Privacy Policy

Family Dashboard is a household organiser: shared to-do lists, a grocery list, a pantry, meal planning, recipes, chores and a family calendar. This policy explains what it stores, why, and who else ever sees it. It is written to be read, not to be survived.

Who we are

Family Dashboard is operated by Pnumen Digital LLC. Questions, requests, or complaints: support@pnumen.com.

What we collect

• Your account. When you sign in with Google we receive your email address, name, profile picture and Google account identifier. We use these to identify you and to place you in the right household. We never receive your Google password.
• Your household’s content. Everything you put into the app: to-do items, grocery and pantry lists, meal plans, saved recipes and ratings, chores and allowances, saved restaurants, calendar events you create, and photos of receipts you scan.
• Google Calendar data, only if you choose to connect a calendar. See the dedicated section below.
• Operational records.A log of AI requests made on your household’s behalf (which feature, how many tokens, what it cost) so we can meter usage and apply spending limits.

We do not use advertising trackers, we do not build advertising profiles, and we do not sell personal information.

Google user data, scope by scope

Family Dashboard requests the narrowest scopes that make each feature work, and it asks for them at different times so that signing in never grants calendar access.

• openid, email, profile — used solely to sign you in and to show your name and picture to the other members of your household. Requested when you sign in.
• calendar.readonly — used to display your existing calendar events inside the household calendar view, so a family can see school, work and personal schedules together. Requested only when you choose to connect a calendar, and never at sign-in.
• calendar.events — used to create and edit events that you add inside Family Dashboard, on the single calendar you nominate as the write target. Every other connected calendar stays read-only regardless of this permission.

Connecting a calendar is optional and the app is fully usable without it. You can disconnect at any time in Settings, which deletes the stored authorisation, and you can also revoke access from your Google account permissions page.

Limited Use

Family Dashboard’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we use Google user data only to provide and improve the features described above, we do not transfer it to others except as necessary to provide those features or as required by law, we do not use it for advertising, and no human reads it except where you explicitly ask us to, where it is necessary for security, or where the law requires it. Google user data is never used to train generalised artificial-intelligence models.

Artificial intelligence features

Some features send content to Anthropic to be processed: scanning a receipt photo, suggesting dinner ideas, writing or importing a recipe, estimating shelf life and nutrition. Only the content needed for that request is sent — for example the receipt image, or the recipe text.

Your Google Calendar data is never sent to an AI provider. Content sent for processing is not used to train models.

Where your data lives, and who can see it

Your household’s data is stored in a Postgres database hosted by Supabase, and the application is hosted by Vercel. Access is enforced at the database level: every row belongs to exactly one household, and the database itself refuses to return another household’s rows.

Everyone in your household sees the household’s shared content — that is the point of a shared list. Nobody outside it does.

One deliberate exception, so it is not a surprise:

• The shared recipe library. Recipes saved to the shared library, and the star ratings attached to them, are visible to other households using Family Dashboard, so everyone benefits from recipes others have found. Ratings are stored under an opaque key rather than your name or email. Your grocery list, pantry, calendar, chores, receipts and to-dos are never shared this way.

We also use service providers who process data on our behalf: Google (sign-in and calendar), Anthropic (AI features), Supabase (database), Vercel (hosting), and a mapping or restaurant-search provider when you search for a restaurant. We do not sell your data.

How long we keep it

Household content is kept until you delete it, or until you delete your household.

Deleting a household takes 30 days. When you ask, the household stops working immediately and nothing in it is readable. For the next 30 days the person who set it up can cancel and everything comes back exactly as it was. After that the content is permanently deleted — meals, recipes, groceries, pantry, chores, calendar events, settings, receipts and anything forwarded to the family inbox — and accounts left with no household are deleted with it. Any Google connection is revoked at that point, so our access to your calendar ends.

Two things deliberately outlive a deleted household, and it is worth being precise about them:

• AI usage and billing records. We keep the itemised cost of each AI request — which feature, which model, how many tokens, what it cost and when. These records note when a household used a feature, and they are kept for accounting after the household is deleted. They stop pointing at any account and retain only a short household label that no longer maps to anyone.
• Recipe ratings in the shared cookbook.Stars and favourites on shared recipes stay, so other families’ libraries do not change when one household leaves. They are stored against that label rather than against you, and we permanently reserve it so it can never be reissued to a future household or member.

Email forwarded to a family inbox is handled separately and more strictly: the plain text is purged after about 30 days and attachments are processed and discarded within days.

Your choices

• Disconnect Google Calendar at any time in Settings.
• Delete individual items, or your household and its data, from within the app.
• Leave a household without deleting it — the rest of the family keeps theirs, and if it was the only one you were in, your account is deleted.
• Download everything your household has, as a single file, from Settings. Your Google connection is not included in it: it is a live credential rather than your data.
• Ask us for a copy of your data, or for it to be deleted, at support@pnumen.com.

Children

Family Dashboard is designed for families and a household may include children, but accounts are created and controlled by adults. We do not knowingly allow children to create their own accounts or to sign in independently.

Changes

If this policy changes materially we will update the date at the top and, where the change affects how Google user data is handled, tell you in the app before it takes effect.