Documents

Privacy

In short: FamilyMesh encrypts conversation content on devices. The server still needs limited technical information for delivery.

Updated August 16, 2026

Data used by the service

An account uses the supplied name, email or phone, password hash, space memberships, public device keys and delivery metadata. The server may also see an IP address, request time, sender and recipient identifiers, and the encrypted packet’s size and type.

What is encrypted

Message text, replies, file contents, voice recordings and precise coordinates are encrypted before transmission. Private keys are created on the device and protected by Android Keystore. The server and relay devices transport encrypted data and should not receive its plaintext.

Messages and attachments

Undelivered encrypted messages are stored temporarily until receipt or expiry. The current delivery lifetime is up to seven days. Encrypted attachments can also remain available for up to seven days. Delivered copies stay on participant devices until a user clears the conversation or app data.

Location

Android location permission is used only for map and sharing features. Another participant can send a request, but publishing coordinates requires a user action. Active sharing can be stopped in the app or through the system notification.

Nearby, calls and notifications

Google Play Services participates in Nearby discovery. Voice and video calls use WebRTC. FamilyMesh prefers direct phone-to-phone channels and uses encrypted server signalling and fallback delivery when direct communication is unavailable. Network intermediaries may observe connection metadata, while media is protected with DTLS‑SRTP.

Data controls

You can clear conversations on your phone and delete the account in the app. Account deletion removes server access, account records and pending objects according to service rules, but cannot erase messages already delivered to other participants’ devices.

Important limits

Encryption does not protect data on an unlocked or compromised device, screenshots, copied text or content voluntarily shared by a recipient. FamilyMesh is not an emergency-response service; SOS and location are delivered through available channels without a timing guarantee.

Your control matters

Verify new-device fingerprints, use a unique password and remove lost devices from your spaces.