FamilyDash privacy policy

Last updated 26 September 2026

FamilyDash is a private dashboard for a single household, shown on a tablet in the family's home. It is run by the family that installs it, on a server they control. This policy explains what it stores and what it does with information from Google.

Who runs this

FamilyDash is operated by Rob Isakson. Each installation serves one household. Questions about this policy go to the contact address shown on the Google consent screen when you connect an account.

What FamilyDash stores

• Household details you enter: the household name, its timezone and location, and a parent PIN, stored as a hash.
• Content you add: children's names, chores and points, Bible verses and their images, meal-plan settings, birthdays, and saved places.
• Sign-in details for the parents who administer the household, handled by the authentication service running on the same server.

All of it lives in that household's own database, in its own installation, separated from every other household. It is not sent to any analytics service or to any advertiser. There are no ads and no tracking.

Google account data

Connecting a Google account is optional. FamilyDash requests read-only access only, and uses each permission for a single stated purpose.

Google Calendar

FamilyDash asks for read-only access to the connected account's calendars, and uses it for one purpose: to read upcoming events and show them on the household's dashboard.

• Calendar events are fetched when the dashboard refreshes, and a short-lived copy is cached on the household's own server so the screen still works if the network drops.
• FamilyDash never writes to, edits or deletes anything in a Google Calendar.
• The token that lets FamilyDash refresh its access is stored on the household's server and is readable only by the server component that renews it. It is not exposed through the app's API and never reaches the tablet.

Google Photos

FamilyDash asks for read-only access to the photos a parent selects for this device through the Google Photos Ambient API, and uses it for one purpose: to show those pictures on the household's dashboard.

• You choose which albums or memories appear, in the Google Photos app on your phone. FamilyDash can see only what you have chosen for this device, never your wider library.
• Photos are streamed to the tablet for display. They are not stored, copied, downloaded, edited, uploaded or shared, and no copy is kept when the screen moves on.
• FamilyDash never writes anything to Google Photos.
• Disconnecting removes its access immediately, and the pictures stop appearing.

What is never done with Google data

• It is never sold, and never used for advertising.
• It is never shared with anyone outside the household.
• No human reads it.
• It is not used to train any model, ours or anyone else's.

Limited use

FamilyDash's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting and deleting

A parent can disconnect a Google account at any time from parent mode on the tablet, which removes the stored token and stops all access. Access can also be withdrawn from the Google account permissions page. Deleting a household removes its data from the server. Cached calendar events are discarded when a connection is removed.

Who else can see this

Only the parents who are members of a household can see that household's data, enforced by per-household rules in the database. Where a household runs its own installation, the server, the database and the storage are entirely theirs. Where an installation is run on a household's behalf, the operator can reach the data only to keep the service running, and is bound by this policy. Your data is not shared with any other processor, and never with another household.

Children

Children use the dashboard in the home. FamilyDash stores only the first names and chore records that a parent enters for them. It does not collect anything from children directly, has no accounts for them, and has no way for them to send information anywhere.

Changes

If this policy changes, the new version appears on this page with a new date.