Privacy Policy

AllOfUs · Last updated October 23, 2026

The short version

Your family's space is private. We don't track you, we don't run ads, we don't sell data, and we don't share it with anyone for their own purposes. What your family puts in, only your family sees. We only use your information to run AllOfUs for your family.

What we collect

• Account basics: your name and email, or the identity your Apple or Google sign-in shares with us, to create and secure your account.
• Your family's content: the posts, photos, videos, comments, reactions, lists, rituals, meals, moments, notes, school details, and settings your family creates. That is the product.
• Money and rewards: the budgets, expenses, savings goals, allowances, and points your family chooses to track. We never ask for or store bank or card numbers.
• Workouts: the activities and goals you choose to log. AllOfUs does not read Apple Health.
• Contact details you enter: for example a school, doctor, or babysitter number you save for your family. We never read your phone's address book.
• Children's information: a child's first name, optional age, avatar, and their activity in the family space, added only by a parent or guardian, who consents in the app before any child record is created. Kids have no email, no public profile, and are visible only inside their own family.
• Purchases: if you subscribe to AllOfUs Plus, Apple (on iPhone) or Google Play (on Android) processes the payment. We receive only your subscription status and purchase history (never your payment details) so the right features unlock for your family.
• Device token (optional): if you turn on notifications, a push token so your family's reminders can reach your device.
• Launch list (our website): if you ask to be notified when AllOfUs launches, we keep your email address, only to send you AllOfUs news. You can unsubscribe from any of those emails at any time.
• Basic app activity: things like which features your family has set up, used only to make the app work (for example, to show what's due today). It is never used for advertising or shared.
• Anonymous setup counts: while you set up a new family, the app records which setup steps were reached (a random one-time number, the step, the time and the app version), so we can see where setup gets confusing. It holds no name, email, account or device identifier and cannot be tied to you. We use it only to improve AllOfUs.

What stays on your device

• Your phone's calendar: if you allow calendar access, AllOfUs shows your device events next to your family's plans. Those events stay on your device and are not uploaded.
• Face ID, fingerprint or face unlock: handled by your device (Face ID on iPhone, fingerprint or face unlock on Android), so a parent can leave kid mode or see a sign-in code or the Parent lock. We never receive biometric data.
• Camera, microphone, and photos: used only when you choose to add a photo or video. Only the photos and videos you post are uploaded.

What we do NOT collect

No advertising identifiers, no cross-app tracking, no location, no address book, and no analytics profiles sold or shared. Our privacy manifest in the app says the same.

Who helps us run AllOfUs

We use a small number of service providers, only to run the app for you, under contracts that don't let them use your data for anything else:

• Supabase: our database, sign-in, and private file storage.
• Apple: Sign in with Apple, push notifications on iPhone, and App Store payments for purchases made on iPhone.
• Google: Sign in with Google, push notifications on Android, and Google Play payments.
• RevenueCat: keeps track of your AllOfUs Plus subscription status.
• Resend: our email provider. It sends sign-in codes and family invites, alerts our team when a problem is reported to AllOfUs, and keeps the launch list.

Where your data lives

Your data is stored in our hosted database and private file storage, protected by row-level security so each family can only ever read its own rows. Photos and videos live in a private bucket and are served through short-lived signed links. All traffic is encrypted in transit (HTTPS).

Who can see what

• Family content is visible to members of that family only, according to the permissions the family admin sets.
• Private notes are visible only to the member who wrote them.
• Nobody outside your family, including other families, can access your space.
• If someone reports a post, comment, story or profile, the family's admins can review it. Reports sent with “Report a serious problem to AllOfUs” in the app, and any report no other family admin can review, go to the AllOfUs team, who review them within 24 hours. To act on a report, the team sees the report (its reason and any note) and the item that was reported.

Children's privacy

AllOfUs is a family app. Children take part only after a parent or guardian adds them and gives consent inside the app. Parents control which sections a child can see, can review everything a child does in the shared space, and can remove a child at any time and ask us to erase what remains. We collect no more information about a child than the family itself enters, and we never show children ads.

How long we keep a child's information: for as long as the child is part of your family. Deleting the whole family, or its only parent or partner with an account deleting their account, erases the child's profile and everything they added automatically. If you remove a child and ask us to erase what remains, we erase it within 30 days of your request, keeping their part in the family's plans and records, like chores, rituals, points and rewards, without their name. Anything a grown-up added about the child, like a moment linked to them or a Need, stays until your family deletes it. Erased information is cleared from our backups within 30 days.

How long we keep data

We keep your family's content for as long as your family uses AllOfUs. When you delete something in the app, it disappears from your family's space right away, and it is permanently erased from our storage and backups within 30 days. A few records are kept longer, for these reasons:

• History of changes: an internal record of who changed what in your family, and when, which we use to fix problems and look into abuse. It's deleted after 400 days. When you delete your account, your profile details and account ID are removed from it.
• Purchases: the purchase notices Google Play, Apple and RevenueCat send us are kept for up to 180 days. To stop one purchase from being claimed twice, we keep each store transaction number with the account ID and family ID it was first used for, with no end date. These hold no name or email.
• Reports: a report stays with the family's admins while the family uses AllOfUs. If the person who made it deletes their account, their note and account ID are removed from it.

Deleting your data

Delete your account in the app (Settings, then Delete account): your sign-in is permanently removed, you are removed from the family, and your profile is erased except your name, which stays on what you shared with a family that continues. If you are the only parent or partner with an account in your family (the Admin or Adult role), the entire family space and its content are deleted; people in the Other role, like a grandparent or sitter, don't keep a family going. You can also ask us to delete or export your data by email.

Step-by-step instructions, including how to ask us without the app: Delete your account.

Google user data

If you choose to connect Google Calendar, AllOfUs asks Google for the list of your calendars and for the events on the calendars you select, so your events appear in your AllOfUs family calendar and events you create in AllOfUs appear in Google Calendar. We access this data only after you connect your account, and only for the calendars you choose. Only an adult account holder can connect it; we never request Google data for a child profile.

To keep both calendars in sync we store event identifiers, sync tokens, the IDs of the calendars you selected, and the sign-in tokens needed to talk to Google, which are encrypted and never readable from the app. Event titles, times and locations are shown to the members of your family inside AllOfUs, the same way events you create in AllOfUs are.

We use Google data only to provide the calendar sync you see in the app. We do not use it for advertising, we do not sell it, and we do not build profiles from it. We do not use it to train generalized AI or machine learning models, and we do not share it except with the infrastructure providers listed above, only to run the feature, or when the law requires it. Our staff do not read your Google data unless you ask us to for support, or it is needed for security or to comply with the law.

You can disconnect Google Calendar at any time in AllOfUs under Settings, then Calendars, then Google Calendar, then Disconnect. Disconnecting revokes our access, deletes the stored tokens, sync tokens and event mappings, and stops syncing. You can also revoke access at myaccount.google.com/permissions. Deleting your AllOfUs account deletes all of this too.

AllOfUs's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, or to object to how it's used. Email us and we'll help, usually within 30 days.

Changes

If this policy changes in a way that matters, we will tell you in the app first.

Contact

Privacy questions or requests: hello@getallofus.com.

AllOfUs · Everything that makes us, us. · Terms of Service