Privacy Policy
Draft, 16 September 2026
Family Mission Control is a family organiser for parents, the adults they trust and the people who help at home. This policy explains, in plain English, what the app collects, where it lives and what you can ask us to do with it. The app is operated by The Works Holdings, Dubai, United Arab Emirates ("we", "us", "the operator").
The short version
Your data sits on the operator's own server in Germany, not with a cloud data broker. There are no third-party analytics, advertising or tracking kits in the app. We collect only what the app needs to work, and we delete it when you ask.
Where your data is stored
Everything you enter is stored on a server we rent and control ourselves, located in a Hetzner data centre in Germany. Backups are kept on the same infrastructure. We do not sell, rent or share household data with anyone, and no advertising network or analytics provider receives it.
What we collect
Account details. The email address you sign in with, and a display name and preferred language you choose. We use the email to sign you in, to send sign-in links and to answer support requests.
Household data entered by members. The name of the household, its city and timezone, the people and pets in it, events, tasks, shopping lists, school terms, holidays, reminders, chat messages between members and any notes attached to these. This is the content of the app and it is created entirely by the household's own members.
Optional photos. Members can attach a photo to a person, a pet, a task or a shopping item. Photos are stored in a private bucket on our server and are visible only to members of that household.
Optional location at pick-up check-ins. When an adult or helper confirms a school pick-up or drop-off, the app can record the time and, if the member allows it, the location of the phone at that moment. Location is captured only at that check-in, never in the background, and it can be switched off in the phone's settings at any time.
Device tokens for notifications. If you turn on notifications, the app stores the token your phone provides so that reminders can be delivered. Notification delivery runs through Apple and Google, as it does for every app on those platforms.
Subscription status. Whether the household's subscription is active, in its trial or lapsed. Payment itself is handled by the App Store or Google Play; we never see your card details.
What we do not collect
No advertising identifiers, no cross-app tracking, no contact-list uploads, no browsing data. The app contains no third-party analytics or advertising software. Crash reports, if we add them later, will come from Apple and Google's own built-in reporting and will not include the content of your household.
Children
Children do not have accounts. A child under 13 has no login of any kind. Information about a child (name, birthday, school terms, pick-up details, a photo if a parent adds one) is entered by that child's parent or guardian and is visible only to the members of that household. A parent can remove a child's profile, and everything attached to it, at any time from inside the app.
Who can see household data
Only the members of that household, according to their role. Owners and adults see everything in the household. Helpers see the tasks assigned to them, the shopping lists and the household chat. Household data is never shown to another household. Our own staff access the database only to run the service, fix a fault or act on a request you have made.
Calendar feeds and invite links
A household can create a private calendar link that shows its events, birthdays, school terms and holidays in another calendar app. The link contains a long random token; anyone who has it can read that calendar, so treat it like a password. You can revoke a link at any time and a new one can be created. Invite links work the same way and expire after seven days or when used.
How long we keep it
For as long as the household exists. When a household is deleted, or when you ask us to delete your account, the data is removed from the live database straight away and drops out of backups within 30 days.
Your rights
You can ask us to show you the data we hold about you, to correct it, to export it or to delete it. Write to [email protected] from the email address on your account and we will act within 30 days. Deleting an owner's account deletes the whole household, so we will confirm with you before doing that.
Security
Connections to the app are encrypted. Data is held behind row-level access rules so that each member can read only what their role allows. Access to the server is limited to the operator and is over an encrypted private network.
Changes
This is a draft written before public launch. We will update it as the app changes and mark the date at the top. Material changes will be announced inside the app.
Contact and governing law
The Works Holdings, Dubai, United Arab Emirates. Email [email protected]. This policy and any dispute arising from it are governed by the laws of the United Arab Emirates.