Famonda Privacy Policy

DRAFT — NOT LEGAL ADVICE. Needs lawyer review before publishing. A qualified lawyer (EU/Hungarian data protection and app distribution) must review, complete and approve this text. Bracketed […] items are company or vendor details that are not known yet; USER: lines are filled in by the operator; LAWYER: notes are open legal questions. Every factual statement below describes what the Famonda app and its server do in the code as of 2026-10-17 (evidence: docs/store/claims.md, docs/store/app-privacy.md). Publish per language at https://famonda.com/<lang>/privacy (en, hu, tr, ar, de, fr, es); the English version controls.

Effective date: [DATE] · Version: 1.0 · Last updated: 2026-10-17

1. Who we are

Famonda is provided by Coditive Kft. ("we", "us"), the data controller for the personal data described here.

Registered seat: [REGISTERED_ADDRESS]
Company registration number: [COMPANY_REG_NO] · Tax number: [TAX_NO]
USER: postal contact address for privacy requests: […]
Email: [email protected]
Data protection officer (if appointed): [DPO_NAME_AND_CONTACT]

2. What Famonda is — and is not

Famonda is a mobile app for iPhone, iPad and Android that helps a family organize the care of a relative: appointments, medication reminders, tasks, daily check-ins, contacts, documents, notes and a shared timeline. It is an organization and reminder tool. It is not a medical device, does not give medical advice and is not an emergency service.

There is no Famonda web app and no advertising. The app contains no advertising or third-party analytics SDKs and does not track you across other companies' apps or websites.

3. The short version

What you and your family add to Famonda is stored on our server so that every member of your family group can see it. Only members of that group can see it, according to their role.
Some of it can be health-related (for example medication names or check-in notes). We store it only with your explicit consent, which you can withdraw in the app.
We do not sell your data and do not use it for advertising.
You can export or delete your data in the app at any time.

4. Data we process, where, and why

4.1 Your account

What: your name, email address, password (we store only a salted hash, never the password itself), app language and time zone. If you sign in with Apple or Google, the account identifier and email address that Apple or Google give us.
Where: our server.
Why: to create your account, sign you in on your devices and show the app in your language and time.

What: whether and when you gave or withdrew consent to store health-related information, and whether you allowed anonymous usage counts.
Where: our server. Why: to respect your choices and to be able to show that consent was given.

4.3 Family and care information

What: whatever you and the members of your family group add: the group name, members and their roles, invitations (the invited person's email address and role), profiles of the people you care for (name, relationship, optional date of birth, time zone, notes), appointments (title, time, place, who is going, notes), medication reminders (name, instructions, times, who is reminded, refill counts) and whether a dose was marked done or skipped, tasks, daily check-ins and their notes, notes, voice notes (audio recordings of up to 2 minutes), contacts (for example the name, phone number and email of a doctor, pharmacy or relative), documents and photos you upload (PDF, JPG, PNG, HEIC; up to 25 MB each), shopping & errands items, missed check-in alert settings and simple mode settings.
Health-related information: some of this can reveal information about someone's health. We process it only because you choose to enter it and on the basis of your explicit consent (section 7). If you enter information about another person, you confirm that you are entitled to share it. LAWYER: validate the consent and representation model for the person being cared for.
Where: on our own server, files (documents, photos, voice notes, exports) included.
Why: to provide the shared care organizer to your family group.

4.4 Device and technical data

What: a random installation identifier created by the app (not an advertising identifier), platform (iOS or Android), app version, device language, and the time up to which this device has scheduled its reminders; the IP address of each request; sign-in tokens.
Where: our server. The IP address is used in memory to limit abusive request rates and is not stored with your account by our code. USER: confirm what the hosting provider logs (for example web server access logs) and for how long.
Why: to know which of your devices already shows reminders locally, to keep you signed in, and to protect the service.

4.5 Notifications

What: your notification preferences (types, quiet hours, hidden medication names, email backup) and the notifications shown in the app's notification list.
Where: our server. Why: to show family activity in the app and to respect your preferences.

4.6 Subscriptions

What: which family group has Premium, the product, the store, the store's transaction identifiers and the end date. Payment details are handled by Apple or Google; we never receive card details.
Where: our server. To confirm a purchase, our server sends the store's purchase proof to Apple (App Store Server API) or Google (Google Play Developer API). Why: to unlock Premium for the whole family group.

4.7 Support requests

What: the topic, your message, the reply-to email address and the app language. Only if you tick "Include app and device details": the app version, device model, system version and language. Never your care information.
Where: our server; USER: support mailbox the request is forwarded to […].
Why: to answer you.

What: if you allow it, the app reports four kinds of events (timeline viewed, plan screen viewed, notifications allowed, notification opened) and our server counts certain actions. Counts are stored per day, event and platform, without a user identifier and without any content.
Why: to understand which parts of Famonda are used. You can turn this off at any time in Settings → Privacy & data.

4.9 Calendar links and exports

Calendar sync (Premium): if you create a calendar link, our server publishes your family's appointments and due tasks of the groups you chose at a secret address. Anyone who has the link, and the calendar service you add it to (for example Google, Apple or Microsoft), can read those events. "Hide details" is on by default, and medication reminders are never included. You can turn the link off at any time.
Care summary (Premium): a PDF built on our server; its download link works for 1 hour, then the file is deleted.
Data export: a file with your account details, what you added and the files you uploaded; available for 7 days, then deleted.

