Family Plans
Share BoxOwl Premium across a household — one payer, separate vaults.
What a Family Plan Is
A family plan unlocks BoxOwl Premium for several BoxOwl accounts under a single subscription. Each member keeps their own private vault: their data does not get pooled, copied, or made readable by the plan owner. The plan only governs billing and feature entitlement.
The plan owner pays once a month and can add, remove, or transfer seats. Members who leave keep their accounts and their data — they just drop back to the free tier on their next renewal.
Tiers
| Plan | Seats | Best for |
|---|---|---|
| Family | Up to 4 | Couples, small households. |
| Family+ | Up to 6 | Larger households with kids. |
| Extended | Up to 12 | Multi-generational households or care networks. |
See Pricing for current per-month rates. The per-seat cost decreases as the tier increases.
Inviting a Member
- On the plan owner's device, open Settings > Family Plan.
- Tap Invite Member and enter their email address.
- BoxOwl emails them a one-time invite token. The token is single-use and expires after seven days.
- The invitee opens the BoxOwl app on their own device, signs in (or creates an account), and pastes or scans the token to join the plan.
Invite tokens are bound to the specific seat. If you generate a token and the invitee never uses it, you can revoke it from the same screen and issue a new one. Don't share tokens publicly — anyone with the token claims that seat.
Child Accounts
You can create a child account directly from the family plan screen. Child accounts are full BoxOwl accounts with two differences:
- The parent who created them is the recovery contact — if the child forgets their password, the parent can authorize a reset.
- Public-page indexing is off by default and cannot be enabled until the account is converted to a regular adult account (parent action required).
A child account's vault is still private to the child. Parents do not have a back-door read path.
Switching Plans
The plan owner can upgrade Family → Family+ → Extended at any time. The seat count grows immediately; new seats can be invited the same day. Stripe pro-rates the difference for the current billing period.
Downgrading is a per-cycle action: the change applies on the next billing period so we don't yank Premium out from under members mid-month. If the new tier is smaller than the current member count, you must remove members before the cycle rolls.
Leaving or Removing a Member
Either the plan owner or the member can end membership:
- Owner removes member — Settings > Family Plan > Members > (member name) > Remove from Plan. Effective immediately; member drops to free tier.
- Member leaves — Settings > Family Plan > Leave Plan. Effective immediately; member drops to free tier.
A member who drops to the free tier keeps their vault and their data. Premium-only features (e.g. custom CSS on pages, structured resume export) stop applying on the next refresh.
Cancelling the Plan
The plan owner can cancel from Settings > Family Plan > Cancel Plan. The plan remains active through the end of the current billing period; on the renewal date all members drop to the free tier together.
You can resubscribe at any time. The plan structure and member list are remembered for 30 days after cancellation so you can resume without re-inviting everyone.
Vault Isolation
This is the most-asked question, so a clear answer up front: family plan members cannot see each other's vault data. The plan owner sees billing details and a member list (handle, display name, status). They do not see what is inside any other member's vault.
If a parent wants to see a child's vault, the child has to connect with them through the normal Connections flow and share specific categories. The same is true of any other family relationship.