We don't sell your data.

Only Family is a product of MadeByWelch LLC, a U.S. limited liability company. “Only Family” is a DBA (“doing business as”) of MadeByWelch LLC. When this policy says “we,” “us,” or “Only Family,” we mean MadeByWelch LLC.

Only Family is a family location-sharing app. Our whole product is you and the people you explicitly invite to your circle knowing where each other are. That's the deal. If we ever change the deal, you'll hear it from us first.

• We do not sell your data.Not to advertisers, not to data brokers, not to insurance companies, not to “partners,” not to anyone. Ever.
• We do not track you across other apps or websites. There are no ad SDKs, no marketing pixels, no analytics that follow you off of Only Family.
• Your location is only shared with the family circle you explicitly join. Not with us for any other purpose, not with third parties.
• You can delete everything. Email support@only.family and we'll wipe your account and all associated data within 30 days.

We only collect what the app genuinely needs to work. Here is the full list:

• Your name and email address — to create your account and show your family who you are.
• Your password (if you sign up with one) — stored only as a salted hash; we cannot read it.
• Your approximate and precise device location — shared with members of your family circle and with us only to route it to those members. Collected in the foreground and, if you grant “Always” permission, in the background so your family can see you while your phone is locked.
• Motion and activity data— processed on your device to detect possible vehicle impacts (“crash detection”). Raw motion data does not leave your phone unless a potential crash is confirmed and you choose not to cancel the SOS.
• Messages and images you send in family chat — stored so the recipients in your circle can read them. Images are stored in Cloudflare R2 (our storage provider) and served via short-lived signed URLs.
• Places you save (home, school, work, etc.) — stored so your circle gets notified on arrival/departure.
• Basic technical logs — IP address, HTTP status codes, timestamps — kept for up to 30 days to diagnose bugs and abuse. Not tied to advertising.

• Your contacts, photos library (except images you explicitly attach to a chat), call history, SMS, microphone, or camera (except when you explicitly take a photo).
• Advertising identifiers (IDFA). We have no SDK that reads it.
• Anything for the purpose of building a profile on you or selling to third parties.

Location and messages are sent from your device to our server (operated by MadeByWelch LLC, hosted on Cloudflare Workers with a managed Postgres database in the United States) and forwarded only to the other members of your circle. We retain location points to power history views (up to 90 days), and messages until you or a circle owner delete them.

If you remove someone from your circle (or they leave), they immediately stop seeing your new location and are removed from the chats they were part of.

We use a small number of third-party services purely as infrastructure. They don't get your data to do anything with it except host our app on our behalf. They are:

• Cloudflare, Inc. — web and API hosting (Workers), edge routing, Hyperdrive connection pooling, and R2 object storage for chat images.
• Neon (Databricks, Inc.) — managed Postgres database, encrypted at rest, for account, circle, message, and location records.
• Apple, Inc. — push notification delivery (APNs) and the App Store.
• Google LLC — only if you choose to sign in with Google. In that case Google shares your name, email, and profile image with us.

Each provider is contractually required to use your data only to provide their service to us.

You have the right to:

• See a copy of the data we have about you.
• Correct anything that's wrong.
• Delete your account and all associated data.
• Revoke location, motion, notification, or photo permissions at any time from iOS Settings — the app will keep working with whatever you've granted.
• Leave or be removed from a circle at any time.

To exercise any of these, email support@only.family. We respond within 30 days.

Only Family is intended for families, which often includes kids. Children under 13 may use Only Family only when a parent or legal guardian sets up the account and the child is a member of that family's circle. We do not knowingly collect data from children for any purpose other than the core family-sharing functionality (name, location, messages with their circle). If you're a parent and want us to delete a child's data, email support@only.family and we will.

Traffic is encrypted in transit with TLS. Passwords are stored only as one-way salted hashes. Authentication tokens live in the iOS Keychain. Our database is encrypted at rest. No system is perfectly secure, but we only collect the minimum we need, which is the best defense.

We operate from the United States. If you use Only Family from outside the U.S., your data will be transferred to and processed in the U.S. By using the app, you consent to that transfer.

If we materially change how we handle your data, we'll update this page and notify you in the app (and by email, if you've given us one) before the change takes effect.

MadeByWelch LLC
DBA Only Family
support@only.family