Famylist privacy

What Famylist stores about you and your children, why, who helps us store it, and what your rights are.

Updated 11 October 2026.

Who is responsible

Famylist is run from Norway by its owner, who is the controller of your personal data.

Questions about privacy or your data: privacy@famylist.com

What we store and why

• Your account: email address, name, language, notification settings, and when you joined and last signed in. We use it to sign you in and to show you to the people in your groups.
• Signing in: a hashed password if you set one, and the public key and name of each passkey. Sign-in codes and child pairing codes are stored only as a hash.
• Groups, lists and wishes: what you write, who is in each group, and who has reserved or bought a wish. The owner of a list never sees who reserved or bought from it.
• Devices: for each device you are signed in on, the browser's name and when it was last used, so you can see your devices and sign them out.
• Notifications: if you turn them on, the push address your browser gives us and whether the device is a phone running iOS or Android, or a computer.
• Server logs: our host records each request, including the IP address, to keep the service running and secure. Logs never hold your email address.

We do not sell your data, show ads, or use analytics or tracking.

Legal basis

• Contract (GDPR Article 6(1)(b)): your account, groups, lists and wishes are the service you signed up for.
• Legitimate interest (Article 6(1)(f)): sessions, server logs, backups and the record of support lookups keep the service secure and recoverable.
• Consent (Article 6(1)(a)): push notifications. You can withdraw it at any time on your profile or in the browser.

Who processes data for us

These companies store or carry your data on our behalf:

• Heroku (Salesforce) runs the app and holds its logs, in the EU (Ireland).
• MongoDB Atlas holds the database, in the EU (Ireland).
• Resend sends sign-in codes and invites by email, from the EU (Ireland).
• If you turn on notifications, your browser's push service delivers them: Google for Chrome and Android, Apple for Safari and iPhone, Mozilla for Firefox. It may be outside the EU. The message is encrypted, so the push service cannot read it.
• Encrypted backups are kept on a computer the controller owns, in Norway.

How long we keep your data

• Lists and wishes you delete are removed for good after 30 days.
• Group invites that nobody uses expire after 30 days.
• A signed-in device is forgotten when its session ends or you sign it out. Sign-in codes expire after 10 minutes.
• When you delete your account, your data is deleted at once. Our backups hold a copy for up to seven days.
• Otherwise your account is kept until you delete it. We are adding automatic deletion of accounts unused for two years, with an email notice 30 days before.
• When we look up an account to help with support, the lookup is recorded and kept for a year.

Children

A child cannot sign up. A parent or guardian adds a child to a group and signs them in on a device by showing a code. A child account holds the child's name, language, lists and wishes, and no email address or password. Only the adults who manage the child can act for them, and the group can see the child's lists, as with any member.

We process a child's data at the request of the adults who manage them, who can see, download and delete it. When the last of them deletes their account, the child's account is deleted too.

What is stored in your browser

Famylist uses no tracking cookies. The app keeps this in your browser:

• gui-state (local storage): your sign-in token and screen settings.
• api-data (local storage): a copy of your groups, lists and wishes, so the app opens fast and works offline.
• Session storage: a note that the app has just updated, so it reloads only once.
• Service worker cache: the app's own files, such as scripts, styles and icons. No personal data.

Logging out removes the local storage.

Your rights

• See and take your data: download it as a file under "Download my data" on your profile.
• Correct it: change your name and settings on your profile, and edit your lists and wishes.
• Delete it: delete your account under "Delete account" on your profile.
• Object to or restrict how we use it: email us.
• Withdraw consent: turn off notifications on your profile.

For anything you cannot do yourself, email us and we answer within a month: privacy@famylist.com

Complaints

You can complain to the Norwegian Data Protection Authority (Datatilsynet): datatilsynet.no

Go to the front page