Privacy policy

Who is responsible

Silvio Rainoldi. Contact: [email to be added]

On your device

This data is kept in your phone’s browser. Names and birth months never leave the phone; the rest only reaches our server as described below:

• your crew: adults, the kids’ names and birth months, the dogs’ names and sizes, stroller, ways of travelling, maximum minutes and where you start from;
• changes for a single day and your presets (for example “with the grandparents”);
• the plans you save with “Let’s go”;
• the language you picked (cookie famzy_lang) and whether you closed the invitation to notifications.

If you set home from your phone’s location, we round it to the 1 km square on the phone itself, before it leaves the device.

When you ask for suggestions

To work out suggestions, weather and travel times, the app sends our server the 1 km square, the kids’ ages and the dogs’ sizes for that day, and the maximum minutes. We use them for the answer and do not store them, but they may appear in the request logs (see below).

On our server

Only when you save your crew do we create an anonymous user, with no name and no email. We keep:

• a random identifier, with the date it was created and last used;
• the fingerprint (SHA-256 hash) of the session cookie, never the cookie itself;
• the profile: the 1 km square of home and the name of the place you picked, the number of adults, the kids’ birth years, the dogs’ sizes and whether they have a short snout, stroller, ways of travelling, maximum minutes and language;
• if you turn on notifications: the address and keys your browser creates to receive them, the date of the last delivery and the errors, plus a log of the notifications sent (date, type, places suggested);
• the plans you ask us to “Remind me” about: place, day, time of day and time slot;
• the reports you send about a place, anonymously.

Names, full birth dates, addresses, emails, phone numbers and IP addresses never end up in the database.

What it is for

Only to make famzy work: suggestions that fit who is coming, the Thursday notification with the weekend’s outings, the 7:30 reminder for a plan, export and deletion. No ads, no marketing profiles, no selling of data.

Cookies and statistics

No analytics, no ads, no tracking. There are only two technical cookies: __session (HttpOnly, only for /api, created when you save your crew) and famzy_lang (the language). That is why there is no cookie banner (FDPIC cookie guidelines, v1.1).

How long

• Anonymous user and profile: until you delete them.
• Session cookie: 400 days, renewed each time you use the app.
• Notification subscription: deleted when the push service says it no longer exists (404 or 410), after 5 failures in a row or after 90 days without a delivery.
• Plans with “Remind me”: deleted 30 days after the day of the outing, or straight away if you turn the reminder off.
• Log of the notifications sent: 1 year.
• Cloud Run request logs, which may contain the IP address: 30 days.

Who sees the data

We do not sell or hand over data. These providers process it for us, or see it for technical reasons:

• Google Cloud, Zurich region: Cloud Run (app and API), Cloud SQL (database), Secret Manager (keys) and Cloud Storage (files). Google is based in the USA.
• Firebase Hosting (Google): the worldwide CDN that delivers the pages. It sees the IP address, like any web server.
• Browser push services (Google, Apple, Mozilla or Microsoft, depending on your browser) deliver the notifications. The content is end-to-end encrypted: they only see the subscription address and when a message arrives.
• opentransportdata.swiss (OJP), for exact connections: receives from our server the centre of your 1 km square and the coordinates of the place, without any identifier.
• OpenFreeMap (map) and swisstopo (aerial images): your browser loads the images straight from them, so they see your IP address.
• MeteoSwiss, FOEN (forest fire danger) and OpenHolidays: our server downloads their data, they receive nothing about you.
• healthchecks.io checks that our automatic jobs run; it receives no personal data.
• External links (SBB timetable, WhatsApp, OpenStreetMap) are opened by you and those sites’ rules apply; the SBB timetable receives the name of your place and the stop.

Outside Switzerland, including the USA, data may be processed by the Firebase Hosting CDN, the request logs (Google Cloud Logging), the browser push services and OpenFreeMap. The servers and the database are in Zurich.

Your rights

On the Famzy page, under “Your data”, you can download everything we know about you (JSON) and delete everything, right away and without an account: the cookie proves the data is yours. This is your right of access (Art. 25 FADP) and to receive your data (Art. 28 FADP). For corrections or questions, write to the contact above; you can also turn to the FDPIC.

You can also clear the data on your device in your browser settings.

Changes

If something important changes, we update this page and the date at the top.