What Family Holidays stores, and what it does not.
iPhone users sign in with Apple. Android users sign in with Google. We receive an identity token from that provider (a subject identifier, and whatever name the provider includes). We do not receive or store your Google or Apple password. We do not merge an Apple login and a Google login just because the emails match.
After sign-in the app keeps a short-lived access token and a rotating refresh token on the device. On iPhone they live in the Keychain. On Android they live in EncryptedSharedPreferences (Android Keystore). They are not written to ordinary preferences or logs.
Gift ideas meant for you are hidden from you by the server, not by a filter on the phone. Reminders are scheduled on the device; we do not use Firebase Cloud Messaging.
No ads. No selling of data. No public profiles. A family is invite-only.
You can delete your account from Settings → Delete account in the app, or by following the steps on the account deletion page. It is immediate and permanent.
Deleting removes your sign-in identifier, your email address, your account name, every sign-in token and your membership of every family. Your family's calendar is not deleted — birthdays, gift ideas and hosting belong to the whole family rather than to whoever entered them. Your name is kept on that family's member list as a profile no longer tied to any account, which is what keeps their birthdays and gift history working; an admin of that family can remove it, or you can ask us to. A family you were the only member of is deleted outright with everything in it.