5. What stays on your device

A local copy of your family's information and changes waiting to sync, so the app works without a connection. Signing out deletes it from the device. On Android it is excluded from cloud backups; on iOS it can be part of your device backup.
Sign-in tokens in the iOS Keychain (this device only) or the Android Keystore-backed secure storage.
Medication and appointment reminders scheduled with your phone's notification system for the next 14 days.
Your app settings (language, theme).
Permissions: the camera is used only when you choose "Take photo" for a document; Famonda sees only the photos and files you pick; the microphone is used only while you record a voice note; Face ID, Touch ID or fingerprint checks are done by your device — Famonda never receives biometric data; Famonda does not read your calendar ("Add to my calendar" opens your phone's own event editor). Famonda never asks for your contacts or your location.

6. Who receives your data

Your family group. Members see the group's information according to their role (admin, caregiver, viewer). Documents marked "Admins and caregivers only" are not shown to viewers. A person set up in simple mode sees their own check-in, today's plan and the call buttons chosen for them.
Our service providers (processors), under data processing agreements:
- USER: hosting provider and region for the server and database […] — LAWYER: EU region preferred.
- Cloudflare, Inc. for our domain's DNS and for delivering this website (the privacy, terms and support pages). The app's connections and your files do not pass through Cloudflare; they go directly to our server.
- USER: email delivery provider and region […] — for password reset, email verification, invitations sent by email, "your export is ready" emails and, if you keep "Email backup" on, medication reminders and missed check-in alerts when none of your devices can be reached. Until a provider is configured, Famonda sends no email.
Apple and Google as independent controllers: app store purchases, and sign-in if you choose Sign in with Apple or Google.
People you share with: when you use the share sheet (an invite link, a document, a care summary), the content goes where you choose.
We do not sell or rent personal data, and we do not share it with advertisers or data brokers.

Processing	Legal basis
Account, family groups, core features, subscriptions	Art. 6(1)(b) — performance of the contract
Health-related care information	Art. 9(2)(a) — explicit consent, given in the app before any care information is stored; withdrawable in Settings → Privacy & data (withdrawing pauses adding or changing care information)
Security, abuse prevention, service messages	Art. 6(1)(f) — legitimate interests
Anonymous usage counts	Art. 6(1)(a) — consent (optional, off unless you tick it)
Legal obligations (for example accounting)	Art. 6(1)(c)

LAWYER: confirm the bases, in particular for information about the person being cared for.

8. How long we keep data

Data	Kept
Account and family information	While your account exists; see section 9 for deletion
Timeline on the Free plan	Activity older than 30 days is hidden in the app, not deleted
Notifications list	30 days
Device registrations	Deleted at sign-out, or after 60 days without contact
Support requests	180 days
Data export file	7 days
Care summary PDF	1 hour
Invitation links	Expire after 7 days or when used
Password reset links	1 hour
Uploads that were never completed	Removed after about 1 hour
Anonymous usage counts	[RETENTION] (contain no personal data)
Backups	Encrypted backups of the database and the files are kept for 14 days, so erased data remains in them for up to 14 days; if a backup is ever restored, erasures are applied again

9. Deleting your account

You can delete your account in the app: Settings → Privacy & data → Delete account. Instructions without the app: https://famonda.com/<lang>/support#delete-account, or email [email protected].

You are signed out everywhere and cannot sign in again.
Your personal information (name, email, sign-in methods, devices, notification settings, calendar links, notifications, support requests, exports) is erased; deletion is completed within 30 days.
Your voice notes are deleted.
Family groups where you are the only member are deleted with all their information and files.
In family groups that continue, what you added (for example a check-in or a completed task) stays for your family and is shown as "Former member". If you are the only admin, you choose a new admin first.
A record that consent was given or withdrawn is kept without your personal details, as proof required by law.
Deleting your account does not cancel a subscription; cancel it in the App Store or Google Play first.

10. Your rights

You have the right to access, correct, delete, restrict and port your data, to object, and to withdraw consent at any time (without affecting earlier processing). Many of these work directly in the app (Settings → Account; Settings → Privacy & data → Export my data / Delete account / Withdraw consent). Otherwise write to [email protected]; we answer within one month. You may complain to a supervisory authority; ours is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, naih.hu). LAWYER: confirm.

11. Children

Famonda accounts are for people aged 18 or over; the app asks you to confirm this when you create an account. The app is not directed at children.

12. Security

All connections between the app and our server use HTTPS. Documents and other files are never public: the app receives a short-lived signed link for a single file after the server has checked that you may see it. Every request is checked against your role in the family group. Sign-in tokens are kept in the device's secure storage. No method is completely secure; we will inform you and the authorities of a personal data breach as required by law. USER: confirm encryption at rest of the hosted database and storage.

13. International transfers

USER/LAWYER: [where data is stored; if any provider processes data outside the EEA, the safeguard used (adequacy decision or Standard Contractual Clauses)].

14. Changes and languages

We will tell you about material changes in the app before they take effect. This policy is published in English, Hungarian, Turkish, Arabic, German, French and Spanish; the English version controls.

Change log

2026-10-17 — First version for the Famonda app.

15. Contact

Coditive Kft., [REGISTERED_ADDRESS] — [email protected]