Privacy Policy
Famacy is a product operated by Brownie Labs. In this Privacy Policy, references to ‘Famacy’, ‘we’, ‘us’, or ‘our’ refer to Brownie Labs as the operator of the Famacy application and services.
Here's what we collect, why, and how it's handled, in plain language rather than legal boilerplate. Because famacy handles health information, we've called that out specifically below.
What we collect
- Account: email and display name from sign-in.
- Family: names, avatars, and colors you add.
- Reminders: medicine, dose, schedule, and dose history.
- Scans: label photos stay on your device; recognized label text is sent to our backend to identify possible medicines.
- App usage: anonymous counts of actions like reminders created or doses marked taken, with no medicine names, family names, or other identifying details attached.
Health information
The medicines, doses, and schedules you track are health information. We collect it only to run famacy's core features, reminders, plain-English explanations, and family profiles, and never for advertising or profiling. If you're a Washington resident, or covered by a similar consumer health data law, this is also your notice under that law: we collect the consumer health data described on this page only for the purposes described here, and won't share it further without your separate, explicit consent.
Service providers
We use service providers to operate Famacy and deliver its features:
- Google Firebase: account sign-in, cloud sync, usage analytics, and crash reporting.
- Vercel: hosts our website and backend, which processes medicine searches and recognized label text.
- OpenAI: processes medicine information and recognized label text to identify medicines and generate explanations.
- Upstash: supports saved medicine explanations and request limits, including processing IP addresses for those limits, when enabled.
These services may process data outside your home country. Each provider's applicable privacy and data-protection terms govern its processing.
Where it lives, and for how long
On your device (so the app works offline), plus your private cloud account if you're signed in. You can use Famacy without an account; that data remains on this device unless you later sign in to sync it. Signing out clears the local copy; your cloud data stays until you delete it.
Permissions, and why
- Camera: to scan a label.
- Notifications: to alert you.
- Exact & full-screen alarms: to ring on time, even locked.
- Boot & vibration: so alarms survive a restart.
Security
We use industry-standard measures to protect your data, including encryption in transit (HTTPS/TLS) and Firebase's built-in security infrastructure for data at rest. No system is 100% secure, but we take reasonable steps to protect what you share with us.
Children
famacy is intended for use by adults managing medicine for themselves and the people they care for, including children and other family members added by an adult. We don't knowingly collect information directly from children; account holders must meet the minimum age of digital consent in their country. Family member profiles for kids are created and managed by the adult account holder, not by the child. If you believe a child has created their own famacy account, email us and we'll remove it.
If there's a data breach
If a breach affecting your personal or health data occurs, we'll notify affected users without undue delay. Depending on where you live, this may also mean notifying a regulator directly, for example, your local data protection authority under GDPR or India's DPDP Act, or, for U.S. users, under the FTC's Health Breach Notification Rule, which covers health apps like famacy that fall outside HIPAA.
Your rights and choices
Edit or delete any reminder or family member any time in the app. Deleting a medicine reminder stops future reminders but keeps doses already logged in your history. To delete your entire account and all cloud data, do it directly in the app under Account, then Delete account, this takes effect immediately, with no waiting period. If you no longer have access to the app, email us instead and we'll complete it within 7 days. Depending on where you live, you may also have additional rights, described below.
If you're in India
Under the Digital Personal Data Protection Act, 2023, you can ask us to confirm what personal data we hold about you, correct or complete it, or erase it once it's no longer needed for the purposes described here. You can also nominate another person to exercise these rights on your behalf if you're unable to. To exercise any of these or raise a grievance, email privacy@famacy.app.
If you're in the UK, EU, or EEA
Under the UK/EU GDPR, you have the right to access, correct, or erase your data, restrict or object to certain processing, receive your data in a portable format, and withdraw consent at any time. We process your data based on your consent and, for core features like reminders, our legitimate interest in providing the service you signed up for. You also have the right to lodge a complaint with your local data protection authority.
If you're in California
Under the CCPA/CPRA, you have the right to know what personal information we collect and why, to delete it, to correct inaccuracies, and to limit the use of sensitive personal information, which includes the health data famacy handles. We don't sell or share your personal information for cross-context behavioral advertising, so there's no opt-out needed for that.
Changes to this policy
If we make material changes, we'll update the date on this page and, where required by law, notify you directly, by email or an in-app notice.
Questions about your data or this policy?
privacy@famacy.app