Privacy Policy

We take the protection of your data and your family's data seriously. This privacy policy explains what personal data we process when you use Famunio (https://famunio.com), for what purposes, and on what legal basis.

Swiss data protection law (revFADP) and, where applicable, the EU GDPR apply.

Famunio
Philipp Schoch
Schmittenstrasse 4
8458 Dorf
Schweiz

Email: info@famunio.com
Website: https://famunio.com

Account data: name, email, hashed password, language, family role, session data, optional WebAuthn credentials.

Family data: names, dates of birth, school settings, timetable, calendar, tests, grades, board posts (tasks, lists, polls/decisions, wishlists, ideas, reminders, comments and attachment metadata), recipes, friends, hobbies – depending on usage.

Child accounts: created and managed by parents with restricted permissions.

Payment data: processed by Stripe; we store subscription references, not full card details.

Technical data: IP address, browser/device information, access logs.

Family cloud (optional): If the family owner connects Google Drive, Microsoft OneDrive or Infomaniak kDrive, we store encrypted access tokens, the selected folder (id/name), and attachment metadata (filename, MIME type, size, provider file id). File contents stay in your cloud account and are not stored permanently on Famunio servers.

Providing the service, registration, login and family management (contract performance).

Subscription and payments via Stripe (contract performance).

Security, abuse prevention, error analysis and infrastructure (legitimate interest).

Optional Google OAuth sign-in (consent / contract, depending on context).

Optional family cloud folder (Google Drive, OneDrive or Infomaniak kDrive) so board discussion attachments are stored in your own cloud and shown to family members via Famunio (consent / contract performance).

Recipe import from a URL you provide (server fetch).

Encrypted database backups for disaster recovery (legitimate interest).

The family owner may optionally connect a cloud folder. Famunio creates or uses an app folder (e.g. «Famunio») and stores attachments (images, PDFs) and preview thumbnails there.

Google Drive: We use the limited scope «drive.file» (only files and folders Famunio creates or that you explicitly open with the app) plus email for account labelling. Famunio does not access your entire Drive.

Microsoft OneDrive: comparable access via Microsoft Graph to the selected folder.

Infomaniak kDrive: connection via an API token you create (scopes «drive» and «user_info»). The token is stored encrypted; files are hosted by Infomaniak in Switzerland.

Family members access files only through their signed-in Famunio session; the owner's cloud account is used server-side with the stored token. You can disconnect anytime in settings and revoke access in your Google, Microsoft or Infomaniak account.

Storage quotas and backups of media files remain the family's / cloud provider's responsibility.

Netcup (Germany): hosting and PostgreSQL database.

Stripe: payment processing and customer portal.

Google: optional OAuth sign-in; optional Google Drive for the family cloud folder (attachments); operator-side encrypted database backups on Google Drive (disaster recovery).

Microsoft (OneDrive/Graph): optional family cloud folder.

Infomaniak (Switzerland): optional kDrive family cloud folder.

Umami (self-hosted analytics): cookieless, aggregated website statistics when enabled.

Let's Encrypt: TLS certificates.

Using Stripe, Google, Microsoft and similar services may involve transfers outside Switzerland/EEA. Providers use Standard Contractual Clauses or equivalent safeguards where required. Infomaniak hosts kDrive data in Switzerland.

We use strictly necessary session cookies for login and security (Auth.js).

After inactivity in an open tab, you are logged out automatically (configurable timeout, default 30 minutes).

The app can be installed as a Progressive Web App (PWA). A service worker may cache selected content locally for limited offline use.

The public landing page may store your country/currency preference in localStorage.

When enabled, Umami provides cookieless, aggregated analytics without advertising cookies.

Account and family data: while the account or family is active.

Cloud tokens and attachment metadata: until the cloud connection is removed or attachments/comments are deleted; files in your cloud remain until you delete them there.

Database backups are retained for a maximum of 30 days.

You may have rights of access, rectification, erasure, restriction, portability, and objection under applicable law.

You can disconnect the cloud folder in settings; manage Drive/OneDrive files in those services.

Contact: info@famunio.com

We may update this policy. The current version is published on this page.