Updated October 29, 2026
This policy explains how MyFamily handles account information, voluntary adult location sharing and parental supervision of child devices. Contact ColderWeatherDevelopments@gmail.com with privacy questions.
Optional automatic keyword monitoring reads new notification previews from selected supported messaging apps on a child device after on-device disclosure, consent and Android notification access. MyFamily Free supports WhatsApp, Telegram, Signal and Discord and excludes the default SMS app. The private MyFamily+ version also supports Google Messages and Samsung Messages incoming SMS/MMS/RCS notification previews when explicitly selected. Previews are checked locally against the preserved red/amber keyword lists and prescription-name library. MyFamily does not save or upload preview text, sender names or matched terms. It sends only an alert identifier, red/amber category and time associated with the linked child device to this service for family parents to review. These alerts can reveal that a keyword category matched and are treated as sensitive family information.
Neither version reads SMS inboxes, message history, outgoing messages or hidden previews. Android grants broader notification access than the app uses; only selected supported message previews are processed. A visible monitoring notification and an on-device off control are provided. Revoking access or blocking monitoring notifications pauses checks. Bounded color/time upload queues and local deduplication hashes are stored on the phone; queued alerts older than 23 hours are discarded on the next active retry and are cleared when monitoring is turned off. Delivery can be delayed or missed. A match is not proof of danger, and no alert is not proof of safety. Older installations may also have status-only alert history. Profile photos chosen in the Android app are stored locally by that app.
We use this information to sign you in, link devices, show family locations, provide child activity reports and controls, deliver safety features, support users and protect account access. Linked family members can see shared family locations and safety information; parent accounts can access child supervision features.
Adult sharing is optional and starts off until you choose to enable it. Use “My location sharing” to pause. This stops the current phone locally; the server-confirmed pause also blocks adult uploads and hides current location and route history from family views. If offline, reconnect to confirm the server pause. Pausing is not deletion of historical records or copies other people already saw.
Parents or guardians must set up child supervision with appropriate authority and the on-device disclosures and permissions. App-usage monitoring and device controls apply to child devices, not adult location-sharing accounts. Monitoring uses a visible notification.
Hosting and email providers process information needed to operate the service and send account-recovery messages and a welcome email with setup guidance after account creation. MyFamily’s ad-supported edition uses Google Mobile Ads and Google’s User Messaging Platform. Ads are placed on authenticated parent dashboards, not child screens. The app does not supply family records or precise locations as ad-targeting data.
The advertising SDK can independently process IP addresses, approximate location inferred from IP, ad interactions, diagnostic information and device/app identifiers for advertising, analytics and fraud prevention. Non-personalized ads can still use data. Where required, Google’s consent form and ad-privacy options let you manage choices. See Google’s privacy policy.
Map displays currently contact Esri and OpenStreetMap for map tiles and a CDN for map software; these requests expose network information and the map areas requested to those providers. Opening a location in an external map app sends the selected coordinates to that app. These providers have their own privacy policies.
Location, app-usage and safety/alert history is scheduled for removal 30 days after its recorded or received timestamp. Cleanup runs hourly while the service is running.
Account details, family settings and active device credentials remain while needed for the account. Request account deletion in your profile or through our external deletion page. Support verifies the request, deletes associated active records and reviews shared-family records so one person’s request does not delete someone else’s account without authority. Requests are not instantaneous deletions. Subscriptions, if any, require separate handling.
Backup copies and support correspondence require separate operational cleanup. Ask support about the applicable backup-retention period and any justified records that must be retained. Any exceptions and their duration must be explained as part of handling your request.
You can pause adult sharing, change Android permissions, manage ad consent where available, leave by signing out, or request deletion. Restricting a permission can disable the feature that needs it. Public app connections use HTTPS; passwords are hashed, and family access requires account or device credentials. No security measure eliminates every risk.
On supported Android devices, MyFamily can create an Android-managed restore key after a parent signs in. Depending on your Google backup and screen-lock settings, Android can transfer this key to a replacement device, including through encrypted cloud backup. The private key stays under Android's control. MyFamily stores a public key, a random account identifier, the app edition and signing-certificate identity, a creation time and a signature counter to verify a new sign-in. Temporary sign-in challenges expire after five minutes.
This restores the parent's account only. It does not pair a child device, restore device-management privileges or turn on location sharing. Signing out or resetting the password revokes the account's registered restore keys on the server. Account-deletion requests also revoke restore access. Device key removal requires the app to communicate with Android; offline devices may retain a now-invalid key until they reconnect. Existing signed-in devices may create a new key after their account session is validated. Restore keys are deleted with the associated account.
We will update this page when data practices change. Contact ColderWeatherDevelopments@gmail.com about this policy or your data.