Privacy Policy

Last updated 5 October 2026. This is the policy for [LLC LEGAL NAME], trading as Family Globe.

The short version. The app is built so that it can plan well for your family without knowing who your family is. Nicknames instead of names. Birth month and year instead of a date of birth. Tick-boxes for requirements instead of a box for diagnoses. No passport numbers, anywhere. Location rounded before it is stored. We do not sell your information and we do not use it to advertise to you.

1. Who we are

Family Globe is operated by [LLC LEGAL NAME], a Florida limited liability company, of [REGISTERED ADDRESS]. We are the controller of the information described here. You can reach us at info@familyglobe.com about anything on this page.

2. The design decision behind this policy

Personalisation normally means identification: the more a service knows about who you are, the better it serves you. We took the view that for trip planning that trade is unnecessary. What the planner needs is a shape — a four-year-old who naps, a teenager who will not walk ten miles, someone who cannot manage stairs, a strict nut avoidance — and none of that requires a name, a date of birth or a document number.

So the app asks for the shape and not the identity. Wherever we had a choice between a field that personalises and a field that identifies, we removed the identifying one. The sections below describe what is left.

3. What we collect

3.1 Your account

• Email address — to sign you in and to send password resets, billing receipts and renewal reminders. This is the one piece of genuinely identifying information we need.
• Password — stored only as a cryptographic hash by our authentication provider. We never see it and cannot recover it.

3.2 Your family profile

• A name for each traveller — and it does not have to be a real one. The app asks for a nickname, and a birth-order number ("Child 1") works perfectly well. The app records whether you told it the name is real, and assumes it is not unless you say otherwise.
• Birth month and year — not the day. We need a moving anchor, so that a five-year-old is not still being planned for as a five-year-old three years later, and so the planner knows the difference between "just turned four" and "nearly six". Age is recalculated from this. Where an older version of the app stored a full date of birth, the day is deleted the next time that profile is loaded.
• Dietary and accessibility requirements — chosen from fixed tick-boxes phrased as requirements, not conditions: "strictly no nuts", "step-free access". There is a short optional note, and the app asks you not to put diagnoses in it. This information gets additional protection and has its own policy.
• Home airport and travel preferences — to plan realistic journeys.

3.3 Your trips

Destinations, dates, the itineraries the app generates, your notes, the bookings you record, the accommodation and flight details you confirm, and any reviews you write.

3.4 Documents you choose to upload

You can store travel documents for a trip. Before the first upload the app shows a notice advising you not to upload passport images or other identity documents, because it does not need them. If you upload one anyway, it is stored for you and you can delete it.

There is no passport-number field in this app and no column in our database to hold one. Document features use expiry dates and nationality, which is all they need. Where an older version of the app once stored a number on your own device, it is stripped out the next time the documents screen loads.

3.5 Location, when you ask for it

Features such as "what's near me" use your device location, with your permission, and only while you are using them. Your coordinates are rounded to roughly 110 metres before they are stored or sent anywhere, and the accuracy figure is deliberately coarsened with them. That is precise enough for directions and for what is around you, and not precise enough to identify a building. The precise reading never outlives the moment it was taken.

3.6 Voice

Two features use your microphone, both only while you are actively using them:

• Trip feedback — you talk about how a trip went, and the app turns that into the preferences it will plan around next time. What it learned is shown back to you in plain words, so you can see it and correct it.
• The live translator — audio is streamed to Google's translation service and returned as speech and text.

We do not keep recordings as audio files once the feature has finished with them, and we do not use your voice to identify you.

3.7 Usage and billing

Which AI features you used, what they cost and your credit balance — this is what drives the meter in the app. Payment card details go directly to Stripe; we never see or store your card number.

3.8 Consents

When the app asks you to agree to something, we record what you were asked, which version of which document you were shown, when, and what you answered — including when you said no. A refusal is kept because it is the evidence that we asked and respected the answer.

4. What we deliberately do not collect

• Passport, ID or driving-licence numbers.
• Precise location. It is rounded at the moment of capture, not afterwards.
• Medical diagnoses. The app asks what is needed, not what is wrong.
• Your contacts, photo library, calendar or browsing history.
• Any advertising identifier. There is no ad tracking in this app.

5. Children

Family Globe is for adults to use. You must be 18 or over to hold an account, and the account holder is the adult who sets it up.

