Privacy Policy

Family Facility Finder ("we", "us" or "our") operates a directory that helps parents and caregivers find baby change tables, parents rooms, unisex toilets, male-accessible baby change facilities and private feeding facilities.

This Privacy Policy explains the kinds of personal information we may collect, how we may use and protect that information, and the choices available to you.

This policy covers the website and mobile app, including preview builds. We will update it as our practices change.

Depending on how you use Family Facility Finder, we may collect information that you provide directly to us, including your name and email address, contact messages, feedback, venue submissions, venue updates and other information you voluntarily provide.

You can browse the directory without an account. App feedback includes the app version, operating system version and device model where available, with an optional email for a reply. The feedback form does not attach your account ID or location.

Accounts are optional. When you create an account using email and password or Google sign-in, Supabase processes your account identifier, email address and authentication information. Google sign-in may also supply your name and profile image. Your profile can include a display name, bio and avatar. We store your favourites and account-linked contributions so you can access them across the website and app.

Supabase handles password authentication. The website uses authentication cookies, and the app stores session credentials on your device to keep you signed in. You can sign out from your account.

Reviews, ratings, review tags, helpful votes, reports and photo uploads are linked to your account. Venue submissions and corrections are linked to your account when submitted while signed in. Favourites are private to your account; administrators can review submissions, reports and pending photos.

Reviews, ratings, tags and reviewer profile details may be displayed publicly. Approved venue photos and their captions are public. Pending photos are restricted to their owner and administrators. Your email address is not displayed as part of your public review. Avoid including private contact details or identifiable children in contributions. Uploaded files may contain embedded metadata; do not assume it has been removed.

Family Facility Finder includes location-based features, such as helping you find facilities near your current location. Your browser or device may ask for permission before sharing location information.

Location information is used to centre the map and find nearby venues. Map-area coordinates and search terms are sent to services that provide venue results and maps. The app does not implement background location tracking or a visit-history feature. You can refuse location permission and search manually, or change permission in your device settings.

When you use the website or app, our hosting and technology providers may automatically process technical information such as your IP address, browser type, device type, referring page, requested pages, approximate location and timestamps.

We may use cookies or similar technologies where necessary to operate the site, remember preferences, keep accounts secure or understand how the service is used.

The website loads Google Tag Manager to manage website tags. Updated app builds send basic usage counts to our Supabase service by default for new users. These count sessions, venue views, directions taps, favourite saves, filter changes and successful review, venue and correction submissions. We store daily totals by event and Android/iOS platform, with the public venue ID for views, directions and favourites. We do not attach account, installation or session identifiers, precise coordinates, search terms or written contributions to these requests, or store individual activity histories in the counter database. A session means opening the app or returning after at least 30 minutes away; it does not identify a unique person. Our hosting provider still processes connection information, such as IP addresses and request times, in operating and securing the service. The totals are retained to compare usage over time.

You can disable Share basic usage counts in Account/help. An explicit analytics opt-out from an earlier app build is respected for basic counts unless you change that choice. Separately, Google Analytics for Firebase remains off until you enable Share detailed analytics. When enabled, Firebase processes app-instance identifiers, device and app information and usage events. Venue-open, directions and favourite events include the public venue ID so we can understand which venues are most useful; they do not include precise coordinates, account identifiers, search terms or written contributions. Advertising ID collection and advertising-personalisation signals are disabled. The two switches are independent: turn both off to stop both kinds of usage measurement. Changes stop future collection; they do not erase aggregate totals or events already received by Google. Requests already in transit may still complete.

The app uses Sentry for error reports and diagnostics, including device and app information and activity leading up to errors. Crash reporting is separate from usage measurement. Session replay is disabled in updated builds. Earlier preview builds may still send sampled session replays until replaced; please install the latest build. Default identifying-data collection is disabled. These settings do not mean all diagnostic data is anonymous.

