Family RosterPrivacy
Last updated 10 November 2026
Family Roster lets a person who flies share their roster with the family they invite. This page explains what the app does with your information.
The short version
- Flight numbers, crew names and notes never leave your phone.
- Only people you invite can see your roster.
- No ads. The app has no tracking and no analytics. We do not sell your information.
If you connect a roster
With your permission, Family Roster reads the roster calendar you select on your phone. On Android it uses the Android calendar permission, read only. It reads it on the phone and sends only what your family needs:
- Your status, such as flying, away, home, standby or day off
- Cities and airport codes
- Scheduled times
Flight numbers, crew names, notes and the rest of your calendar stay on your phone. The app never writes to your calendar. On iPhone we also store a salted hash of your Sign in with Apple identifier (Apple gives us no name and no email). On Android you sign in with Google. We keep only a salted hash of your Google user ID, and never store your email, your name or any Google token. On both we store the display name you choose and, if you add one, your photo, stored with its metadata removed.
If you are invited
We store the name you use for the person who flies, your language, time zone, notification choices and the token that lets us send notifications to your phone (on Android, a Firebase Cloud Messaging push token). Invite codes are stored as a hash, work once and expire after 48 hours.
Hearts and feedback
When you send a heart we store which phone sent it and when, so it can reach the person who flies. If you send feedback in the app we receive your message, your email address if you add one, the app version and the phone type. The address your request comes from is used to screen out spam.
Technical information
To limit repeated attempts we keep a hash of your IP address for up to 24 hours. If a roster format cannot be read, you can choose to send a report with counts and masked patterns (letters and digits replaced). These reports are tied to nobody.
The website's feedback button keeps a random ID in your browser so a problem is counted once, and reports page errors so we can fix them. If you write to us through it, we receive your message and the page you were on.
How long we keep it
- Your roster, photo and invited phones: until you delete your account or remove them.
- Records of sent notifications: 14 days.
- Rate-limit entries: 24 hours.
- Feedback: as long as needed to answer it.
Who helps us
Cloudflare hosts the service and its database. KnownHost hosts the server that stores website feedback. Google provides Google Analytics on the website. Apple provides Sign in with Apple and delivers notifications on iPhone. On Android, Google provides Sign in with Google and delivers notifications through Firebase Cloud Messaging. They process information only to provide those services and under their own data protection terms, which give the same or equal protection as this page. No one else receives your information.
Your choices
- Turn off calendar or notification access at any time in iPhone Settings or the Android app settings.
- Remove any invited phone, or pause all sharing, at any time.
- Hide details on the lock screen in the app's notification settings.
- Delete your account in the app: Settings, Delete my account. Your roster, photo and every invited phone are removed for good, and your Sign in with Apple or Google link is removed.
You can ask for a copy of your information, or to correct or delete it, at support@familyroster.app.
Children
A person who flies may invite family members of any age. Family Roster is set up and managed by that adult and is not directed at children.
Changes
If this page changes in a meaningful way we will update the date above.
Contact
CHGROUP - FZCO
support@familyroster.app