Family life should not live in one person's head.

No. FamilyManager runs natively on iPhone and iPad and as a web app in the browser. On Android, install the PWA directly from your browser.

Yes, as a PWA (progressive web app). You install it straight from the browser. All features stay in sync with iOS.

Up to 6 on Free, unlimited with Premium. Per household, not per member. Your ex-partner costs nothing extra either.

Nothing is charged automatically. Without a paid plan, your household continues with the free features.

Nothing dramatic. You go back to Free, your data stays fully intact, only the Premium features are paused. Reactivate anytime.

No. Premium is only needed by the household that runs the custody plan, meaning the one that creates custody days and enters holidays or swap requests. The other household sees the complete plan for free: custody days, handovers, appointments. Tasks, shopping and chat carry on there on the Free plan. A second Premium only makes sense if someone there also wants to actively write to the plan. For comparison: with the large US providers, each parent usually pays separately.

Download all your data as a ZIP in one click, delete your account, no questions, no queue, no hidden backups. Promise.

Your content is encrypted directly on your device before it reaches the server. Not even I can read it. Even if my database were stolen, it would just be unreadable noise.

Your sensitive content is encrypted directly on your device with AES-256-GCM before it reaches the server, an established, globally recognised standard. The key is derived from your password (PBKDF2 with 600,000 rounds), and your password never leaves your device. Each household also has its own key, stored encrypted separately for every member. Only unreadable ciphertext sits on the server.

Encrypted is everything from your family life: tasks, appointments (including location), shopping lists, timetables, expenses, care entries, notes, messages, handover notes, uploaded documents (the files themselves too), stored passwords and the children's profiles with blood type, allergies, medication and emergency contacts. Not encrypted is purely administrative data the system needs to work: your email address for login, the names of your household and members, profile pictures and technical details like timestamps.

No. Decryption needs the key from your password, and that never leaves your device. Neither I nor the hosting provider see your encrypted content in the clear, only unreadable ciphertext. All I can see is the administrative data mentioned, not the content.

Backend, database and all file uploads run on Supabase in a data centre in the EU (AWS region Ireland). Uploaded documents live in private, non-public storage areas of the same EU project. The web app is served via Vercel.

A controller with a legal address in Germany (see the legal notice). For sign-up I only need an email address and a display name, nothing more. All processors (incl. Supabase, Vercel, Stripe, Apple, RevenueCat, Resend, Google) are listed transparently in the privacy policy. Your rights are genuinely implemented: full data export as a ZIP and permanent account deletion, both right in the app. And: no analytics or tracking services, no cookies for analytics.

Because your password is the key to your content, I can't simply reset it, otherwise the encryption would be worthless. That's why you get a recovery code when you set up. Keep it safe: with it you restore access. Without your password and without the recovery code, nobody, not even I, can decrypt your encrypted content.