Privacy policy

1. At a glance

Personal data is any information that can identify you. This policy covers this website and the FamilyManager app (iOS, iPadOS and web app). It explains what we collect, why we use it and what rights you have.

2. Controller

Controller within the meaning of Art. 4(7) GDPR:
Ben Kohler
Auf dem Kreuz 32/1
89073 Ulm
Germany
Contact: mail@benkohler.de

3. Data we process and why

Registration and account

When you register we process your email address, your chosen display name and, if provided, a profile picture and date of birth. You may alternatively sign in with Google or Apple, in which case we receive your email address and name from those providers. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

Household content

In the app you create content: events, tasks, shopping lists, messages and other entries. This content is visible to the members of your household. Legal basis: Art. 6(1)(b) GDPR.

Managed children's accounts

Parents can create accounts for their children without a separate email address. We process the display name chosen by the parent, an identifier and a sign-in code. The account is set up by the holder of parental responsibility, who thereby also provides consent under Art. 8 GDPR. Legal basis: Art. 6(1)(b) GDPR in conjunction with Art. 8 GDPR.

Payment data

Premium subscriptions are processed through Stripe (web app) or Apple in-app purchase and RevenueCat (iOS). From these providers we receive a user identifier, the product identifier, transaction and receipt data and the purchase status including renewal and cancellation. We neither receive nor store full payment details such as card numbers. Legal basis: Art. 6(1)(b) GDPR.

Server logs

When you open the website, the hosting provider automatically records the IP address, date and time, the address requested, the referrer, browser type and operating system. Legal basis: Art. 6(1)(f) GDPR (operation and security of the service).

4. Processors and third-party services

We use the following providers. Data processing agreements under Art. 28 GDPR are in place with all of them.

The database and stored content are located in the Europe (Ireland) region. Some of the providers listed are established in the United States. Where personal data is transferred to a third country in the process, the transfer is based on the European Commission's standard contractual clauses pursuant to Art. 46(2)(c) GDPR.

5. Usage statistics, emails and surveys

To understand which parts of FamilyManager are used, we use the TelemetryDeck service provided by TelemetryDeck GmbH, Von-der-Tann-Str. 54, 86159 Augsburg, Germany, in the web app. It records which screens are opened and which features are used. Each signal also contains the time and a random session identifier for the current page visit. Titles, content, names and contact details are not transmitted.

Your account only appears as an identifier that is hashed with an additional random value before transmission. The data is therefore pseudonymised, not anonymous. When receiving the data, TelemetryDeck necessarily processes the IP address. No cookies are set for this. Nothing is recorded for children's accounts. You can object at any time with the “Share usage statistics” switch on the privacy page of the web app. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is improving the service based on how it is actually used. The other pages of this website do not record anything.

Within the app we also record individual technical events about the setup process in order to detect errors.

We occasionally send existing users emails about new features in FamilyManager and invitations to surveys that help us develop the service. For this we use your email address, your name and the name of your household. You can object to these emails at any time using the unsubscribe link included in every email.

We send emails via Resend. Resend records whether an email was delivered and opened and whether a link in it was clicked. For this purpose, emails contain an invisible tracking pixel, and links are redirected via Resend.

If you take part in a survey, we store your answers together with your account so that we can compare them with how your household uses the app, for example which areas are used. We do not share the answers. Legal basis: Art. 6(1)(f) GDPR in conjunction with Section 7(3) UWG; our legitimate interest is informing you about the service and improving it.

6. Cookies and local storage

We do not use advertising or analytics cookies. For technical purposes we store on your device a sign-in token for the current session, your language preference and the key material required for encryption. The web app may additionally cache content for offline use. This data does not leave your device and is deleted when you sign out. If you object to usage statistics, we also store this choice on your device. Legal basis: Art. 6(1)(b) GDPR and Section 25(2) TDDDG.

7. Encryption and security

All traffic is transmitted over TLS. Access to data is further restricted by row-level security rules in the database, so that each household can only read its own content.

Key content is additionally encrypted on your device before it is stored (AES-256-GCM). This covers in particular task and event titles, message content, shopping items, notes, expense titles and notes together with budget and expense categories, the password area, children's profiles and the files in the document vault.

Not encrypted in this way is information that has to be evaluated for the service to work. This includes email addresses and names, times and due dates, assignments to people, amounts, currency and dates of expenses, the names of event and task categories, names of lists and folders, the entries of the custody schedule, and images attached in the family chat or as proof on a task. This data is protected by access control and transport encryption, but is technically accessible to us as the operator.

8. Retention

We store your content for as long as your account exists. After you delete your account, your personal data is removed; content you created in a shared household remains available to the other members and is detached from your person.

In addition we delete automatically:

• activity feed entries after 90 days
• device tokens for push notifications after 60 days without use
• records limiting registration attempts after 30 days
• attachments on events after the event, if you enabled that option
• survey answers twelve months after you took part
• technical operating logs after 7 days

9. Your rights

You have the right at any time to:

• access your stored personal data (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure of your data (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• object to processing (Art. 21 GDPR)
• data portability (Art. 20 GDPR)
• withdraw consent with effect for the future (Art. 7(3) GDPR)

You can start an export and delete your account directly in the app. The export contains your profile, memberships, tasks, messages, checklists and care log entries. For anything beyond that, a message to mail@benkohler.de is enough.

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Wuerttemberg, Germany.

10. Automated decision-making

Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.

11. External links

This website may contain links to external sites. We accept no responsibility for their content or privacy practices.

12. Changes to this policy

We update this policy when our processing changes. The current version is always available on this page and in the app.

Status: September 2026