Privacy Policy

What this is

FamilyHub SG is a household finance and household tracker. This policy explains what information we collect when you use it, how it's stored, who can see it, and how to reach us with questions or requests.

Information we collect

We collect information you choose to enter into the app, which may include:

• Your email address, used to sign you in (by emailed link, passkey, or your Google account) and to send you a secure sign-in link
• Household and family member details you add (names, relationships)
• Financial information you enter — properties, loans, insurance policies, investments, savings and CPF balances, and other assets
• Health-related notes you choose to add for yourself or family members
• Inventory items and any photos or documents you upload
• Notes, reminders, and history you add against any record

We do not ask for or store payment card numbers, passwords (sign-in is passwordless: emailed link, passkey, or Google sign-in), or government ID numbers.

How your data is stored and protected

Your data is stored with Supabase (database, authentication, and file storage) and the app itself is served via Cloudflare. Connections to FamilyHub SG are encrypted in transit (HTTPS).

FamilyHub SG is built around households. Each household's data is kept separate from every other household by database-level access rules — your data isn't visible to other households using the app. If you invite someone to join your household, they gain the level of access you grant them to that household's data.

Photos and documents you upload are stored privately — not on the open internet. Viewing or downloading a file always requires being signed in as a member of your household first; no one else using the app, and no one on the open internet, can get to your files without that (the only exceptions are the people described in the next section). When you view a file in the app, or when a link is generated for you, that link is time-limited: links used inside the app expire after about an hour and are silently regenerated each time you need them, and links included in downloaded exports remain valid for up to 10 years, so exported files stay useful long after you've downloaded them. A link, once generated, isn't password-protected beyond that — treat it like you would a shared cloud storage link, and avoid forwarding it to anyone you wouldn't want to have that file. Uploads are also limited in size and file type to keep the service reliable.

Who can see your data

Only people you've explicitly invited into your household, any financial adviser you choose to link (who sees only the categories and family members you allow, and only while you keep that link active), plus FamilyHub SG's founder and one IT developer, for the limited purpose of running and maintaining the service. We do not sell your data, and we do not share it with advertisers.

We use PostHog, a product analytics tool, to understand how the app is used and to record anonymized usage sessions so we can find and fix problems. This helps us improve FamilyHub SG during its beta — it is not used for advertising, and your data is never sold or shared with advertisers.

On our public website (familyhubsg.com) we also use PostHog to count visits and see which page, search engine or other website brought a visitor. It stores a small identifier in your browser. We do not record sessions on the website, and this is not used for advertising.

We use Sentry to receive technical error reports (for example, that a page failed to load) so we can fix problems, and Google only if you choose to sign in with your Google account. We use Supabase and Cloudflare as infrastructure providers to operate the service; they process data on our behalf under their own data protection commitments, and don't use your data for their own purposes.

Cookies and local storage

FamilyHub SG uses your browser's local storage to keep you signed in and to remember a small number of display preferences (such as light/dark mode and reminder thresholds). We don't use advertising or cross-site tracking cookies.

Exporting and deleting your data

You can export your household's data at any time from Settings → Data, in two ways: an Excel workbook covering your records, notes, reminders and update history (with time-limited links to your photos and documents, valid for up to 10 years), or a full backup as a single .zip file that includes the same spreadsheet plus the actual photo and document files themselves — fully self-contained, with nothing that depends on FamilyHub SG continuing to run. You can delete your account yourself at any time in Settings (Delete Account). If you own a household, this permanently deletes the whole household and everything in it, for everyone who has access; if you are a member or viewer, it removes your own access and leaves the household's records as they are. You can also contact us at the email below and we'll action a deletion request.

Behind the scenes, we also keep a nightly backup of your household's records for up to 30 days, and a separate copy of your uploaded photos and documents that is refreshed through the day, so that data can be recovered if something is deleted by mistake or a technical problem occurs. When a photo or document is permanently removed from your account (including when an account is deleted), its backup copy is erased about 30 days later.

Deleted inventory items and documents (with their photos and files) stay in your Recycle Bin for 30 days, then are permanently deleted from your account. Replacing or removing a photo on an existing item deletes the old photo from your account immediately. (A backup copy is kept for a further 30 days, as described above.) We recommend keeping your own extra copy of your files somewhere else, especially important documents; the full backup in Settings → Data makes this easy.

Children's information

FamilyHub SG is intended for use by adults managing household records. A parent or guardian may enter information about their children (for example, a child's health note) as part of managing the household — FamilyHub SG itself does not knowingly collect information directly from children.

Changes to this policy

If this policy changes in a meaningful way, we'll update the date above and let existing users know within the app.

Data breach response

If we become aware of, or suspect, a data breach, our first step is to contain it — for example, by revoking exposed access or fixing the underlying issue. We then assess what data was affected, how many people, and how serious it is. If that assessment finds the breach is likely to cause significant harm to anyone, or affects a large number of people, Singapore's PDPA requires us to notify the Personal Data Protection Commission (PDPC) within 3 calendar days of completing that assessment, and to notify affected individuals directly where significant harm is likely. We keep a written record of any suspected breach and our response, whether or not it ends up meeting the reporting threshold.

Data Protection Officer

FamilyHub SG's founder acts as Data Protection Officer, responsible for this app's compliance with Singapore's PDPA. Reach the DPO at the contact email below for any data protection question, concern, or request.

Contact us

Questions, data requests, or concerns: support@familyhubsg.com