What we can see, and what we can't.

What we can't see

The content of anything you or your family create in the app, including your family's name and everyone's profile names and pictures. Your password or passphrase never leaves your device, so we can't see it or reset it. Your recovery key is the backup, and only you have it.

What we do keep

• For your login: for email/password login, a stand-in address made from a scrambled version of your email. If you choose Google sign-in, Supabase Auth stores your Google email and basic profile to authenticate you. Your family content is still encrypted on your device.
• To run the app: which accounts belong to which family, when things were created, the type of each item (for example "message" or "list item"), sizes of encrypted files, and read-receipt times.
• For notifications: your device's push address. The notification text itself is encrypted.
• If you buy access: the name and email you give at checkout, the amount, and the Stripe checkout ID. We create your login using that email, deliver your family access code and account setup link, and keep a purchase record. Existing password accounts are preserved. Card details go to Stripe and never reach us.
• If you subscribe: your Stripe customer and subscription IDs, plan, status and renewal dates, and a record that you agreed to the automatic-renewal terms (when, and which version of the wording). We keep that agreement record for at least three years, as the law requires.

Ad measurement on our website

Our public website (the pages on samepagefamily.app you can read without signing in, such as the homepage, pricing, download and checkout pages) uses the Meta pixel to measure how our ads perform. It records page visits, when someone starts checkout, clicks on app downloads, and completed purchases. A purchase event includes the amount and a checkout reference so it isn't counted twice. Meta also receives standard technical details such as your IP address, browser type and the page address, and may use cookies.

When you buy from our website with ad measurement on, our server also confirms the purchase to Meta (the Conversions API), so it's counted even if your browser blocked the pixel. That confirmation carries the same checkout reference and amount, your email address, name, country and postal code in hashed (scrambled) form that Meta uses only to match the purchase to an ad, your IP address and browser type, and the Meta browser IDs the pixel stored. Purchases made inside the app are never reported.

• It never runs inside the Same Page app, and never on this site while you are signed in.
• It never sees your family's messages, lists, photos or any other content.
• If your browser sends a Global Privacy Control or Do Not Track signal, the pixel doesn't load at all and our server reports nothing about your purchase.
• You can switch it off for this browser at any time with Privacy choices at the bottom of every page, or right here. With it off at checkout, our server reports nothing either.

Emails

Buyers get a welcome email with their access code and a short email when a new version ships. Every release email has a one-click unsubscribe link. Subscribers also get billing emails we are required to send: the renewal terms when they subscribe, a reminder before a yearly plan renews, a yearly reminder of their plan, and notice of any price change. We don't send marketing to anyone else.

Who processes data for us

Supabase (authentication, membership metadata, database and encrypted file storage), Netlify (hosting), Stripe (payments), Zoho (email), Google (if you choose Google sign-in), and Cloudflare (network connection services and encrypted call relay). Cloudflare processes connection addresses and traffic needed to connect calls; call media remains encrypted between participants. Push notifications travel through your phone's or browser's push service, encrypted. Meta receives the website ad-measurement events described above, and only from our public website.

Private chats and calls

Private chats use separate encryption keys shared only with their selected participants. We process conversation membership and message timestamps to deliver them. Voice, video and screen sharing use encrypted WebRTC connections; we do not record calls. Connection services process network information needed to connect participants, and direct connections may disclose your network address to the other participants. Your microphone, camera and screen are shared only after you choose to join or share. Family relationship labels are encrypted with your family content and visible to your family.

Deleting your data

Leaving a family removes your access. When a family admin removes someone, the family moves to a new key so that person can't read anything new. To delete your account and everything tied to it, email privacy@samepagefamily.app from the email on your account (or the one you bought with) and we'll remove it. Because content is encrypted, deleted data can't be recovered by anyone.

Children

Same Page is for families, but it is not directed to children under 13, and children under 13 can't have their own account. When someone creates an account, we ask for their birth month and year only to check their age; we don't store it. If they are under 13, we don't create the account; if a Google sign-in already started one, we delete it straight away, and we delete any other account we learn belongs to a child under 13. Teens aged 13 to 17 need a parent's or guardian's permission.

Parents can keep details about younger children on the Kids & pets page, such as sizes, needs and birthdays. That information is entered by the parent, encrypted on your devices, and not readable by us, and it does not create a login for the child. If you believe a child under 13 has an account, email privacy@samepagefamily.app and we will delete it.

Changes to this policy

If we change this policy, we will update the date at the top of this page. If a change materially affects how we use your information, we will tell you by email or in the app before it takes effect.

Questions

Email privacy@samepagefamily.app. See also our Terms of Service.