Privacy policy

Last updated 8 September 2026

Family Agent collects nothing. There is no account with us, no server of ours, no analytics, no advertising identifier, and no third-party SDK. This page is short because there is very little to describe.

Who runs the service

You do. Family Agent is a server you install on your own computer, plus apps that talk to it. When you use the iOS or Android app, it connects to your machine over your own network. The people who wrote this software have no access to that machine and no ability to reach your data.

What is stored, and where

Your documents, chat history, events, sticky notes, activity log and vault entries are stored in a database file on the computer running the server — by default under ~/.local/share/family-agent. Original uploaded files are kept alongside it. Nothing is copied anywhere else.

The mobile and desktop apps keep a little state on the device: the server address, your display name, a couple of view preferences, and a session token. The token is held in the system keychain. None of it is transmitted to us, because there is no "us" to transmit it to.

The assistant

Replies are generated by a language model running on your own hardware through Ollama. Your messages, documents and photos are sent to that local model and to nothing else. No prompt ever reaches a hosted AI API.

Microphone, camera and photos

The apps ask for the microphone only when you use voice input, the camera only when you scan a document, and the photo library only when you attach a picture. In every case the recording or image goes to your own server to be transcribed or filed, and nowhere else. Decline any of them and the rest of the app works normally.

The local network

The apps ask for local network permission so they can find your server by its Bonjour advertisement and by checking addresses on your own subnet. That permission is used for discovery and nothing else — no scanning is reported anywhere.

The two things that can leave your machine

Both are off unless whoever runs the server deliberately turns them on with an environment variable:

• Web search and page fetching. When enabled, the assistant can run a search and read a page. Requests go to the search provider you configure and to the pages the model chooses.
• Connections (MCP). When enabled, the server can call external services an administrator has explicitly configured, at the addresses they entered.

With both switched off — the default — the server makes no request to any host outside your machine.

Children

Family Agent is designed for a household and expects that accounts may be created for children by a parent. Because nothing is collected or transmitted, no personal information about anyone in the household — whatever their age — is available to us or to anyone else.

Deleting your data

Delete items in the app, or delete the data directory on the machine running the server. There is no copy elsewhere to request the deletion of.

Changes

If this policy changes, the updated version will appear on this page with a new date. The source history for this page is public in the repository.

Contact

Questions about privacy, or anything else, belong in GitHub issues.