FamFlow — Privacy Policy
Last updated: 29 October 2026
FamFlow ("the app") is made by Ogbar ("I", "me"). It helps a family share tasks, events, a shopping list, points and rewards. This policy explains what happens to your data when you use the app from Google Play.
What the app keeps, and where
FamFlow has no server of its own. A family's data lives in Google Firebase (Firebase Authentication and Cloud Firestore, Google Cloud services), in a project that only the app and I administer.
- Your account: your e-mail address and the name you give, or — if you sign in with Google — the name and e-mail address of that Google account. Firebase Authentication keeps them so you can sign in again.
- Your family: what the members of your family put into the app — family and member names, roles, tasks, events (including any place you type in), the shopping list, points, rewards and their history, notification settings. Every change is written to the family's shared log, which every member's phone reads. Only the members of your family can read it.
- On your phone: a copy of the family's data, so the app works offline. It is deleted when you sign out.
- FamFlow Plus purchases: when a member buys FamFlow Plus, the app sends the purchase token Google Play gives it to a small Google Cloud function of the app, which asks Google Play whether it is valid and records, for the family, until when Plus is active. Payment details are handled entirely by Google Play; I never see them.
The app has no ads, does not sell your data, and does not share your data except with the processors named in this policy. Google processes the data above as the provider of Firebase and Google Play, under its own terms: firebase.google.com/support/privacy
Usage analytics (Google Analytics for Firebase)
With your consent, FamFlow uses Google Analytics for Firebase to understand how the app is used (for example which screens are opened and which features are used). This collects app interaction events, a random app-instance identifier, and basic device information (device model, OS version, app version, and approximate country derived from your IP address, which is not stored). We do not collect your advertising ID, and we do not link analytics to your name, email or family data. Google acts as our data processor; see https://firebase.google.com/support/privacy. Analytics data is retained for 2 months. You can turn analytics off at any time in Settings → Privacy; if you are in the EU/EEA/UK, analytics is off until you agree.
Google Calendar (optional)
A member can choose to copy the family's events into a Google calendar of their own. The app then asks Google for permission to manage calendars in that member's Google account, and writes the family's events there from that phone. The permission can be withdrawn at any time in the app (Family → Google Calendar) or in the Google account's security settings.
Children
FamFlow is meant to be set up and run by parents. A parent decides who joins the family and with which role; a child's profile is created and supervised by a parent, and a child signs in only with an account a parent provides (for a child under 13, a Google account managed with Google Family Link). The app is not directed at children on its own, and it has no ads, no chat with strangers and no way to contact anyone outside the family.
Deleting your data
- Your account: in the app, Settings → Delete account. This removes your account and your membership; the family keeps the history of what was done together (for example, which task was completed), without your account. If you can no longer open the app, ask by e-mail: how to delete your account.
- A whole family: when the last member of a family deletes their account, the family's data is deleted too.
- The copy on your phone: sign out, or uninstall the app.
Security
Data travels encrypted (HTTPS). Firestore's security rules let only the members of a family read and write that family's data.
Your rights (EU/EEA/UK)
The data controller is Szerző Gábor (private individual), contact: ogbar.dev@gmail.com. We process account and family data to provide the service (contract, Art. 6(1)(b) GDPR) and analytics data based on your consent (Art. 6(1)(a) GDPR). You have the right to access, correct, delete and export your data, to withdraw consent at any time, and to complain to your local supervisory authority (in Hungary: NAIH, https://naih.hu). Data may be processed by Google outside the EU under the EU Standard Contractual Clauses.
Changes
If this policy changes, the new version will be published at this address with a new date.