Data deletion

Family Plus does not use email/password, Sign in with Apple, or a developer-hosted identity backend. Family collaboration uses the device iCloud account and CloudKit sharing (CKShare).

We therefore do not offer a developer-side “Delete account” button: there is no Family Plus profile on our servers to erase.

On device, Family Plus stores family content locally (SwiftData and attachment files, plus preferences): shopping lists, tasks, events, meals, occasions, documents, members, shopping-trip history, and preferences such as language, onboarding, and ad frequency limits.

Uninstalling Family Plus removes the app’s data from that device. It does not automatically erase content already present in other people’s shared iCloud family space.

When you use a family space, content may sync in Apple’s iCloud container for Family Plus. The developer does not operate a console to delete users’ CloudKit records.

Permanent cloud deletion depends on Apple’s rules (family space, participants, share management) and what remains on other devices.

If you are a participant (not the organizer), More → Family lets you leave the family space. The app attempts to remove you from the CloudKit share; if that succeeds, it deletes that family’s data from this device.

If the CloudKit leave fails, local data is preserved so you do not lose content without completing the leave.

Leaving does not delete the organizer’s space or data on other devices.

The organizer manages invites through Apple’s system sharing UI. The current app does not include a “delete entire family” action that destroys the space for every participant.

To revoke access or end collaboration, use iCloud/CKShare system controls and, if needed, remove the app from devices that should no longer keep a local copy.

Attachments may be stored locally and, where supported, synced as CloudKit assets. Deleting a document in-app removes local data and relies on sync to update other devices. Leaving the space or uninstalling removes local attachments on that device.

Reminders and collaborative activity alerts are handled on device. Uninstalling or revoking notification permission stops those local notifications. Silent subscriptions used for sync depend on iCloud/Apple.

Google AdMob and UMP may keep consent state and technical identifiers under Google’s rules. Uninstalling clears local state; it is not a full erasure of Google processing elsewhere. Where UMP requires it, More may offer Google’s privacy options. See also the Privacy Policy.

Questions about this guide: fernando@fernandopiras.com. Include app version, device, and whether you are organizer or participant. We cannot remotely delete third parties’ iCloud data.

Other documents: Privacy · Terms · Support.