Privacy policy

1. At a glance

Personal data is any information that can identify you. This policy covers this website and the FamilyManager app (iOS, iPadOS and web app). It explains what we collect, why we use it and what rights you have.

2. Controller

Controller within the meaning of Art. 4(7) GDPR:
Ben Kohler
Auf dem Kreuz 32/1
89073 Ulm
Germany
Contact: mail@benkohler.de

3. Data we process and why

Registration and account

When you register we process your email address, your chosen display name and, if provided, a profile picture and date of birth. You may alternatively sign in with Google or Apple, in which case we receive your email address and name from those providers. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

Household content

In the app you create content: events, tasks, shopping lists, messages and other entries. This content is visible to the members of your household. Legal basis: Art. 6(1)(b) GDPR.

Managed children's accounts

Parents can create accounts for their children without a separate email address. We process the display name chosen by the parent, an identifier and a sign-in code. The account is set up by the holder of parental responsibility, who thereby also provides consent under Art. 8 GDPR. Legal basis: Art. 6(1)(b) GDPR in conjunction with Art. 8 GDPR.

Payment data

Premium subscriptions are processed through Stripe (web app) or Apple in-app purchase and RevenueCat (iOS). From these providers we receive a user identifier, the product identifier, transaction and receipt data and the purchase status including renewal and cancellation. We neither receive nor store full payment details such as card numbers. Legal basis: Art. 6(1)(b) GDPR.

Server logs

When you open the website, the hosting provider automatically records the IP address, date and time, the address requested, the referrer, browser type and operating system. Legal basis: Art. 6(1)(f) GDPR (operation and security of the service).

4. Processors and third-party services

We use the following providers. Data processing agreements under Art. 28 GDPR are in place with all of them.

The database and stored content are located in the Europe (Ireland) region. Some of the providers listed are established in the United States. Where personal data is transferred to a third country in the process, the transfer is based on the European Commission's standard contractual clauses pursuant to Art. 46(2)(c) GDPR.

5. Usage statistics, emails and surveys

To understand which parts of FamilyManager are used, we use the TelemetryDeck service provided by TelemetryDeck GmbH, Von-der-Tann-Str. 54, 86159 Augsburg, Germany, in the web app and in the iOS app. It records which screens are opened and which features are used. In the web app, each signal also contains the time and a random session identifier for the current page visit. Titles, content, names and contact details are not transmitted.

Your account only appears as an identifier that is hashed with an additional random value before transmission. The data is therefore pseudonymised, not anonymous. When receiving the data, TelemetryDeck necessarily processes the IP address. In the web app no cookies are set for this and nothing is stored on your device. Nothing is recorded for children's accounts. You can object at any time with the “Share usage statistics” switch, in the web app on the privacy page and in the iOS app in the settings under “Privacy”. In the iOS app the switch is on by default. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is improving the service based on how it is actually used. The other pages of this website do not record anything.

iOS app: There, the service additionally receives with each signal the device model, the operating system and its version, the app version and build, the language, the region, the time zone and the screen size, a session identifier, the number and duration of sessions, the days of use and the date of the first installation. Account and device appear only as identifiers that are hashed with an additional random value before transmission; if you are not signed in, only the device identifier is used. The data is pseudonymised, not anonymous. When receiving the data, TelemetryDeck necessarily processes the IP address. To provide this information, the TelemetryDeck software library keeps a few counters on the device (number of sessions, days of use, date of the first installation) and briefly buffers signals that have not yet been sent.

Family board (wall device): Nobody is signed in on a paired tablet. We record no person there, only the device: we transmit the device identifier, hashed before transmission, and the kind of action — for example which area was opened or that a task was ticked off. Which task, which item, which quantity and who tapped are not transmitted.

Within the app we also record individual technical events about the setup process in order to detect errors.

We occasionally send existing users emails about new features in FamilyManager and invitations to surveys that help us develop the service. For this we use your email address, your name and the name of your household. You can object to these emails at any time using the unsubscribe link included in every email.

We send emails via Resend. Resend records whether an email was delivered and opened and whether a link in it was clicked. For this purpose, emails contain an invisible tracking pixel, and links are redirected via Resend.

If you take part in a survey, we store your answers together with your account so that we can compare them with how your household uses the app, for example which areas are used. We do not share the answers. Legal basis: Art. 6(1)(f) GDPR in conjunction with Section 7(3) UWG; our legitimate interest is informing you about the service and improving it.

Weather on the family board: Only on paired board devices (wall tablets) and only after you have allowed the location in the browser, the board shows the weather for today and tomorrow at the device’s location. The location is rounded to about one kilometre and stored only locally on the device. To retrieve the forecast it is sent via our servers (Supabase) to Apple WeatherKit (Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA). Apple receives the rounded coordinates, not the IP address of the device. The result is kept in the working memory of our servers for at most 30 minutes and not stored permanently. Legal basis: Art. 6(1)(b) GDPR (the function you requested). The transfer to the USA is based on the EU-U.S. Data Privacy Framework, under which Apple is certified. You can withdraw the permission at any time by revoking the location permission in the browser; the board then shows no weather.

6. Cookies and local storage

We do not use advertising or analytics cookies. For technical purposes we store on your device a sign-in token for the current session, your language preference and the key material required for encryption. The web app may additionally cache content for offline use. This data does not leave your device and is deleted when you sign out. If you object to usage statistics, we also store this choice on your device. Legal basis: Art. 6(1)(b) GDPR and Section 25(2) TDDDG.

7. Encryption and security

All traffic is transmitted over TLS. Access to data is further restricted by row-level security rules in the database, so that each household can only read its own content.

Key content is additionally encrypted on your device before it is stored (AES-256-GCM). This covers in particular task and event titles, message content, shopping items, notes, expense titles and notes together with budget and expense categories, the password area, children's profiles and the files in the document vault.

Not encrypted in this way is information that has to be evaluated for the service to work. This includes email addresses and names, times and due dates, assignments to people, amounts, currency and dates of expenses, the names of event and task categories, names of lists and folders, the entries of the custody schedule, and images attached in the family chat or as proof on a task. This data is protected by access control and transport encryption, but is technically accessible to us as the operator.

8. Retention

We store your content for as long as your account exists. After you delete your account, your personal data is removed; content you created in a shared household remains available to the other members and is detached from your person.

In addition we delete automatically:

• activity feed entries after 90 days
• device tokens for push notifications after 60 days without use
• records limiting registration attempts after 30 days
• attachments on events after the event, if you enabled that option
• survey answers twelve months after you took part
• technical operating logs after 7 days

9. Your rights

You have the right at any time to:

• access your stored personal data (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure of your data (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• object to processing (Art. 21 GDPR)
• data portability (Art. 20 GDPR)
• withdraw consent with effect for the future (Art. 7(3) GDPR)

You can start an export and delete your account directly in the app. The export contains the entries you created, that are assigned to you or that concern you, including your profile, memberships, tasks, events, messages, shopping lists, meal plan, checklists, care log entries, expenses, notes, timetables, contacts, the custody schedule and the details of your documents. Encrypted content is included in encrypted form; you download the files in the document vault individually in the app. For anything beyond that, a message to mail@benkohler.de is enough.

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Wuerttemberg, Germany.

10. Automated decision-making

Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.

11. External links

This website may contain links to external sites. We accept no responsibility for their content or privacy practices.

12. Changes to this policy

We update this policy when our processing changes. The current version is always available on this page and in the app.

Status: September 2026