The profiles you create will often describe children, and that is designed around the same principle as everything else: a child's profile needs a nickname, a birth month and year, and their requirements — nothing that identifies them. We ask you not to enter a child's full real name, and the app never requires one. Children do not have their own accounts, cannot sign in, and are never contacted by us.

If you believe a child has given us information directly, email us and we will delete it.

6. Who we share it with

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have never done so, and the app contains no mechanism for it.

We use these service providers, each only for the job described:

We may also disclose information where the law requires it, to protect someone's safety, or to a buyer if the business is sold — in which case this policy continues to apply to you until you are told otherwise.

6.1 Affiliate links

Where the app suggests somewhere to stay or something to do, there may be a link to book it, and if you book we may earn a commission at no extra cost to you. Following one of those links sends no personal information — the link identifies us as the referrer, not you. What the app recommends is never influenced by whether a commission exists. Links that may earn us a commission are labelled where they appear.

7. How long we keep things

• Your account and family profiles — while your account is open.
• Trips and itineraries — while your account is open, because the point of the app is that next year's trip is better for remembering the last one. You can delete any trip yourself at any time.
• Uploaded documents — until you delete them, or until you close your account.
• Consent records — three years, because that is how long we may need them to show what you agreed to.
• Billing records — seven years, as tax law requires.
• After you close your account — we delete your content within 30 days, apart from the billing and consent records above. Backups are overwritten on their own cycle, within 90 days.

8. Your rights

Wherever you live, you can ask us to:

• Tell you what we hold about you, and give you a copy;
• Correct anything that is wrong;
• Delete your information and close your account;
• Stop processing it for a particular purpose, or withdraw a consent you gave.

Email info@familyglobe.com and say which. We respond within 30 days, and we will tell you if we need longer and why. We do not charge for this, and we will not make your experience worse for asking. If we turn a request down we will explain why, and you can appeal by replying — which gets a fresh answer with reasons, not the same one repeated.

To verify a request we will ask you to confirm it from the email address on the account. For a deletion request we may ask a second time, because it cannot be undone.

Depending on where you live you may also have the right to complain to a regulator — in the United States, usually your state Attorney General. We would rather you came to us first, but that right is yours and we will not stand in its way.

9. Security, and its honest limits

Information is encrypted in transit and at rest. Access to the production database is restricted, and the rules about what you have paid for and consented to are enforced on our servers rather than in your browser, where they could be edited. Uploaded files sit in private storage that is not publicly reachable.

What we will not tell you is that this makes us unbreakable. No service can honestly say that. What we can say is that we have reduced what there is to lose: there are no card numbers here, no passport numbers, no precise locations and — if you took the app's advice — no real names.

If a breach affects you, we will tell you directly and without waiting to be asked, along with what happened, what was affected, and what to do about it.

10. Health-related information

Dietary and accessibility requirements are treated more strictly than the rest, including separate consent, and are covered by our Consumer Health Data Privacy Policy. Where that policy differs from this one, it governs that information.

11. Automated decisions

The app generates plans and suggestions automatically. Nothing it does has a legal or similarly significant effect on you — it decides nothing about credit, employment, insurance, housing or your rights. It suggests places to go. You decide.

Everything it produces is generated by AI and can be wrong. It is planning help, not an official source and not a complete reference — including the entry, health, packing, contacts and advisory cards, which are AI summaries of what a search returned at one moment. Anything you will rely on, and in particular entry rules, health and vaccination requirements, prices and opening hours, must be confirmed with the relevant government, embassy, operator or clinician. See section 7 of the Terms of Service.

12. Cookies and similar technology

We use browser storage to keep you signed in and to remember your preferences and your working data. We use no advertising or cross-site tracking cookies, and no third-party analytics that profile you across other sites.

13. Where your information is held

We operate from the United States, and our providers process information in the United States and in other countries where they run infrastructure. If you use the app from outside the US, your information will be processed in the US.

14. Changes

If we make a material change we will tell you in the app or by email at least 30 days before it takes effect, and the date at the top of this page will change. If a change means we need your consent for something new, we will ask for it separately rather than treating your continued use as agreement.

15. Contact

info@familyglobe.com — for any privacy question, request or complaint. Postal: [LLC LEGAL NAME], [REGISTERED ADDRESS].