Privacy

Information the service stores

Family AI stores account names, login identifiers, and password hashes. It also stores private AI messages, Partner Chat messages, shared and conflict-solving messages, and images you upload. The service may store settings and operational records needed to run features such as push notifications.

Private image uploads are stored either on the local filesystem or in App Storage, depending on the configured storage backend.

AI processing

When an AI feature is used, prompts and relevant conversation context are sent to OpenAI using the Responses API. Optional image data may also be sent when an image is used as input. Requests set store=False; this setting is not a promise that OpenAI or other providers retain no data, and we make no blanket provider-retention promise here.

In normal private Jim/Julie Chat, the companion may process relevant context from that user's own private AI chat and own private Conflict Area, plus shared Work It Out conversations and retained neutral summaries or agreements the user may see. It does not process the other partner's private AI chats or private Conflict Area. Detailed conflict content is available only during the existing post-resolution retention window; once purged, only retained neutral summary or agreement information remains available for context. It should use sensitive context only when relevant to the user's current message and does not publish private content automatically. Private drafts and clarification messages are excluded unless explicitly shared through the existing approval process.

Partner Chat is privately assessed for AI assistance only while both partners have opted in through the first-time choice or Settings, and only for messages after the mutual-consent boundary. Two or three meaningful messages from each person make an exchange eligible for assessment only; an optional offer may follow only for a genuine unresolved disagreement. Accepting starts separate private, conflict-aware check-ins for both partners. Nothing is added to the shared conversation unless explicitly approved as a neutral context note; raw Partner Chat messages are never included in the shared transcript or automatically copied into permanent private AI memory. The AI never posts in Partner Chat, and turning off either person's consent stops new retrieval.

Hosting and storage

The service is hosted on Replit. Application data is stored in local SQLite or in PostgreSQL when that database is configured. Uploaded images use the local filesystem or configured App Storage. The specific configuration in use can vary by deployment.

Some device-side data may be cached in encrypted form. This does not mean conversations are end-to-end encrypted, and it does not prevent someone with access to a device from seeing available content.

Retention and notifications

Conflict chat messages and images are normally purged about two hours after a conflict is closed; limited resolution and agreement records may remain. There is no blanket retention period stated here for ordinary private or Partner Chat rooms.

If you opt in to push notifications, the service uses device subscriptions and background jobs to process them. You can turn off device notifications through your device or browser controls; doing so does not itself delete account or conversation data.

Deletion and shared information

You can initiate account deletion after signing in through a web browser at /family-ai/account/delete, without installing the app. Deletion erases your private data and redacts your own shared content. It does not delete the partner's content or recall content already received or cached on another device.