Privacy Policy

1. Who we are

FamFlow (famflow.xyz) is operated by Eyüp Emre Özkaçan, based in Malta, acting as the data controller for the personal data described in this policy. You can reach us at support@famflow.xyz.

2. What we collect

Account information

• Your email address and display name, provided directly or through Google Sign-In
• Your profile photo, if your Google account has one

Family information you enter

• Child first names or nicknames, birth dates or ages, interests and dietary preferences
• Saved meals and activities, weekly plans

Marketplace and community content

• Listings you publish, including photos, descriptions, prices and general location
• Messages exchanged with other users
• Reviews and likes you leave on places

Technical and usage information

• Pages viewed, features used, buttons clicked
• Device type, browser, approximate region, IP address
• Approximate location, only when you grant permission, used to sort places by distance

3. Information about children

FamFlow is designed for parents and carers, not for children. You must be 18 or older to create an account. Information about a child is entered voluntarily by the adult account holder and is used only to personalise meal and activity suggestions within your own account.

We do not sell information about children, do not use it for advertising targeting, and do not share it with advertisers or sponsors. We recommend using a first name or nickname rather than a full name. You can delete a child profile at any time from Settings.

4. Why we process your data

• To provide the service you asked for, including accounts, planning and marketplace features (performance of a contract)
• To personalise suggestions using the details you enter (performance of a contract)
• To use your location, where you have permitted it (consent)
• To keep the service secure, prevent abuse and fix errors (legitimate interests)
• To measure how the service is used so we can improve it (legitimate interests)
• To display advertising, where applicable (legitimate interests or consent, depending on the technology used)

Where we rely on consent, you can withdraw it at any time without affecting processing carried out before withdrawal.

5. Service providers we use

• Google Firebase — authentication, database, file storage and analytics
• Google Gemini — generates meal and activity suggestions from the preferences you enter
• Vercel — hosting and delivery of the website
• Google AdSense — advertising, where enabled
• Sentry — error monitoring and diagnostics
• Zoho Mail — handling email you send to us

These providers process data on our behalf under their own terms. Some of them may process data outside the European Economic Area; where that happens, transfers are covered by the safeguards those providers put in place, such as the European Commission's standard contractual clauses.

We do not sell your personal data.

6. What other users can see

Marketplace listings, the display name attached to them, reviews you write and messages you send are visible to other users of FamFlow. Please do not include information in these areas that you would not want other people to read.

7. How long we keep data

• Account and family data: until you delete it or ask us to close your account
• Marketplace listings: until you delete them
• Messages: retained so both participants keep a record of the conversation
• Analytics and error logs: retained for a limited period by the providers listed above

When you ask us to delete your account, we remove your account data. Messages may remain visible to the other participant, and some records may be kept where the law requires it.

8. Your rights

Under the GDPR you have the right to access your data, correct it, delete it, restrict or object to how we use it, and receive a copy in a portable format. To exercise any of these rights, email support@famflow.xyz.

If you believe we have handled your data improperly, you can complain to the Office of the Information and Data Protection Commissioner (IDPC) in Malta.

9. Cookies and similar technologies

We use storage on your device to keep you signed in and to remember your preferences. Analytics and advertising providers may set their own cookies. You can clear or block cookies in your browser settings, though signing in may stop working if you block them entirely.

10. Changes to this policy

We may update this policy as the service develops. The date at the top shows when it was last revised, and significant changes will be announced in the app.