Privacy
Last updated 2 October 2026
If you're a child, here's the short version
- The app only uses where you are to find things near you.
- Your family can only see where you are if a grown-up switches it on and you start sharing. You'll always see a bar saying "Your family can see where you are".
- Nobody new can join your family unless a grown-up who organises it lets them in.
- Please don't put your full name, address, school or anything about your health in the app.
- Sharing stops when you get home or after an hour, and we don't keep a record of where you went.
- No adverts, and we never sell anything about you.
- You can delete your data at any time: tap Family, then Delete my data. Ask a grown-up if you're not sure.
Who we are
This app is run by [your name]. If you have a question about your data, email [your email address].
What stays on your phone
Your settings (family nickname, food choices, budget, kids' ages, car, text size), saved places, event filters, which home buttons you've switched off, your last search area, the latest weather, the lost child card (if you set one up), the Grab List quick buttons you've added, and saved search results stay on your phone (and, on phones in testing mode, a count of which buttons were tapped). Saved search results are deleted after 7 days. Star ratings from Google are never saved. To remove all of this, open settings and tap Clear app data on this device.
Cookies and storage on your phone
The app doesn't use cookies, adverts or tracking of any kind. To work, it stores a few things on your phone: the settings and saved things listed above, a copy of the app so it opens without signal, and, only if you start or join a family, a sign-in so the family's database knows it's you (and, only if you turn popups on, a popup helper). All of these are needed for things you've asked the app to do, so there's no cookie banner. Nothing is read by anyone else. To remove them, use Clear app data on this device in settings, or clear this site's data in your browser.
Your location, when you search
When you tap a button, your phone's location (or the postcode you type), rounded to about 100 metres, is sent to the services that find places and events near you. We don't keep it.
- Geoapify for places, if it's switched on (through our server, with your location rounded to about 100 metres), and OpenStreetMap (Overpass) for places otherwise.
- postcodes.io for area names, and for the nearest postcode of places shown to you (it gets those places' positions).
- Food Standards Agency for food hygiene scores (through our server).
- Google Places for star ratings, if they're switched on (through our server).
- Ticketmaster and Skiddle for events, if they're switched on (through our server, with your location rounded to about 100 metres).
- Open-Meteo for the weather, so Buddy can suggest indoor fun when it's wet (your location rounded to about 1 kilometre).
When you tap Take me there or a web search, Google Maps or Google Search opens and their own privacy terms apply.
Family features
These are only used if you start or join a family. You don't need an email address or password: each phone that starts or joins a family gets an anonymous sign-in from Google Firebase (phones that don't use family features don't). Joining needs the family's code, and then a grown-up who organises the family has to let you in; until then you can't see anything in the family. Please only use a first name or nickname, and don't add personal or health details anywhere in the app. We store:
- the family's name and 6-letter join code, and the home point if an organiser sets one;
- each member's first name, whether they're a grown-up or a child (chosen by an organiser), and whether they organise the family;
- Grab List items, who added them and who's getting them (ticked items are removed after a day);
- plans: events and places someone shared with the family, and who shared them (removed after their day);
- trips while someone is sharing: only the latest position, which is deleted when sharing stops or runs out (after 1 hour, or 3 hours at most);
- popup addresses for each phone that turns popups on (so we can send family popups). Turning popups off removes that phone's address.
- the family's record of changes: who changed a setting, the family name, the home point or the join code, let someone in, changed someone between child and grown-up, or left the family, and when. When children's trip sharing is switched on, the record also keeps the warning the organiser read and confirmed. Everyone in the family can see the record and nobody can edit it.
This data is kept by Google Firebase in London (europe-west2) and protected by database rules: only members of your family can see it, and a child's trip can be limited to grown-ups only.
Children
We follow the UK Information Commissioner's Children's Code. Children's location sharing is off unless a grown-up who organises the family switches it on. Organisers choose who sees a child's trip and whether children start trips themselves or only when a parent asks, and everyone in the family is told when these settings change. There's no advertising, no profiling and no selling of data.
How long we keep things
- Trips: only while shared, then deleted (and removed automatically once they've ended).
- Ticked Grab List items: one day. Plans: until the day after their date.
- The family's record of changes: until the whole family is deleted. Lines stay even if the person who made the change leaves, so the family can always see who switched children's settings on.
- Everything else in a family: until it's deleted (see below).
- Things on your phone: until you clear them or remove the app.
Deleting your data
- Delete my data (anyone, in Family) removes your name, trip, popup settings, plans you shared and the Grab List items you added, and clears the app on your phone. Lines with your name in the family's record of changes stay until the family is deleted (see above).
- Delete [name]'s data (organisers) does the same for a family member, for example a child.
- Delete whole family (organisers) deletes the family and everything in it. When the last person leaves, the family is deleted too.
- Clear app data on this device (in settings) removes what's stored on your phone.
Your rights
Under UK data protection law you can ask to see, correct or delete your data, and you can complain to the Information Commissioner's Office at ico.org.uk. Please contact us first so we can help.
Services we use
Google Firebase (family data, sign-in and popups), our web host (Netlify or Cloudflare), Geoapify, OpenStreetMap (places, and the family map's pictures), the Food Standards Agency, postcodes.io, Google Places, Ticketmaster, Skiddle and Open-Meteo. The app's lettering and map code come from our own site, not from other companies. Firebase's code only loads on phones that start or join a family. Each service only gets what it needs to do its job.