Privacy Policy

Who we are

Vejara LLC (“Vejara,” “we,” “us”) provides FamilyCircle. Questions about this policy or a privacy request may be sent to privacy@vejara.com.

Information FamilyCircle processes

Account, Circle, and device information

• A stable internal Vejara User ID, display name, adult/child/unknown classification, recovery status, and product/environment identifiers. The User ID represents the cloud account and remains separate from every device attached to it.
• Circle names, memberships, roles, feature settings, invitations, sharing choices, and selected contact details used to address an invitation.
• A separate Installation or Device ID for each participating phone or tablet, plus its user-provided device name, device/platform type, registration time, last-active time, app version, permission and readiness states, push registration, and Circle-sharing settings.

My Devices presents useful device-level information without exposing raw session tokens or device credentials. A last-active time shows only the most recent service activity received from that installation; it does not establish whether the device is currently powered on, in a person’s possession, or connected.

Passkey privacy

When passkeys are enabled in a supported release, Vejara may store a passkey’s public credential and limited security metadata needed to register and verify it. Vejara never receives Face ID, Touch ID, a device PIN, or private passkey keys. Biometric or device-PIN verification stays with the user’s device and platform account.

Information members choose to share

• Latest location and, when separately enabled, location-history points for the Circle’s selected retention period.
• Circle Places, member assignments, and arrival/departure events when those features and permissions are enabled.
• Chats, Screen Time plan terms and status, additional-time requests and decisions, and related Circle activity.

Information kept on Apple devices

Apple keeps the exact apps, websites, category selections, and detailed Screen Time reports on the participating device. FamilyCircle does not upload those exact selections, app names, website names, or Apple selection tokens. Contacts remain under Apple’s permission system; FamilyCircle uses only the contact details the inviter selects for an invitation.

Diagnostics

We process limited security and reliability records such as endpoint type, response status, timing, support reference, app version, User ID or Device ID references, product/environment context, and audited account-protection events. We do not intentionally place invitation codes, recovery codes, installation secrets, precise coordinates, chat text, app names, or website names in diagnostics.

Why we process information

• Provide Circles, invitations, memberships, Chats, locations, Circle Places, notifications, and Screen Time plan coordination.
• Apply sharing choices, roles, safety rules, retention, and product isolation.
• Secure accounts and installations, prevent misuse, investigate failures, and respond to support requests.
• Maintain and improve reliability without third-party advertising or cross-app tracking.

Sharing and service providers

Circle information is available only according to authenticated membership, role, feature settings, and each member’s sharing choices. We use service providers that process information for us, including Microsoft Azure for hosting, databases, security telemetry, and backups, and Apple for app distribution, push notifications, Maps, location permissions, Contacts access, and Screen Time frameworks. These providers process information under their own terms and our configured service boundaries.

We may disclose information when required by law, to protect users or the service, or as part of a corporate transaction subject to appropriate confidentiality and notice obligations. We do not disclose Circle information merely because someone knows a member’s name, phone number, or email address.

Account Protection and device access

An account may have more than one authorized installation. FamilyCircle evaluates account status, device status, Circle membership, and role on the server for every protected operation; information displayed by an app does not itself grant authority.

• Revoke Device ends the selected installation’s sessions and prevents future access and sharing from that installation. It does not delete the cloud account or automatically delete information already retained under this policy.
• The device currently in use cannot remotely revoke itself. Use Remove Account from This Device when you want to clear the current installation.
• Recovery secrets are displayed once after creation or rotation. Vejara stores the information needed to validate them, not a support-readable copy of the secret.
• Parent-approved child-device setup uses a short-lived, single-use authorization for one selected child, product, and supported platform. The receiving installation is linked to the child’s User ID and never to the issuing adult’s account.

Support access and recovery safeguards

Authorized support personnel may see the minimum diagnostic metadata and audit events needed for an approved case, including support references, timestamps, device type, app version, readiness states, and the result of account-protection actions. Access is restricted and audited.

Support personnel cannot see passwords, recovery codes after issuance, raw session tokens, device credentials, Apple’s encrypted Screen Time selections, or Chats and other content beyond the scope the user explicitly authorizes for the support case. Support recovery is case-referenced, time-limited, single-use, and audited; it cannot change Circle ownership or roles.

Retention and deletion

• Latest location is limited to the current shared coordinate for a device and Circle and is removed when that sharing is revoked or the membership/device is revoked.
• Location history is optional and limited to the Circle’s selected period, from 1 to 30 days, with earlier deletion when sharing is revoked.
• One-time invitation links expire after 24 hours; secrets are stored as non-reversible hashes.
• Operational diagnostics are minimized and normally retained for 30 days in the current service configuration.
• Device registration, last-active, readiness, push, and sharing records are retained while the installation is authorized and for a limited security and audit period after revocation, subject to backup, legal, and fraud-prevention obligations.
• Other Circle content is retained while needed to provide the Circle or until members use available deletion, leave, Circle deletion, or account-deletion controls, subject to security, backup, legal, and fraud-prevention obligations.

Uninstalling the app does not by itself delete the cloud account. Use Remove Account from This Device to erase local credentials and local app data from one installation, or use the explicit in-app Delete Account Permanently action for the cloud account. Permanent deletion is blocked while the account owns any Circle; the Owner must first transfer ownership or delete each owned Circle. See Account Deletion.

Children and families

FamilyCircle can be used by a family that includes a child or teen. A parent or guardian is responsible for authorizing and configuring a child’s participation and for using Apple Family Sharing, Family Controls, or corresponding platform controls where required. The service receives only a privacy-preserving adult, child, or unknown classification—not a birth date—from the platform when that capability is available, or a manual classification entered during setup.

Set Up Child Device requires an authorized Parent or Manager to select the exact child. The authorization expires, works once, is bound to FamilyCircle and the supported platform, and cannot give the child additional Circle privileges. See Child Safety & Age Suitability.

A child’s precise location and Screen Time plan information are treated as sensitive. Membership alone does not silently enable sharing. If you believe a child’s information was provided without appropriate authority, contact us so we can investigate and remove it where required.

Your choices

• Review and change location, location-history, and Circle Place sharing in the app.
• Control Apple permissions in iOS Settings.
• Review My Devices, use Revoke Device for an eligible lost or replaced installation, or rotate the recovery code after suspected exposure.
• Leave a Circle when eligible, revoke an invitation when authorized, or ask an Owner or Manager for membership changes.
• Remove local credentials from one device or permanently delete the cloud account through the explicit in-app Account Protection action.
• Contact us to ask about access, correction, deletion, or another privacy right available in your jurisdiction.

Security and international processing

We use encrypted network connections, encrypted Azure storage, short-lived sessions, installation-bound credentials, server-computed authorization, least-privilege service identities, product/environment isolation, redacted diagnostics, and security testing. Account and support views do not expose a raw session list or raw tokens. No system can guarantee absolute security.

Vejara’s initial English-language launch scope is the United States and India. The same account, device, child-safety, and deletion protections apply when members travel, subject to local law and service availability. Vejara currently hosts the service in the United States, so information may be processed in the United States and other locations used by our providers.

Changes and contact

We may update this policy as FamilyCircle changes. We will change the effective date and provide additional notice when a material change requires it. Contact privacy@vejara.com for privacy questions, or visit FamilyCircle Support.