Privacy Policy

Last updated August 27, 2026

This policy applies to the Famn website, Famn apps, and the Famn integration for ChatGPT (together, “Famn”). The data controller is Crudus Kaldheim, doing business as Famn, Norwegian organization/VAT number 989 330 705, Dukkelunden 7, 5518 Haugesund, Norway. Contact us at [email protected] or through our support page.

1. Data we process

Account and contact data: name, email address, account identifier, sign-in status, language, and region.
Household and content data: spaces, memberships and roles, calendars and events, shared lists, and list items created by you or other members.
ChatGPT integration data: selected OAuth permissions, structured tool requests, and the fields needed to return the action you request.
Operations and security data: IP address, device and browser information, timestamps, requested endpoints, error codes, and security events.
Support data: your name, email, and the content you send to support.
Optional analytics: website visit and usage data from Google Analytics when you consent to analytics.

2. Purposes and legal bases

We use data to provide Famn and perform actions you request, manage accounts and shared spaces, answer support requests, protect the service against abuse and failures, and improve reliability and usability. We rely on our contract with you where processing is needed for the service, our legitimate interests in secure and reliable operations, legal obligations where applicable, and consent for optional website analytics.

3. How Famn for ChatGPT works

You connect ChatGPT to Famn through OAuth and select permissions for spaces, calendars, and lists. Famn receives the structured tool request that ChatGPT sends for the action; Famn does not automatically receive your full conversation history. We return only the fields defined by the selected Famn tool. Responses can contain personal data, such as an event title, time, location, or list item, when needed for your request.

ChatGPT and OpenAI process your conversation and the information Famn returns according to your settings and OpenAI's own terms and privacy policies. You can disconnect Famn in ChatGPT. This prevents new calls but does not automatically delete information already sent to or stored by OpenAI.

4. Who receives data

We disclose only what is necessary to:

other members of a space when content is shared with them;
OpenAI when you use the Famn integration for ChatGPT;
providers that operate infrastructure, delivery, error monitoring, security, and support on our behalf;
Google for optional analytics and Sentry for error monitoring, within our configuration of those services;
authorities or others where required by law or needed to protect rights and safety.

We do not permit providers to use Famn data for independent purposes beyond their role and agreement with us.

5. Retention and deletion

Account data and content are kept while the account or relevant space is active, or until an authorized user deletes the content.
Content in a shared space may remain for other members if one member leaves the space or deletes their account.
Famn OAuth access tokens expire after no more than 2 hours. Refresh tokens expire after no more than 3 days and rotate when used.
Your cookie choice is kept for up to 182 days. Analytics data is kept for up to 14 months.
Routine operational logs and error reports are kept for up to 90 days. Data isolated for an active security incident may be kept until the incident and related obligations are closed.
Support cases are kept while handled and for up to 24 months after closure, unless law or a dispute requires longer retention.

When you request account deletion, further account access is disabled and the associated deletion process starts. Limited records may be retained where needed for shared spaces, security, fraud prevention, accounting, legal claims, or other legal requirements.

6. Your controls and rights

You can correct or delete your content in Famn, revoke the ChatGPT connection, and change analytics consent. You may also request access, correction, deletion, restriction, portability, or object to processing where applicable law provides those rights. Contact [email protected]. You may lodge a complaint with the Norwegian Data Protection Authority.

7. Cookies and analytics

Necessary cookies support core features such as privacy choices and form submissions. Google Analytics loads only after you consent. Advertising personalization and advertising storage remain disabled in Famn's consent configuration.

8. Transfers and security

Some providers, including OpenAI, Google, Sentry, and Cloudflare, may process data outside Norway or the EEA. We use applicable contractual and transfer safeguards where required. We use access controls, limited OAuth scopes, encrypted transport, and monitoring to protect data. No system is completely risk-free.

9. Children and changes

The Famn integration for ChatGPT is not directed to children under 13 and requires valid Famn and ChatGPT accounts. We may update this policy as the service or legal requirements change. We will make material changes visible and update the date at the top.