Privacy policy

1. Controller

Erkan Kaplan, email: kaplan.erkan@gmail.com

My Family (Benim Ailem / Meine Familie) is a private app for a family's shared to-do list and cash book. There are no ads, no tracking and no analytics services.

2. Data we process

• Account: email address, password (stored only as an encrypted hash), display name, family role. With "Sign in with Google/Apple" also the identifier of the Google or Apple account and the email address stored there (with Apple possibly an anonymous relay address).
• Family: membership, invite codes, join requests, cash book access.
• Content you enter: tasks, reminders, comments, expenses and income, recurring payments, receipts, photos and PDF files.
• Step counter and step goals (health data, optional): The app asks every family member once on their own phone. Only if you turn on the step counter and allow access, it reads your daily step count from Health Connect (Android) or Apple Health (iPhone). Only the daily total (today and yesterday) is stored, for your family and for step-goal tasks; no other health data is read or written.
• Location (family map, optional): Only if you agree, your latest location (latitude/longitude, accuracy, time) is stored and updated regularly – also while the app is closed if you allow that in the system settings. No history is kept; each new position replaces the previous one.
• "Seen": when a family member first saw a task or a shopping item.
• Places and arrival notifications (optional): the family's places (a name such as "Home" or "School", centre and radius), who follows whom, and "arrived"/"left" events (person, place, time). Your device's operating system detects entering or leaving a place; only the event is sent to the server, never a movement history. This is part of location sharing and works only while you share your location.
• Important days: name, day and month (optionally year) of birthdays and anniversaries, also of people who don't use the app (e.g. grandparents). Please only enter such data if the person agrees.
• Meal plan: planned meals and their ingredients.
• Notifications: a push notification device token (Firebase or Apple) and your chosen language, so family notifications reach your device.
• Feedback: your message, an optional screenshot, app version, operating system and device model (no other device identifiers).
• Technical data: when the server is accessed, the hosting provider briefly keeps log data (e.g. IP address, time) for operation and security.

3. Purposes and legal basis

Data is processed only to provide the app: sign-in, syncing between the family's devices, reminders and the cash book (Art. 6(1)(b) GDPR). Feedback is processed to fix bugs and improve the app (Art. 6(1)(f) GDPR). Emails are sent only for account confirmation, password reset and email address changes.

Your step count is health data. It is processed only with your explicit consent (Art. 9(2)(a) GDPR), which you give by granting access in Health Connect or Apple Health. You can withdraw it at any time: in Settings → Account and family → Step counter (steps are then no longer read and the daily steps you shared are deleted) or in Health Connect / Apple Health. Step counts of step-goal tasks remain for the task's history. Steps are not used for advertising, analytics or any other purpose and are not shared with third parties.

You share your location only with your explicit consent (Art. 6(1)(a) GDPR): the app asks once, and the location is sent only after "Yes, share" and the system's location permission. You can withdraw your consent at any time under Settings → Account and family → "Share my location with the family"; your stored location is then deleted immediately. For children, the parents decide.

4. Who sees your data

Tasks are visible to the members of your family. For each expense and income you choose who sees it: the whole family (only members with cash book access), selected people or only you. Your daily step count is visible to your family (who walked how much) if you turned on the step counter or take part in a step-goal task. Your location is visible only to family members who share their own location too. Only family members who follow you and share their own location receive an arrival notification about you; who follows whom is visible to the family on the family map. Places, important days and the meal plan are visible to the whole family. Nobody outside your family has access; this is enforced on the server.

5. Service providers (processors)

• Supabase (Supabase Inc., USA): database, file storage and sign-in. Data is stored in a data center in the EU (Ireland). EU Standard Contractual Clauses apply to any access from the USA.
• Google (Google Ireland Ltd.): "Sign in with Google" and sending system emails through Gmail.
• Apple (Apple Distribution International Ltd.): "Sign in with Apple", distributing the iPhone app through the App Store and TestFlight, and notifications on the iPhone (Apple Push Notification service).
• Google Firebase Cloud Messaging (Google Ireland Ltd.): delivering family notifications on Android. Only the device token and the notification's title and short text are transmitted.
• Cloudflare Turnstile (Cloudflare, Inc., USA): protection against automated sign-ups (bots) when registering, signing in and resetting your password by email. Technical characteristics of your device and browser and your IP address are briefly checked to tell humans from bots; no advertising or tracking cookies are set (Art. 6(1)(f) GDPR, legitimate interest in preventing abuse). Cloudflare is certified under the EU-US Data Privacy Framework. Signing in with Google or Apple does not use Turnstile.
• Map services: The family map uses Google Maps (Google Ireland Ltd.) on Android and Apple Maps (Apple Distribution International Ltd.) on the iPhone. When the map is shown, your device loads map tiles from that provider, which receives technical data such as your IP address and the map area shown. Your location is determined by your device's operating system (on Android via Google Play services).
• Weather: For the weather on the home screen the app sends your location's coordinates, rounded to about 1 km (the last known place when location is off), to MET Norway (Norwegian Meteorological Institute, Norway/EEA). No name, email address or device identifier is sent. The town name (e.g. "Oberhausen") is looked up by your device's operating system (Android Geocoder or Apple). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a useful home screen).

Reading text on receipts (Google ML Kit or Apple Vision) and scanning the invite QR code run directly on your device; images are not sent to Google or Apple for this. The app reads your step count directly from Health Connect or Apple Health on your device; it is not sent to Google or Apple for this.

6. Data on your device

Your sign-in is stored encrypted in the Android Keystore or the iOS Keychain. Lists are cached for fast start-up and the widgets, together with today's step counts. Reminders are local notifications of the device. Family notifications (new task, shopping list) arrive as push notifications; you can turn them off under Settings → Notifications. For arrival notifications the family's places are registered with your device's geofencing; reminders for important days are local notifications.

7. Retention and deletion

Your data is kept as long as your account exists. Under Settings → Delete account you can delete your account yourself: your account, profile, feedback, location, step counts, "seen" records, notification device tokens and all entries that only you or people you selected can see are deleted together with their files. Entries you shared with the family stay with the family, but without your name and email address. If nobody else is left in the family, the family and all its data are deleted too. The hosting provider's backups are overwritten according to its schedule.

"Arrived"/"left" events are deleted after 7 days, meal plans after 60 days. When you leave a family your follow relationships (both ways) are removed, your step counts with the old family are deleted and location sharing is switched off.

8. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability (export under Settings → Data) and objection. Write to the email address above. You can also complain to a data protection supervisory authority, for example the State Commissioner for Data Protection of North Rhine-Westphalia.

9. Children

The app is meant for families. Children under 16 use it with the consent of their parents, who invite them into the family.

10. Changes

If the app changes, this policy is updated. The version published here applies.