Privacy Policy

Last updated: 20 October 2026 (paid add-ons and shared login added)

1. Who we are

OurFamilyGrid is run by Timothy Jollie, an individual in the UK, who built it for his own family and opened it up to others. "We" in this policy means Tim. Contact: hello@ourfamilygrid.com.

OurFamilyGrid is free. The running costs (about £200 a year for the server and domains) are paid by Tim, helped by donations on GoFundMe. Nothing about you is sold to pay for it.

2. What we hold

• Account: your name, email address, password (stored only as a bcrypt hash, never readable), household name and country.
• Profile (optional): date of birth, gender, phone number, postcode, photo.
• What you add: shopping lists, tasks, calendar events, meal plans, recipes, garden, vehicles, pets, documents, photos, travel plans and anything else you choose to enter.
• Health (optional): things like mood, blood pressure, appointments, medications and notes, only if you enter them or connect a source listed in section 5.
• Money (optional): transactions you enter or upload, and, if you connect it, your Monzo transactions (read-only). Bank transaction descriptions are encrypted in the database.
• Password vault: encrypted with a key derived from your own password, so we can't read it. How vault encryption works.
• Server logs: IP address, pages requested and errors, kept for about two weeks for security and fixing bugs, then deleted automatically.

3. What we use it for

• To run OurFamilyGrid for you, and to share household items (lists, calendar, meals and so on) with the people you invite into your household.
• To send the notifications you've switched on (in the app, push to your phone, or email). You choose which in Profile → Notifications.
• To keep the service secure and to fix problems.
• Occasionally to email you about your account or the service, from Tim personally. You can reply "stop" to any of these and you won't get them again.

We don't sell or rent your data, share it with advertisers or data brokers, use it to target ads, or use it to train AI models.

4. Legal basis

• Contract: to provide the service you signed up for.
• Legitimate interests: security, fixing bugs and the occasional service email.
• Consent: for health information and for optional connections to outside services. You can withdraw it by removing the data or disconnecting the service.

5. Outside services, and exactly what they get

Most of OurFamilyGrid never leaves our server. These services are only contacted when you use the feature next to them:

• Anthropic (Claude AI): plant identification and plant doctor, receipt scanning, health-letter explanations, fridge and meal ideas, trip planning. Only the photo or text you submit for that request is sent. Anthropic's API terms say they don't train their models on it.
• Google Firebase: delivers push notifications to the phone app. It receives your device's push token and the notification text.
• DVSA MOT History and DVLA Vehicle Enquiry: the registration number of vehicles you add, to fetch MOT and tax details.
• Monzo: only if you connect your Monzo account, to read your transactions. You can disconnect at any time.
• ResMed myAir: only if you connect your CPAP account, to read your sleep data.
• Android Health Connect: only with your permission on your phone (see section 7).
• HERE and weather services (OpenWeather, Open-Meteo): place names or locations you search for, and your area for local weather.
• TMDB: the titles you search for in Watchlist, using your household's own TMDB key.
• Have I Been Pwned: when the vault checks whether a password has appeared in a breach, it sends only the first 5 characters of a hash of it, never the password itself.
• Stripe: only if you subscribe to a paid add-on. Stripe takes the payment; we never see or store your card. Stripe gets your name, email and the payment details you enter, and tells us whether the payment worked.
• Discord: only if your household links a Discord server for notifications.
• Fonts and icons: pages load fonts and icons from Google Fonts and cdnjs (Cloudflare). Like any website request, they see your IP address. No cookies or tracking are involved.

6. One account for all OurGrid apps

The same login works on these sister apps. They are all run by Tim, on the same server, under this policy. Nothing is handed to another company by signing in to them.

• OurHealthGrid (ourhealthgrid.com): reads your name, email and household so you don't need a second account. If you use both, your health entries are kept in step between them.
• OurProjectGrid and OurEventsGrid (paid add-ons): read your name, email and household, plus your household's country to work out the price. What you add in them is stored by that app.
• OurNurseryGrid: only if your nursery uses it and you choose to link your OurFamilyGrid account.

For paid add-ons we also keep a record of your subscription (plan, trial and renewal dates, and your Stripe customer number) so every app knows what you have. It's shown under Account → Payments. Signing in to one app doesn't give it your data from the others, except as described above.

7. Android Health Connect

The Android app can read and write health data through Android Health Connect, only with your explicit permission: steps, heart rate, blood pressure, weight, sleep sessions, blood glucose and active calories burned.

• It's used only to show your own health trends in the app. With your permission, readings you enter are written back to Health Connect so your other apps can use them.
• If you're logged in, it's synced to your account on our UK server.
• Health Connect data is never sold, shared with advertisers, used for advertising, or used for anything not allowed by the Health Connect Permissions policy.
• To stop it: Android Settings → Health Connect → App permissions → OurFamilyGrid. To remove what's already synced, delete it in the app, delete your account, or email us.

8. Where it's stored and how it's protected

• On a server we rent from Hostinger in Manchester, UK.
• All connections use HTTPS. Passwords are bcrypt-hashed. Bank transaction descriptions and other sensitive fields are encrypted with AES-256-GCM. The password vault uses per-household keys only you can unlock.
• Only Tim has access to the server, using SSH keys.
• Private documents are only shown to the person who uploaded them. Everything else in a household is shared with that household's members.

9. How long we keep it, and leaving

• We keep your data while your account exists.
• Take it with you: Profile → Download my data gives you a zip file with everything you've added, your household's shared records, and your photos and documents.
• Delete it: Profile → Delete My Account removes your account. If you're the only person in your household, the whole household and its data goes too. Or email us and we'll do it for you.
• Deleted data can stay in server backups until those are overwritten.

10. Your rights

Under UK GDPR you can ask to see, correct, delete or move your data, and object to or restrict how it's used. Most of this you can do yourself in the app. For anything else, email hello@ourfamilygrid.com and we'll reply within 30 days. You can also complain to the Information Commissioner's Office at ico.org.uk.

11. Cookies

One cookie: the session cookie that keeps you logged in. There are no advertising or analytics cookies, on the app or on the public pages. The app also saves a few display preferences (like which tab you last had open) in your own browser. Those never leave your device.

12. Changes

If this policy changes in a way that matters, we'll say so in the app. The current version is always at ourfamilygrid.com/privacy.

OurFamilyGrid · Hosted in Manchester, UK · hello@ourfamilygrid.com