Privacy policy
Last updated: 14 November 2026
This policy explains what data the Fambil app and the fambil.app website process, why, for how long, and your rights. Fambil is published by Cordara Labs, the data controller (“Fambil”, “we”). The GDPR and UK GDPR apply to users in the European Union, the EEA and the United Kingdom; Turkish law (KVKK) applies to users in Türkiye, for whom the Turkish version prevails.
Data we collect
| Data | Purpose | Legal basis |
|---|---|---|
| Name and email; with Google or Apple sign-in, that account's name and email | Your account, sign-in, password reset | Contract (Art. 6(1)(b) GDPR) |
| Your records: income, spending, regular payments, budget limits, savings, goals, calendar plans, lists, notes | The app itself; syncing what you share with your family | Contract |
| Family: family name, members and roles; children's profile names only (a nickname is fine) | Running the family space, invites and joining | Contract |
| Profile photo (optional, your own only) | So your family recognises you | Contract; remove it any time |
| Invite codes | Joining a family safely; codes are valid for 7 days | Contract |
| What you accepted at sign-up: terms of use and being 18 or older, that the privacy notice was shown (text version and time) | Proof of acceptance and of informing you | Legal obligation (Art. 6(1)(c)) |
| Fambil Plus subscription: the store's transaction ID, plan, start and end date, renewal status | Checking the subscription and opening it to your family | Contract |
| App integrity token (Google Play Integrity, Apple App Attest) | Making sure requests come from the real Fambil app; stopping abuse | Legitimate interest in security (Art. 6(1)(f)) |
| Technical data: session tokens, error logs | Security and running the service | Legitimate interest in security |
| IP address and browser data when you visit fambil.app | Serving the site, blocking attacks | Legitimate interest in security |
We do not collect bank accounts, card numbers or bank passwords; location; contacts; health, religion, biometric or other special category data; or advertising IDs. The app has no ads, analytics or tracking. Apple or Google takes the payment; your card details never reach us.
The camera opens only when you scan an invite QR code or take a profile photo. Reminders are scheduled on your phone.
Who sees what
- Records marked “Family can see” are visible to your family members.
- Records marked “Only me” stay in your account alone: nobody else, family included, can see them, and they are not added to family totals.
- Family members do not see each other's email address.
- We do not sell, rent or share your data for advertising.
On your phone
The app keeps your records on your phone so it works offline. They are encrypted with AES-256, with the key in the phone's secure storage (iOS Keychain, Android Keystore). Signing out or deleting your account removes the copy on the phone. Android's automatic cloud backup is off for Fambil.
Service providers and where data is
- Google (Firebase): accounts, records and server functions. The database holding your records is in the European Union (Belgium and the Netherlands). Sign-in and infrastructure may also use Google's global servers, including in the United States.
- Apple and Google: app stores, subscription payments, Sign in with Apple and Google, app integrity checks.
- Cloudflare: serving the fambil.app website.
They process data on our behalf and on our instructions (Art. 28 GDPR). Transfers outside the EU rely on the EU-U.S. Data Privacy Framework and the European Commission's standard contractual clauses; transfers from Türkiye follow Art. 9 KVKK. Otherwise we share data only with authorities when the law requires it.
How long we keep it
- Your account and records: while your account exists. You can delete records any time.
- When you delete your account: your account, personal records, profile photo and invites are deleted. In shared records that stay with the family you appear as “Former member”; your name and account ID are removed from them. If you own a family with no other members, its shared records are deleted too.
- Deleted records: an empty deletion marker stays so other phones learn about the deletion; it is removed after 90 days.
- Invite codes: stop working when used or after 7 days, and are deleted 30 days after they expire.
- Subscription data: while the subscription runs and as long as the law requires afterwards.
- Website connection logs: Cloudflare's short-lived security logs.
Security
Connections are encrypted (TLS). Server-side access rules let each person reach only their own data and their family's shared records. Your password is held by Google as a one-way hash; we cannot see it. If a breach happens we notify the authority and you within the time the law sets.
Your rights
You can access your data, get a copy (portability), correct it, delete it, restrict processing and object to it. In the app:
- Download my data: Settings → Privacy; all records as JSON, income and spending as CSV.
- Correct: change your records and name in the app at any time.
- Delete account: Profile or Family tab → Delete account, or fambil.app/en/delete-account.
For anything else, write to [email protected] from the email address on your Fambil account; we reply free of charge within one month. You can complain to the data protection authority where you live (in the EU or UK) or, in Türkiye, to the Personal Data Protection Authority (KVKK). No decision about you is made solely by automated processing.
Children
Fambil is for people aged 18 or older; you confirm this when you create an account. Children's profiles are not accounts: they hold only a name (no photo or date of birth) and parents add and manage them.
Changes
When we update this policy we change the date above and announce important changes in the app.
Contact
Cordara Labs · [email protected]