premium features are available to you or to your family circle.
To keep the service secure and accountable: verifying identity, enforcing access rules, and recording security-relevant actions.
To respond when you contact us.

AI features. Famivana's AI assistance — for example simplifying a document or preparing for an appointment — runs on your device using Apple's on-device models, on devices that support them. No document, note or care record is sent to us or to any AI provider for these features. If this ever changes, this policy will be updated before such a feature is enabled.

We do not sell personal data, and we do not use it for advertising or profiling.

5. Service providers

We use the following providers to operate Famivana. Each processes data for its role only.

Supabase: Backend hosting: authentication, database, private file storage and server functions. Processes account identity, connected care records, documents, family and access data and security records.
Apple: Sign in with Apple; App Store purchases, billing and subscription management; the on-device AI and text-recognition features of iOS. Processes your Apple sign-in credentials and your purchase and subscription information under Apple's own terms.
RevenueCat: Manages Premium entitlement and subscription status for the app. Processes your App Store purchase and subscription information together with a customer identifier for your account (or an anonymous identifier before you sign in), under RevenueCat's own terms.
Google: Google sign-in, if you choose it. Google's authentication credentials are processed to authenticate you and establish your session, under Google's own terms.

No other third party receives your data. We disclose data only when required by law.

6. Where data is stored

Data you keep on your device stays there. Data you connect to a family circle is stored on our backend, hosted in the European Union. Depending on where you are, this may mean your data is processed in a country other than your own; the applicable legal basis and safeguards depend on the jurisdiction named in the Contact and operator section.

7. Retention and deletion

Care records are kept for as long as your family circle uses them. Deleting a care recipient removes that person's records and documents. Deleting a single document removes the file and its record.

Signing out is not deletion. Signing out removes your session and the data you only had through shared access; it never deletes your own on-device records.

Deleting your account is available in the app under Family → Account. Because a care recipient must always keep at least one manager and a family circle with members must always keep an owner, deletion may first ask you to hand over a role: if you are the only manager of a care recipient in a family circle that still has other members, or the only owner of such a circle, the app asks you to make another member a manager or owner — or to delete that care record or family circle — and then to try again. Deletion is never permanently blocked.

When deletion proceeds, it does the following, in this order:

Your customer record with our subscription-management provider is deleted. This does not cancel an Apple subscription — subscriptions are managed in your Apple ID settings.
If Famivana holds a revocable Sign in with Apple credential for your account, we ask Apple to revoke it. If no such credential is stored — for example for an account created before Famivana began storing it — this step is skipped, and you can remove Famivana yourself under Sign in with Apple in your Apple ID settings.
Your personal data is deleted: your memberships, access grants, invitations you sent, subscription records and access-recovery requests. Any family circle in which you were the only member is deleted together with all of its care recipients, records and documents.
Care records in family circles that still have other members may remain available to those authorized members — deleting your account does not delete the family's shared data. Your personal profile is deleted. Only where a shared record's authorship or the family circle's security history must stay intact is a reference to you retained, and then only as an opaque, anonymized placeholder or random pseudonym that contains no personal data and cannot be traced back to you.
Your sign-in account itself is deleted last, after everything above has succeeded.

Anonymized placeholders and any other residual data are retained only for as long as applicable legal, security, operational and backup requirements need them. Our backend keeps encrypted backups for a limited period; deleted data leaves those backups when they expire and is never restored into the live service.

8. Security

All traffic uses HTTPS. Sessions are managed by our authentication provider and stored in the iPhone Keychain; the app never stores passwords or tokens itself.
Every backend record is protected by access rules enforced on the server; the app's own checks are never the only barrier.
Document storage is private; files are fetched through short-lived signed links.
On-device data uses iOS data protection and is excluded from device backups.
We never write care content, names, medication names, document contents or email addresses to logs.

No system is perfectly secure. If you believe your account has been compromised, contact us using the email in the Contact and operator section.

9. Your rights

Depending on your location, you may have rights to access, correct, export, restrict or delete your personal data, and to object to certain processing. You can view and edit most data directly in the app, and delete your account from within the app. For anything else, contact us using the email below.

Because Famivana stores information about people other than the account holder, requests concerning a care recipient's data may need to be handled through the family circle's manager.

10. Children

Famivana is intended for adult caregivers. You must be at least 18 years old to create an account. We do not knowingly collect personal data from children as account holders.

11. Changes to this policy

We will update this page when our practices change and revise the effective date at the top. Material changes will be announced in the app.

Contact and operator

Operator: Alper Kayabaşı
Privacy and support email: contact@famivana.com
Jurisdiction: İstanbul, Türkiye