Last updated 9 October 2026
We collect what FimFam needs to organise your family, and nothing for advertising.
Your calendar events stay in your phone’s calendar. Our servers see them only while an AI feature you use is running, and don’t keep them.
We don’t sell your data, we don’t show ads, and nobody trains AI models on your data.
Profile pictures never leave your phone.
You can delete your account at any time, in the app or on the web.
1. Who we are
FimFam is provided by GUMCOCO PTY LTD (ABN 74 700 847 301), a company registered in Australia (“FimFam”, “we”, “us”). This policy explains how we handle personal information when you use the FimFam app and our web pages. We are responsible for that information, which some laws call being its “controller”.
Questions and requests: gumcoco.apps@gmail.com.
2. What we collect
Account: your email address, your name, how you sign in (email and password, or Google), and a random account ID. Passwords are stored only in hashed form by our authentication provider, and we never store or log them in readable form.
Family information you enter: names, birthdays (day and month only), notes, colours and roles for the people in your family, including children, and the email address of any FimFam user you invite.
Plans you make: to-dos, task lists, routines and when they were completed.
Calendar events: FimFam reads and writes events in the calendars on your device. When you use an AI feature, the events it needs (such as titles, times, locations, descriptions and to-dos) are sent to our servers to produce that result and are not stored there. We do store which calendars belong to which family member, including each calendar’s name.
AI results: your latest morning or evening summary, which can mention your events and family members, your summary settings, and a record of when you asked for suggestions.
Photos and what you say to Fim: used only to turn them into tasks. We don’t store them. When you talk to Fim, your phone turns your speech into text on the device itself, and only that text is sent to us. The recording never leaves your phone.
Approximate location: used only to show the local weather while the app is open. It is sent to our weather provider to get a forecast and is not stored on our servers. Your phone keeps the last location for up to an hour so the weather loads quickly.
Website waitlist: if you join the waitlist on our website, your email address, so we can tell you when FimFam launches.
Reports and messages: content you report through “Report AI content”, with any comment you add, and emails you send us.
Settings: your language, country and time zone, and a backup of your app settings, labelled with your device’s name so you can restore it.
FimFam Plus: if you subscribe, your subscription status, plan, renewal and expiry dates and store transaction IDs, and how many AI actions you have used this month. Payment details are handled by Google Play and we never see them. Every account gets one 7-day free trial of FimFam Plus. To give each person and each phone only one trial, we keep a one-way hash (a scrambled code that cannot be turned back into the original) of your email address and of your phone’s Android ID.
Usage and diagnostics: which features you use, screen views, app version and device type, and when a subscription starts, renews, changes plan or is cancelled, linked to your random account ID rather than your name or email. These events never include the content of your calendar, notes or family information. You can turn off the usage events in Settings → Legal → Share usage analytics; subscription events still reach us from Google Play. We also record IP addresses briefly to prevent abuse.
We do not collect your precise location, your contacts or your device’s advertising ID, and FimFam never uses your location in the background. Profile and cover pictures stay on your device and are never uploaded.
To-dos you attach to a calendar event are saved in that event’s description in your calendar. Anyone who can see that event, such as people you share the calendar with, can see those to-dos.
3. Phone permissions
FimFam asks for each permission when you first use the feature that needs it. You can turn any of them off in your phone’s settings; only the feature that relies on it stops working.
Calendar: to show your events and add or change the ones you ask it to.
Microphone: only while you are talking to Fim. Your phone turns what you say into text on the device, and the audio is not sent anywhere.
Camera and photos: only when you choose to take or pick a photo. FimFam receives just that photo.
Approximate location: for the weather forecast.
Notifications: for your daily briefs and routine reminders.
4. How we use it
To provide FimFam: running your account, sharing plans within your family group, the calendar and to-do features, the AI features you ask for, reminders, and FimFam Plus. This is necessary to provide the service you signed up for.
To keep FimFam safe: preventing abuse and fraud, applying usage limits and securing our systems. This is in our legitimate interest and yours.
To improve FimFam: understanding which features are used and where they fail, from the usage data above. This is in our legitimate interest. You can turn it off in Settings → Legal → Share usage analytics, or object by contacting us.
To contact you: account, invitation and deletion emails. We send news about FimFam only to people who joined our waitlist, and every one of those emails has an unsubscribe link.
With your permission: phone permissions, and any sensitive details you choose to add. You can withdraw permission at any time by turning the permission off or deleting the details.
To meet legal obligations: when a law requires us to keep or disclose information.
Giving us information about your family is voluntary. Notes for Fim and other details, such as birthdays, are optional, FimFam works without them, and we never ask you for sensitive information such as health details. If you choose to put sensitive details in a note or an event, add them only if you want FimFam to use them. We use them only to provide FimFam to your family.
We do not sell your personal information or share it for advertising. We don’t show ads, and neither we nor our AI providers use your data to train AI models.
5. How the AI features work
FimFam Plus features (the morning and evening summaries, suggestions, reading tasks from photos and from what you say to Fim) send the minimum information needed to AI providers, which process it for us and return a result. The basic brief on a free account is put together on your device and is not sent to an AI provider.
Notes for Fim exist only for the AI features. When FimFam Plus writes your morning or evening summary, the notes for your family members are sent with it so Fim can make it more personal. They are not used for anything else.
AI results are suggestions. FimFam doesn’t make decisions about you that have legal or similarly significant effects, and nothing is added to your calendar or lists unless you choose to add it.
AI can be wrong. If you see something inaccurate or inappropriate, use “Report AI content” in the app. We review every report.
