Privacy
Family Compass handles deeply sensitive information about family, money, and safety. For that reason, we take the approach of not collecting what we do not need in the first place.
What we do not store
- ・Your children's names
- ・Your children's exact dates of birth (only their age is used)
- ・Your full address (only the ward is used)
- ・Your spouse's name
- ・Detailed free text about safety
What we store
- ・Only if you create an account: your email address and name (a nickname is fine)
- ・The answers used to work out where you stand (situation, children's ages, ward, living arrangement, what's on your mind)
- ・Only if you use “Will the money last?”: the income and spending you entered
- ・Only if you create a consultation summary: its text (stored encrypted)
- ・Only if you request contact from a counsellor: your email address and what to call you (stored encrypted)
About sharing
- ・Sharing happens only when you yourself choose who, what, and until when, each time.
- ・Every share has an expiry. Once it passes, access ends automatically.
- ・You can revoke it at any time. Access ends the moment you do.
- ・Even local government staff and professionals cannot see anything that has not been shared with them.
- ・Counsellors receive only your email address, what to call you, your ward, your current stage, and your display language. What you're consulting about, household figures, and safety answers are not passed on.
About logs
- ・Email addresses, what you are consulting about, safety answers, and household figures are never written to logs.
- ・Creating and revoking a share is recorded in the audit log, but the content itself is not.
- ・IP addresses and browser information are hashed before being stored.
About analytics
- ・We use Google Analytics and Microsoft Clarity to see which screens are being used and how often.
- ・Clarity records how the screen is used, but with **all text hidden**. What you type — your words, amounts, and answers — is not sent.
- ・On the consultation sheet, feedback, household finance, safety check, and sign-in screens, the input areas are hidden as a whole.
- ・The screens for municipal staff, professionals, and operators carry no analytics tags at all.
About deletion
- ・What you enter while not signed in disappears when you close the browser.
- ・You can delete all your saved data at any time from the settings screen.
- ・Once deleted, the people you shared with can no longer see it either.
You can review and delete what is stored from Review and delete your data.