We may use personal information to respond to enquiries, review and verify venue information, operate and improve the service, manage accounts and community features, investigate misuse or security issues, understand how the service is used, and comply with applicable legal obligations.

We do not sell personal information.

We may allow information to be processed by service providers where reasonably necessary to operate Family Facility Finder, including hosting, database, authentication, security, email and analytics providers.

Our providers include Supabase for accounts, database and file storage; Vercel for website hosting; Resend for email delivery; Sentry for app diagnostics; and Expo for app build and distribution tooling. Maps and related features use services such as OpenStreetMap on the website and Google Maps on Android. Google also provides optional sign-in, optional app usage analytics through Firebase, and the website’s Tag Manager. Opening directions passes the venue destination to your chosen maps service. Providers may process technical information under their own privacy policies.

Some service providers used to operate Family Facility Finder are global technology providers. As a result, information may be processed or stored outside Australia.

The countries involved can depend on the provider, service configuration and infrastructure available at the relevant time. We will review and update this section as our service providers and data-storage arrangements change.

We take reasonable steps to protect personal information against loss, misuse, interference and unauthorised access, modification or disclosure.

No online service can guarantee absolute security. We aim to retain personal information only for as long as it is reasonably needed for the purposes described in this policy, to resolve disputes, maintain appropriate records or meet legal requirements.

Our scheduled cleanup removes resolved contact messages and feedback after 12 months. Completed assisted account-deletion receipts are removed once both completion and resolution of the associated request are more than 12 months old. Open requests and incomplete deletions remain until resolved. A specific unresolved dispute or investigation may require a temporary extension, which we review separately.

Basic app usage totals are eligible for removal after 24 months. Cleanup runs daily in batches, so eligible records may remain briefly while a backlog is processed. Active account information and public contributions remain while needed to provide the service, subject to account deletion and moderation.

Firebase is configured to retain event-level data for 2 months and user-level data for 14 months, without resetting user retention on new activity. Standard aggregated Google Analytics reports are not subject to those expiry settings. Error reports, delivery logs, hosting logs and backup copies follow the relevant providers' retention arrangements; our database cleanup does not erase those copies.

Minimal account-deletion security records retain the account ID and deletion timestamps to prevent old sessions from restoring access and to support interrupted cleanup. These security records currently have no automatic expiry and are reviewed separately from support messages and assisted-deletion receipts.

You can contact us if you would like to request access to personal information we hold about you, ask us to correct inaccurate information, or request deletion where appropriate.

In the app, open Account, sign in and select Delete account. Deletion applies to both the app and website and removes your profile, favourites, reviews, votes, reports, uploaded photos and signed-in venue submissions and corrections. Accepted venue listings remain. Separately submitted contact messages and feedback are not linked to your account and are not automatically removed. A minimal deletion record is retained to block old sessions and support completion of deletion. Contact us if you need help or want separately submitted information reviewed for deletion.

To request account deletion without signing in or installing the app, use our Delete your account page. We verify ownership before processing a request. Other privacy requests can be made through our Contact Us page.

Family Facility Finder is designed for parents, caregivers and other people looking for family facilities. It is not designed as a service for children to create accounts or provide personal information independently.

Please avoid uploading photos of identifiable children or including personal information about children in reviews, feedback or venue submissions.

We do not currently require users to subscribe to marketing communications in order to use the directory.

If we introduce newsletters or promotional communications, we will explain what you are signing up for and provide a reasonable way to unsubscribe.

We do not currently use personal information to make solely automated decisions that could reasonably be expected to significantly affect an individual's rights or interests.

If this changes, we will update this policy to explain the kinds of personal information used and the kinds of automated decisions involved.

If you have a question, concern or complaint about how we handle personal information, please contact us through our Contact Us page.

We will review privacy enquiries in good faith and aim to respond within a reasonable period.

Family Facility Finder will continue to evolve. We may update this Privacy Policy when our features, technology providers, information-handling practices or legal obligations change.

The "Last updated" date at the top of this page will show when the policy was most recently revised.