Privacy Policy

We take the protection of your data and your family's data seriously. This privacy policy explains what personal data we process when you use Famunio (https://famunio.com), for what purposes, and on what legal basis.

Swiss data protection law (revFADP) and, where applicable, the EU GDPR apply.

Famunio
Philipp Schoch
Schmittenstrasse 4
8458 Dorf
Schweiz

Email: info@famunio.com
Website: https://famunio.com

Account data: name, email address, password (hashed), language, family role, sign-in information (session, optional WebAuthn/passkeys).

Family and person data: names, dates of birth, school system/region, timetable, calendar, tests, grades, board posts (tasks, lists, polls/decisions, wishlists, ideas, reminders, comments and attachment metadata), recipes (title, ingredients, instructions, servings, image and source URLs, categories), friends, hobbies – depending on how you use the app.

Child accounts: accounts created by parents with restricted permissions.

Payment data: processed via Stripe; we do not store full card details, only references (customer ID, subscription status) with Stripe.

Technical data: IP address, browser/device information, timestamps, server access logs.

Family cloud (optional): If the family owner connects Google Drive, Microsoft OneDrive or Infomaniak kDrive, we store encrypted access tokens, the selected folder (id/name), and attachment metadata (filename, MIME type, size, provider file id). File contents remain in your cloud account and are not stored permanently on Famunio servers.

Providing the service, registration, login and family management (contract performance / pre-contractual steps).

Subscription management and payments via Stripe (contract performance).

Security, abuse prevention, error analysis and infrastructure operations (legitimate interest).

Optional Google OAuth sign-in (consent or contract performance, depending on context).

Optional family cloud folder (Google Drive, OneDrive or Infomaniak kDrive) so attachments in board discussions can be stored in your own cloud and shown to family members via Famunio (consent / contract performance).

Importing recipes from an external URL you provide: our server fetches the page to extract recipe information (typical server-side request including server IP).

Database backups for recovery after outages (legitimate interest in data security).

The family owner may optionally connect a cloud folder. Famunio creates an app folder (e.g. «Famunio») or uses the selected folder and stores attachments (images, PDFs) and preview thumbnails there where applicable.

Google Drive: We use the limited scope «drive.file» (only files and folders Famunio creates or that you explicitly grant to the app) plus email for account labelling. Famunio does not access your entire Drive.

Microsoft OneDrive: comparable access via Microsoft Graph to the selected folder.

Infomaniak kDrive: connection via an API token you create (scopes «drive» and «user_info»). The token is stored encrypted; files are hosted by Infomaniak (Switzerland).

Family members access files only through their signed-in Famunio session; the owner's cloud account is used server-side with the stored token. You can disconnect anytime in settings and revoke access in your Google, Microsoft or Infomaniak account.

Storage, quotas and backups of media files remain the responsibility of the family or the cloud provider.

Netcup (Germany): hosting of the application and PostgreSQL database on a VPS.

Stripe (Ireland/USA): payment processing and customer portal for subscriptions. Privacy: stripe.com/privacy

Google (USA/EU): optional for OAuth sign-in (Google account) and – when connected – Google Drive for the family cloud folder (attachments). The operator also stores encrypted database backups on Google Drive (disaster recovery). Privacy: policies.google.com/privacy

Microsoft (OneDrive/Graph): optional for the family cloud folder. Privacy: privacy.microsoft.com

Infomaniak (Switzerland): optional kDrive for the family cloud folder. Privacy: infomaniak.com/gtc/data-protection

For recipe import from an external URL, our server fetches the page you provide (typical fetch including server IP).

Umami (self-hosted analytics): cookieless usage statistics (page views, referrer, device/country) when analytics is enabled. For signed-in use, the session may be linked via an internal user ID (UUID, no name/email) for product analytics, without an advertising profile.

Let's Encrypt: issuance of TLS certificates.

Using Stripe, Google, Microsoft and possibly other services may involve transfers outside Switzerland/the EEA. These providers use Standard Contractual Clauses or comparable safeguards where required. Infomaniak stores kDrive data in Switzerland.

Account and family data: while the account or family is active; after deletion, data are removed within a reasonable period unless legal retention duties apply.

Cloud tokens and attachment metadata: until the cloud connection is removed or attachments/comments are deleted; files in your cloud remain there until you delete them.

Database backups are retained for a maximum of 30 days.

Server logs: limited duration as operationally required.

Stripe billing data: according to legal and tax requirements via Stripe.

We use strictly necessary cookies or session tokens for login and security (Auth.js).

After inactivity in an open tab, you are logged out automatically (configurable timeout, default 30 minutes).

The app can be installed as a Progressive Web App (PWA). A service worker may cache selected content (e.g. board, dashboard) locally in the browser for limited offline use. This data remains on your device.

On the public landing page, your country/currency preference may be stored locally in the browser (`localStorage`) – without a tracking profile.

When enabled, we use Umami for cookieless web analytics (no advertising cookies). Signed-in sessions may be associated via an internal user ID (no email, no display name); only someone with Famunio admin access can map that ID to a person.

No advertising or marketing tracking cookies are used.

Famunio is aimed at families. Child accounts are created and managed exclusively by authorised adults (parents/owners). Parents are responsible for ensuring that children's use complies with applicable rules and that only appropriate data are collected.

Under applicable law you have in particular the rights of access, rectification, erasure, restriction of processing, data portability, and objection to certain processing.

Account and family data can be deleted in settings where the app provides this. The cloud connection can be disconnected; you manage files in Google Drive/OneDrive there yourself.

Requests: info@famunio.com

You may lodge a complaint with the competent data protection authority (in Switzerland: Federal Data Protection and Information Commissioner, edoeb.admin.ch).

We take appropriate technical and organisational measures (TLS, access controls, password hashing, role-based permissions, encrypted cloud tokens, backups). Absolute security cannot be guaranteed.

We may update this privacy policy. The current version is available on this page. For material changes we will inform you appropriately (e.g. in the app or by email).