Family HQ is a private household dashboard run by one household for itself. Only Google accounts on its allowlist can sign in; there are no other users, no advertising, and no analytics. This policy explains exactly what it stores and why.
What it collects
- Your Google account's email address, name, profile picture URL, and Google account id, so it can sign you in and check you against the allowlist.
- Events from the Google Calendars you select: title, time, location, and link. Calendar data is read each time you open the app and held in the server's memory for up to 60 seconds; it is never written to the database.
- Busy times (start and end only, no titles or details) from any calendar shared with you at the free/busy level.
- For each work block you schedule for a task: the calendar it is on, the id of the Google Calendar event the app created for it, and its start and end times, so the block can be shown with its task and kept in step with the event.
- For each Drive file you pin: its id, name, file type, and view link. Nothing else in your Drive is read, and file contents are never downloaded or stored.
- What you type into the app: tasks, notes, due dates, assignees, pinned-document labels and expiry dates, and your settings.
Google account access
Family HQ asks for three kinds of access, and nothing more:
- Your name, email address, and profile picture, to sign you in.
- Read access to Google Calendar (calendar.readonly), to show the calendars you choose.
- Permission to manage events (calendar.events), used only to create, move, and delete the work-block events you schedule from your tasks, on the calendar you pick for them. No other event is ever edited.
- Per-file access to Google Drive (drive.file), which only covers files you personally choose in Google's own file picker. It cannot list or open anything else, and never modifies or deletes files.
Family HQ's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Google data is used only to show you these features in the app. It is never sold, never used for advertising, never used to train any model, and never shared with anyone else.
Where it's stored
- Tasks, pinned-document details, household settings, and your account record live in a private MongoDB Atlas database that only this app can reach.
- Google access and refresh tokens are encrypted (AES-256-GCM) before they are written, and are only ever decrypted on the server to call Google on your behalf. They are never sent to the browser.
- Your browser holds an encrypted session cookie that contains only identifiers, no Google tokens.
- Traffic is served over HTTPS.
Who it's shared with
Nobody. There are no third-party services beyond Google (for sign-in, Calendar, and Drive), MongoDB Atlas (the database), and the app's hosting provider. No advertising networks, no analytics, no data brokers.
Keeping and deleting your data
- Tasks and pinned documents stay until you delete them in the app. Unpinning a document removes it from Family HQ only; the file itself stays untouched in your Drive.
- Calendar data is never stored, so there is nothing to delete. Work blocks are deleted with their task, or when you remove them.
- You can withdraw Family HQ's access to your Google account at any time at myaccount.google.com/permissions. Its stored tokens stop working immediately.
- To have your account record and all of its data erased, use the contact below.
Contact
Questions, or a request to delete your data: obrien.s.taylor@gmail.com.
Changes
If this policy changes, the date at the top changes with it, and the updated policy appears on this page.