MyFamora privacy policy
Version 2026-10-29.1
1. Who we are
MyFamora ("we") is a household finance and family planning app operated by [legal entity name, UEN, address]. Our Data Protection Officer can be reached at privacy@myfamora.com.
2. What we collect
| Data | Examples | Why |
|---|---|---|
| Account | Email address, display name, sign-in records | Create and secure your account |
| Household and roles | Household name, country, members, Admin/Editor/Viewer role, invitations | Share a household and control who can do what |
| Finance | Accounts, balances, transactions, transfers, budgets, debts, investments, savings goals, recurring items, balance adjustments with reasons | Provide the finance features you use |
| CPF | Profile name, birth year, monthly salary, CPF balances and contributions | Estimate and track CPF contributions |
| Calendar | Appointments and appointment types | Family planning features |
| Documents | Files you upload and their folder names | Your private document vault |
| Family space | Posts, comments, reactions, photos, family and direct messages | Family sharing features |
| Location (optional, off by default) | Location points, arrivals and departures at places you set, notifications | Family Safety, only when the household turns it on and the member shares |
| Technical | Device and browser type, IP address, error logs | Keep the service running and secure |
We do not ask for NRIC numbers, bank login details or card numbers. Do not upload documents you are not entitled to share.
3. Location and children
- Family Safety is off by default. Each member chooses whether to share; sharing can be paused or withdrawn at any time.
- Location history is kept for the household's chosen period (7, 15 or 30 days) and then deleted automatically.
- An Admin can enable parent-managed sharing for selected younger members. We record who enabled it, for whom, and when. [decide: guardian consent evidence and age threshold]
- Only the member, viewers they approved and household Admins can see their location.
- Every time sharing is granted, withdrawn or set up as parent-managed, we keep a record of who did it, when, and which version of the consent wording was shown. You and household Admins can see these records. They are deleted with the household.
4. Who can see your data
- Your household: according to roles. Viewers can read, Editors can add and edit finance and calendar items, and Admins manage members and settings. Direct messages are visible only to the sender and recipient [decide: Admin access to direct messages].
- Other households: never. The database enforces separation between households.
- Our service providers (data intermediaries), only to run MyFamora:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, sign-in, file storage | [confirm project region] |
| Vercel | Hosting the web app | Global edge network; [confirm] |
| Google Maps | Map display when Family Safety maps are enabled | Global |
| Planned: Stripe | Payments | [confirm] |
| Planned: email provider (for example Resend) | Sign-in and reminder emails | [confirm] |
| Planned: Sentry | Error monitoring, with personal data removed | [confirm] |
When data is processed outside Singapore, we require providers to protect it to a standard comparable to the PDPA, through their data processing agreements (task 3-03).
We do not sell your personal data, and we do not use it for advertising.
5. How long we keep it
| Data | Kept for |
|---|---|
| Location history, events and notifications | 7, 15 or 30 days (household setting) |
| Latest location | Until it expires (about 30 minutes) or sharing stops |
| Invitations | Until accepted, or 7 days |
| Finance, CPF, calendar, documents, family posts and messages | While your household account is active, then deleted within [decide: e.g. 30] days of account deletion |
| Audit records of sensitive changes | [decide: e.g. 1 year] |
| Backups | Up to the provider's backup period [confirm] |
6. Your rights
You can ask to access or correct your personal data, withdraw consent (for example stop location sharing), or delete your account by emailing privacy@myfamora.com. We reply within 30 days. In-app export and deletion are planned (task 3-07).
7. Security
We use encrypted connections (HTTPS), private file storage, role-based database rules that are tested between households, a staging environment with synthetic data, and a human approval step before any production database change. If a breach affects you, we will tell you as required by the PDPA.
8. Changes
We will post changes here, update the version number, and tell you in the app before material changes take effect.
9. Contact
Data Protection Officer, privacy@myfamora.com