The Family Door Privacy Policy
Last Updated: 5 August 2026
Data controller: Friendly Chaos Unipessoal Lda, tax number (NIPC) 519118472, Avenida Chaby Pinheiro n.º 3 4.º H, Mem Martins, 2725-264, Portugal ("The Family Door", "we")
This policy explains what personal data we collect, why, how long we keep it, and what your rights are. If you have any questions or would like to exercise any of your rights, write to us at hello@thefamilydoor.com.
1. What data we collect
Depending on how you use The Family Door, we may collect:
Identification and contact data Name, email, telephone number, tax number (NIF, for invoicing purposes).
Payment and billing data Purchase history, invoices issued, payment references (your card number is never stored by us; it is processed directly by our payments partner, Easypay).
Platform usage data Appointments booked, courses purchased, content viewed, interactions with the platform.
Professionals' data (if you are a healthcare professional in our network) Name, contact details, academic qualifications, professional registrations/regulatory bodies, professional title, photograph, introductory video (optional), availability, services offered, and supporting evidence of qualifications submitted during your application.
2. Why we process your data, and on what legal basis
About consent for health data
When you create a family account, we ask for your explicit, separate consent — not buried in the general terms — before we collect any health data. You can withdraw this consent at any time by contacting us at hello@thefamilydoor.com; if you do, we will no longer be able to provide you with support through the platform, but this does not affect the lawfulness of processing carried out before the withdrawal.
3. Who we share your data with
We never sell your data. We share only what is strictly necessary, with:
- Healthcare professionals in our network, when you have an appointment booked or in progress with them, or when you are a The Family Door member (in which case our lead obstetric nurse has ongoing access to your profile).
- Easypay (payment processing) — the payment data needed to process the transaction.
- InvoiceXpress (invoicing) — name, tax number (NIF) and email, needed to issue the legally required invoice.
- Resend (transactional emails) — name and email, so we can send you confirmations and reminders by email.
- Hubspot (newsletter) — name and email, only if you subscribe.
All of these partners have data processing agreements in place with us and may only use your data to provide us with the service we have engaged them for — never for their own purposes.
4. International transfers
Most of our partners are based in Portugal or the European Union. Some services (in particular email sending and calendar synchronisation) involve suppliers based in the United States. In those cases, we ensure there is a valid legal basis for the transfer, through Standard Contractual Clauses approved by the European Commission or equivalent mechanisms.
5. How long we keep your data
- Account and profile data: for as long as the account is active, and for a reasonable further period after closure, so that we can respond to any dispute or legal obligation.
- Invoices and billing data: for the period required by Portuguese tax law (currently 10 years).
- Health diary records (symptoms, weight, sleep, emotions): we keep these records for as long as the account is active, including between pregnancies, so that you can look back and compare your experiences over time — this is a deliberate choice, made for your benefit. You can ask us to delete these records at any time.
- Unsuccessful applications from professionals: deleted 2 years after the decision.
- Temporary technical tokens (for example, appointment confirmation tokens): deleted automatically once they expire.
6. Your rights
You have the right to:
- Access the data we hold about you
- Rectify data that is incorrect or out of date
- Transfer your data (portability), in a structured, machine-readable format
- Erase your data (the "right to be forgotten"), subject to the applicable legal exceptions (for example, invoices we are required to retain for tax purposes)
- Object to processing or ask us to restrict it, in certain circumstances
- Withdraw your consent at any time, without affecting the lawfulness of earlier processing
You can exercise these rights directly in your personal area (Profile → My data) or by contacting us at hello@thefamilydoor.com. We respond within one month at the latest.
If you are not satisfied with our response, you have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados – CNPD) — www.cnpd.pt.
7. Security
We protect your data with appropriate technical and organisational measures: encryption in transit and at rest, granular access control (a professional can only access data for patients with whom they have an active care relationship), secure authentication, and access logging for sensitive clinical data.
8. Cookies and similar technologies
The Family Door does not use cookies in the traditional sense, nor traffic analytics tools (such as Google Analytics) or marketing pixels (such as the Meta Pixel). We use only browser local storage (localStorage / sessionStorage) that is strictly necessary for the operation of the Service:
- tfd_lang (localStorage) — stores your language preference (PT/EN).
- tfd_preview_unlocked (sessionStorage) — records, for the duration of the tab session only, that you have entered the preview access password.
- family-today-completed (localStorage) — stores, on your device, which steps of the daily plan you have marked as completed today.
- Supabase authentication session (localStorage) — keeps you signed in; cleared when you sign out.
All of these are strictly necessary and do not require prior consent under Article 5(3) of the ePrivacy Directive. We do not collect browsing data for analytics or advertising purposes. Third-party services (Whereby, Hubspot, EasyPay, InvoiceXpress, Google) are used server-side only or as external links — they are not embedded in our pages and do not place cookies in your browser while you are browsing thefamilydoor.com.
9. Changes to this policy
We may update this policy from time to time. If there are significant changes, we will notify you through the platform or by email before they take effect.
10. Contact
For any questions about this policy or about how we process your personal data, write to us at hello@thefamilydoor.com.