Privacy

Last updated September 18, 2026

framily helps a group of friends see when they're all free. It stores only what it needs to do that. There are no ads, no analytics or tracking, and nothing is sold or shared with anyone for marketing.

What framily stores

• Your display name, the one you type when you join. There are no accounts, email addresses, phone numbers or passwords.
• Your framily: its name, its invite code and when that code expires, its time zone, and which member started it.
• Your availability: the times you mark as free or busy, any standing weekly rules, and when you last updated them. Your time zone is stored so times line up.
• Plans and answers: plans people propose (time, optional title, note and host), who proposed them, and each member's answer (in, maybe or can't), including whether you actually answered or were assumed to be in because you were free.
• A device token: a random secret created when you join. It's how framily knows it's you. In a browser it's kept in this site's local storage; on iPhone it's kept in the Keychain.
• A push notification token, on iPhone only and only if you allow notifications, so framily can tell you when someone proposes or changes a plan.
• A person key: a random secret this browser or phone makes once and keeps (in this site's local storage, or the iPhone's Keychain). It links the framilies you're in on this device, so that when you're going to a plan in one framily, you show as busy at that time in your others. framily never stores the key itself, only a one-way hash of it, which can't be turned back into the key. A different device gets a different key, so it isn't linked.
• An install id: a random id this browser or app makes up and sends with each request. It identifies a device, not a person, and is used only to limit wrong invite-code guesses.
• Short-lived abuse counters: when someone enters an invite code that doesn't exist or has expired, framily counts it against the network address and install id it came from, in one-hour buckets, to stop people guessing codes. Correct codes aren't counted, and a counter isn't used after its hour ends.

Who can see it

Everyone in your framily can see your name, when you last updated your availability, the plans in the framily and everyone's answers. Your free times are used to find when people overlap and to build a plan's guest list. Anyone holding a current invite code can see the framily's name and its members' display names, so they know what they're joining. Nobody else outside your framily can see any of it.

When a plan you're going to makes you busy in your other framilies, the people in those framilies see only that you aren't free then, the same as any busy time. They don't see the plan, which framily it's in, or that your framilies are linked. Only you see why you're busy.

Where it lives

framily runs on Cloudflare, which stores the data above and handles every request. Like any web host, Cloudflare processes network addresses to deliver the service and may keep operational logs under its own policies. On iPhone, notifications are delivered through Apple's push notification service.

Deleting your data

• Leave a framily (framily tab, then Leave framily) to delete your membership along with your availability, your answers, your push token and any plans you proposed. This browser or phone then loses access.
• Delete a framily: the person who started it can delete it for everyone. That removes every member, every availability entry, every plan and answer, and every push token belonging to it.
• The person who started a framily can also remove any member, which deletes that member's data the same way.
• In a browser, clearing this site's data removes the device tokens, person key and install id from the browser.

How long it's kept

Everything about you in a framily is kept for as long as you're in it, and no longer. It's deleted when you leave, when the person who started the framily removes you, or when the framily is deleted. Invite-code counters are only used during their hour and are then deleted. Deleted data can stay in the hosting provider's database recovery history for up to 30 days before it's gone completely.

Children

framily isn't directed at children under 13.

Changes

If what framily stores changes, this page changes first, with a new date at the top.

Contact

If you can't reach the Leave button any more, for example because you cleared this browser or lost your phone, ask the person who started your framily to remove you. That deletes your data the same way leaving does.