Privacy Policy.

The data controller is Alex Chebotarevich, an independent developer behind My Family Flow, based in Belarus (referred to as “we” or “the app”). “You” means a user of the app or a visitor to myfamilyflow.com.

This policy covers the iPhone app, the website and the backend. For any data-related question, write to privacy@myfamilyflow.com — we reply within 30 days, usually much sooner.

Only the data you provide yourself, plus the minimum technical information without which the app cannot work.

• Account: email, name, avatar and sign-in method — email and password, Apple or Google. For Apple we receive a user identifier and, if you allow it, your email; Apple never shares your password with us.
• Family: the space name, its members, roles and invitations.
• Family content: grocery lists, tasks, events and important dates, the wishlist, outings, films and shows, loyalty cards. This may include other people’s names and birthdays — you add those yourself.
• Photos: avatars and cover images you upload.
• Device and settings: push token, language, time zone, app and OS version — to deliver notifications and show the right time.
• Technical data: IP address, request time, error codes — for security, diagnostics and abuse prevention.
• Correspondence: emails to support and their content.

We do not collect advertising identifiers, browsing history, precise location, financial or medical data. Access to iOS contacts is requested only when you choose to import birthdays; only the records you pick enter the app.

• To run the app: sign-in, sync and the family space.
• To remind you: push notifications about dates, tasks and groceries, if you enable them.
• To protect the service: preventing abuse, investigating failures, securing accounts.
• To answer you: handling support requests and data inquiries.
• To comply with the law: responding to lawful requests and keeping required records.

We do not use data for advertising, profiling, automated decisions with legal effects, or sale.

If you are in the EU, EEA or UK, we rely on:

• performance of a contract — account, sync and app features (Art. 6(1)(b) GDPR);
• legitimate interests — security, diagnostics and abuse prevention (Art. 6(1)(f));
• consent — push notifications, contacts and photo access where required (Art. 6(1)(a));
• legal obligation — responding to lawful requests (Art. 6(1)(c)).

You can withdraw consent in iOS or in the app. Withdrawal does not affect processing that has already happened. Elsewhere, we process data on the basis of these terms and your consent.

Data lives on a Contabo virtual server in France (EU) that we administer, and with the processors listed below. Traffic between the app and the server is protected by TLS; passwords are stored only as Argon2id hashes; access tokens live in the Keychain on your device.

Only the members of a family space can access it. We do not read your content. If you contact support and ask for help with your data, we look only at what is needed to answer.

Backups are created daily and kept for no longer than 30 days. Technical logs are kept for up to 90 days.

Only the services without which the app cannot work. They process data on our instructions and may not use it for their own purposes.

Apple

Sign in with Apple and push delivery via APNs. Apple privacy policy.

Google

Sign in with Google, if you choose it. Google privacy policy.

TMDB

Film and show search: only the search query is sent. Posters are stored on our side. TMDB privacy policy.

Resend

Delivery of transactional email: verification, password reset and account notices. Processing region: EU (eu-west-1). We pass the recipient’s email and name.

Cloudflare

DNS, CDN, attack protection and domain email routing. Cloudflare privacy policy.

Contabo

A virtual server in France (EU) running the API and the database. Contabo privacy policy.

We do not sell data or share it with ad networks, data brokers or analytics platforms. We disclose data only where the law requires it, and only to the minimum extent necessary.

Primary storage is in France (EU). Some processors (Apple, Google, TMDB, Cloudflare, Resend) may process data outside the EEA, including in the United States. We transfer only the data needed for a specific feature and rely on lawful safeguards — the EU Standard Contractual Clauses and data processing agreements with processors. You can request a copy of those safeguards at privacy@myfamilyflow.com.

For as long as your account exists. You can delete it in the app: Settings → Account → Delete account. Personal data (email, name, avatar, password, Apple/Google links, sessions and push tokens) is erased immediately, and the Apple token is revoked.

If you are the only member of your family, the space is deleted together with the account. If other members remain, shared records stay with the family without your personal data — they keep only an anonymised reference to the author (a tombstone) so the family history is not broken.

• Backups — 30 days (created daily).
• Technical logs — up to 90 days.
• Email links: verification — 24 hours, password reset — 1 hour.
• Support correspondence — up to 24 months, unless the law requires longer.

You can access your data, correct inaccuracies, export it, delete your account, restrict or object to processing, withdraw consent and lodge a complaint with a supervisory authority.

Export and deletion are available in the app without any correspondence: Settings → Account. The export is a JSON file with all account and family data; save it to Files or send it to yourself. Deletion is irreversible and happens immediately.

If you have lost access or need something else, write to privacy@myfamilyflow.com. We reply within 30 days. We may ask you to confirm the account is yours — that protects it from being deleted by someone else.

If you are in the EU or EEA, you may also complain to your local data protection authority. We would appreciate a note to us first — we will try to resolve it directly. If you are in Belarus, your rights are also protected by the Belarusian personal data law.

The app is not intended for children under 13 to register on their own. An adult creates the account. If a child is added to a family space, the adult is responsible for consent to processing their data. Where the law requires parental consent (for example, in some EEA countries up to age 16), a parent or guardian provides it.

If you believe a child’s data reached us without consent, write to privacy@myfamilyflow.com — we will delete it.

The website itself sets no cookies and uses no analytics or third-party trackers. Fonts, styles and scripts load from our own domain — no Google Fonts, pixels or social widgets.

Our CDN provider may set technical cookies for attack protection and load balancing. We do not use them for analytics or advertising. The app contains no advertising or analytics SDKs. If we add analytics, we will update this policy and ask for consent where required.

We use TLS for traffic, Argon2id for passwords, family-scoped access control at the API layer, least-privilege service accounts and regular dependency updates. Only people who need it for their work can access the servers.

No system is 100% secure. If a breach affects your data, we will notify you and the supervisory authorities within the timeframes required by law, and tell you what to do.

We may update this policy. A new edition is published on this page with its date and edition number. We will announce material changes in the app or by email in advance. Previous editions are available on request at privacy@myfamilyflow.com.

privacy@myfamilyflow.com — data questions and GDPR requests.
support@myfamilyflow.com — everything else: account, invitations, bugs.
Website: myfamilyflow.com.

Controller: Alex Chebotarevich (My Family Flow), Belarus. Formal notices are accepted at support@myfamilyflow.com.