6. Who we share it with
Members of your family group see the family information, shared lists, routines and calendar links of that group. When you invite a FimFam user, we email them an invitation that includes your name.
Otherwise, we share information only with service providers that process it on our behalf to provide their service to us:
Supabase: sign-in and database.
Expo (650 Industries): hosting our servers and delivering app updates.
Anthropic: AI processing for briefs, suggestions, photos and the text of what you say to Fim. It does not use this data to train its models. It deletes it within 30 days, unless its safety systems flag it as a possible breach of its usage policy, in which case it may keep it for up to 2 years.
TypeSafe AI: ranks facts drawn from your calendar, such as event titles and times, to decide which items and suggestions are relevant. It does not use this data to train or fine-tune models. It does not set a fixed retention period, and keeps data for as long as it reasonably needs to provide its service.
Google: Sign-In if you choose it (we receive your name and email, never your password), payments for FimFam Plus through Google Play, and our support inbox.
RevenueCat: manages FimFam Plus subscriptions, using your random account ID and your Google Play purchase history.
Resend: sends account, invitation and deletion emails, and keeps our website waitlist.
PostHog: product analytics, from the usage and subscription data described above.
WeatherAPI.com: weather forecasts for your approximate location.
We may also disclose information if the law requires it, to protect someone’s safety, or to a business that takes over FimFam. In that case this policy would continue to apply, and we would tell you first.
7. Where your data is processed
Our service providers process data mainly in the United States, and also in other countries where they operate. As the Australian Privacy Principles require, we take reasonable steps to make sure your information is protected when it goes overseas: we choose providers whose published terms limit how they may use it, and we send each one only what its feature needs.
8. How long we keep it
Your account and family data: for as long as your account exists, until you or your family organiser delete it.
Briefs and summaries: only the latest one. Each new one replaces the last.
Calendar events, photos and what you say to Fim: not stored on our servers. Anthropic deletes them within 30 days, or keeps them for up to 2 years if its safety systems flag them. TypeSafe AI receives only facts drawn from calendar events and keeps them as described above.
IP-address records: deleted automatically within 30 days.
Free trial records: the hashes of your email address and Android ID are kept after you delete your account, so that a new account cannot start another free trial. They cannot be turned back into your email address or ID, and are not linked to your account or anything else about you.
Deletion requests: the confirmation link expires after 30 minutes, and the request is removed within 7 days after that.
Waitlist: until you unsubscribe or ask us to remove you.
Reports and support emails: for as long as we need them to review and respond, then deleted.
Usage analytics: kept under your random account ID for as long as they help us improve FimFam. You can ask us to delete them.
9. Deleting your account
Delete your account in the app from Settings → Your Account → Delete Account, or on the web at https://fimfam.expo.app/delete-account. You can also email gumcoco.apps@gmail.com from the address on your account. We send a confirmation link, and deletion happens once you open it.
Deleting your account permanently removes your account, profile, settings and backups, summaries, your subscription records with us and with RevenueCat, your ticks on shared routines, and the to-dos, task lists and routines that only you use.
Family information belongs to the family group. If another FimFam user is still in your family, your entry stays visible to them as a name without an account, and anything you added about other people stays until they remove it. If you are the family organiser, that role passes to the FimFam user who has been in the family longest. Task lists and routines you shared with your family pass to another FimFam user in the family, together with the to-dos you added to shared lists, so your family can keep using them; they can then edit or delete them. If you are the last account holder, the whole family group is deleted, including everything shared in it.
Events in your device calendars are not affected, because FimFam never owns them. Deleting your account does not cancel a Google Play subscription. Cancel it in Google Play first.
10. How we protect it
All traffic between the app and our servers is encrypted (TLS), stored data is encrypted by our hosting provider, and database access rules limit your data to you and your family group. We don’t store passwords or sign-in tokens for other services.
If a data breach is likely to cause you serious harm, we will tell you and the relevant regulator as the law requires.
11. Children
FimFam is for parents and other adult caregivers aged 18 and over. It is not directed to children, and we do not knowingly collect personal information from children. If we learn that a child has created an account, we delete it.
Parents can enter information about their children, such as names, birthdays and notes. We use it only to provide FimFam to your family, and never for advertising or profiling. Your family organiser can correct or delete it in the app at any time, and you can ask us to delete it.
12. Your rights
You can see, correct and delete most of your data in the app. You can also ask us for a copy of your data, or to correct or delete it, by emailing gumcoco.apps@gmail.com. We may need to confirm your identity first, and we respond within 30 days.
Europe and the UK: you can also object to or restrict our use of your data, withdraw permission you gave, receive your data in a portable format, and complain to your data protection authority.
Australia: you can access and correct your information under the Australian Privacy Principles. If you are unhappy with how we handle a complaint, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).
United States: depending on your state, you can ask to know, correct or delete the personal information we hold, and appeal our decision. We don’t sell or share personal information for targeted advertising, so there is nothing to opt out of, and we don’t treat you differently for using your rights. An authorised agent may make a request for you.
FimFam does not track you across other apps or websites, so we don’t change our behaviour in response to “Do Not Track” signals.
13. Changes to this policy
We will update this policy when FimFam changes. When we make a material change, the app shows you the new version the next time you open it and asks you to confirm you have read it. The date at the top shows when it last changed.
14. Contact us
GUMCOCO PTY LTD (ABN 74 700 847 301), Australia. Email gumcoco.apps@gmail.com about this policy or your data.
Questions? Email gumcoco.apps@gmail.com