Where Does Your Family App Store Your Children's Data?
A family organiser knows more about your children than almost anything else you install.
It knows their full names and birthdays. Which school they go to and what time they finish. Which afternoons they are alone. Their doctor's appointments. Often their photographs. Sometimes, where they are.
That is a serious amount of information about a person too young to have agreed to any of it. And it is almost never discussed — the family-app category talks about features, not about where the data goes.
Here are six questions worth answering before you invite your children into an app, and how to find each answer in about ten minutes.
Question 1: Where is the server?
Not "is it secure" — every company says yes. Where, physically, is the data.
This matters because the location decides which laws apply and who can compel access. A European family's data on a US server is subject to US legal process in a way that data held in the EU is not.
How to find it: the privacy policy. Search it for "server", "hosted", "stored", or a country name. A policy that names its hosting provider and country is being straight with you. A policy that only says "we use industry-standard security" is avoiding the question.
Question 2: Who pays for it, and does that mean ads?
If an app is free and has no paid tier, something else is paying, and the something is usually advertising. Advertising in an app that knows your child's school and schedule is a different proposition to advertising on a news site.
Ad-supported does not automatically mean your child's data is being sold — but it does mean an advertising network is present, and that is worth knowing.
How to find it: open the free version and look. Then search the privacy policy for "advertis", "third party", "partners" and "analytics". Also check whether the app has a paid tier at all. An app with no way to pay has only one business model left.
Question 3: Can you get your data out?
Not "do they have a policy" — can you actually do it, today, without asking permission.
There is a real difference between a self-service export button and a legal right you have to email someone to exercise. Both may satisfy the law. Only one of them helps you on a Tuesday when you want to leave.
How to find it: look in the app's settings for "export" or "download your data". If there isn't one, look in the privacy policy for how to make a request, and note how long they say they will take. Under EU law a response is due within one month.
Question 4: Can you delete it, really?
Deletion in most family apps has a catch worth knowing about: deleting your account may delete the whole family's data, including things other people created. Some apps say so explicitly. Others do not.
How to find it: search the app's help pages and FAQ for "delete account". Look for two things — whether deletion is permanent and after how long, and what happens to other family members.
Question 5: What happens to a child's profile when they grow up?
This one almost nobody asks, and it is the one your child will care about.
A profile created for a seven-year-old accumulates a decade of location, schedule and photo history by the time they are seventeen. Who owns that then? Can it be handed over to them? Can it be deleted separately from the family's?
Most apps have no answer. That is itself the answer, and it is worth factoring in before you start building a ten-year record.
Related and worth knowing: in most of the EU a child can manage their own account from a country-specific age — 14 in Austria, 16 in Germany, 13 in much of the world. So this stops being hypothetical sooner than parents expect.
Question 6: Are photos and documents uploaded at all?
There is a meaningful difference between "encrypted in the cloud" and "never leaves the device".
Encrypted-in-the-cloud means the company holds the file and, usually, the ability to decrypt it. On-device means the file was never sent. The second is a smaller promise to keep and a much smaller thing to breach.
How to find it: the privacy policy section on photos, files or media. Look for the words "uploaded", "stored on our servers", or "remains on your device".
How to check any app in ten minutes
- Open the privacy policy and search it for: server, hosted, advertis, third party, delete, export, child. Seven searches.
- Open the app's settings and look for an export button and a delete-account button.
- Check the app store listing's data-safety or privacy-label section, and compare it against what the policy says. Where they disagree, believe the policy — it is the legally binding one.
If a policy is so vague that these searches return nothing useful, that is your answer for all six questions at once.
Frequently asked questions
Are family calendar apps safe for children?
Most are, in the ordinary sense that they are not doing anything sinister. The question worth asking is narrower: how much do they collect, where does it live, and can you get it back or delete it. An app that answers all three clearly is usually a safe bet regardless of size.
What is the difference between encrypted and on-device?
Encrypted usually means the company holds your file in a scrambled form and can unscramble it. On-device means the file never left your phone. Both are reasonable; only one removes the company from the picture entirely.
Should I use my child's real name in a family app?
For a shared calendar, a first name is usually enough, and there is no benefit to a full legal name. Save the full details for the places that genuinely need them — school forms, medical records — rather than every app the family uses.
daili