Privacy Policy

1. Data controller and contact details

The Data Controller is Gianpaolo Santarelli, Country: Italy.

Contact address:
Viale Cesare Pavese, Roma

FamiDeck privacy contact:
famideck.support@gmail.com

The listed email address allows you to contact the Controller for information about personal data processing and to exercise your rights.

2. Categories of data processed

FamiDeck processes data relevant to the features used and necessary to provide the service. Categories include:

Account and authentication

Email address, technical account identifiers, verification status and information needed for access, authentication and account recovery.

Family, members and devices

Information about family members, roles, invitations, links to the family space, family membership and device authorizations.

Financial information entered in the app

Transactions, income, expenses, accounts, categories, recurring transactions and other financial information managed by the user through FamiDeck's features.

Content provided for app features

Documents or information the user may provide for the available features, including photographed receipts and information used to prepare transactions.

Technical service data

Data required for operation, synchronization, device management, security and abuse prevention, including technical information related to access to the service.

Support communications

Data and information contained in messages voluntarily sent by users to request assistance or information.

Processing depends on the features actually used. Details about authentication and providers appear in section 6.

3. Financial data and end-to-end encryption

Financial data intended for synchronization is encrypted on the device before transmission. FamiDeck's Cloud backend does not receive this financial content in plain text.

End-to-end encryption of synchronized financial data does not mean FamiDeck processes no personal data. Encrypted financial content remains subject to data protection law where it constitutes personal data; account data, family membership, devices and other technical information necessary for the service may be processed separately for the purposes described in this policy.

FamiDeck distinguishes shared and private data. Membership in the same family and the ADMIN role do not automatically grant access to other members' private details.

4. Purposes and legal bases

Consent is not the general legal basis for providing FamiDeck. This policy does not envisage marketing, advertising profiling or advertising purposes. Any optional processing based on consent will be described only if actually introduced.

5. Providing data

Providing information needed for an account, authentication and requested functions is necessary to use the relevant services. Without it, creating or using an account, connecting to a family space or receiving the requested feature may not be possible.

Users decide what financial information and content to enter in the app. Sending a support message is voluntary; information relevant to the problem may be needed to provide a useful response.

6. Recipients and providers

Data may be processed by the Controller and technical providers involved in the described functions, as necessary for their respective activities. Where providers process data on behalf of the Controller, applicable data processing agreements apply. Processing carried out by a provider for its own purposes is governed by its own policies.

Google/Firebase — authentication

FamiDeck uses Firebase Authentication. Users can sign in with email and password or choose Google sign-in.

Firebase Authentication may process information necessary for authentication and security, including email addresses, passwords in the authentication service context, IP addresses, user agents and other login-related technical data.

Provider information: Privacy and security in Firebase and Firebase terms on data processing and security.

Cloudflare — Cloud backend

The FamiDeck backend uses Cloudflare Worker and Cloudflare D1 to provide the Cloud service. Cloudflare therefore acts as a technical infrastructure provider for the service.

Cloudflare provides a Data Processing Addendum governing the processing carried out within its services and applicable safeguards.

Sharing within the family

Family members can access shared information in accordance with their permissions. Family management does not automatically give the ADMIN or other members access to someone's private data.

Data may also be disclosed to authorities or other parties where required by applicable law.

7. International transfers

Use of these providers may involve processing personal data outside the European Economic Area.

Firebase Authentication

Firebase Authentication is currently provided using infrastructure in the United States. International transfers are governed by the provider's applicable safeguards and contractual agreements, including, where applicable, Standard Contractual Clauses and other transfer mechanisms provided for by law.

Cloudflare

Cloudflare's Data Processing Addendum provides safeguards for international transfers where applicable, including Standard Contractual Clauses. The Cloudflare D1 database used by FamiDeck is configured with European Union jurisdiction and an Eastern Europe region, as checked in the Cloudflare settings. This configuration concerns the D1 database only and does not mean that all processing by other services or providers takes place exclusively within the European Union.

Provider agreements are available through the links in section 6. Additional information or copies of applicable safeguards may be requested from the Controller using the privacy contact in section 1.

8. Data retention

Data is retained for as long as necessary to provide the service and pursue the stated purposes, taking into account the type of data, the relationship with the user and any applicable legal requirements.

Cloud data linked to the subscription

Cloud data linked to a subscription is retained for the purposes of the service under criteria and periods to be finalized before commercial launch, subject to any legal obligations. Subscription expiry is separate from voluntary account deletion and currently does not trigger automatic Cloud-data deletion after a fixed period.

FamiDeck includes features to export data available to the user in CSV or Excel. Post-expiry access and export terms will be provided before paid subscriptions become available. A specific read-only mode after expiry is not currently guaranteed. Data held on a device is separate from data retained in the Cloud.

Account, security and support

Voluntary deletion. When a member deletes their account, relevant encrypted private content, related cryptographic and recovery information and invitations are removed from the operational Cloud database; previously shared financial history remains in the family workspace, unlinked from the deleted identity. When the whole family is deleted, encrypted financial data and family synchronization state are removed from the operational Cloud database; other members’ personal accounts are not automatically deleted.

Residual data and separate copies. Certain identifiers and technical metadata remain, including terminal states, historical references, revocation information and operation receipts. These data are not necessarily anonymous. Exports, backups, original external files and offline devices are not automatically erased by Cloud deletion. The Firebase authentication identity is handled in a separate step, which may be retried after an error.

Account and authentication data is retained for as long as needed to manage accounts, access and related requests, as well as applicable obligations.

Technical security data is retained for the period necessary to prevent and handle abuse and technical incidents, perform relevant checks and protect the service.

Support communications are retained as needed to handle the request and any follow-up. Data needed for statutory obligations is kept for the period required by the relevant obligation.

9. Data subject rights

In the cases and within the limits provided by the GDPR, data subjects have the following rights:

• Access: obtain information about processing and access their personal data.
• Rectification: request correction of inaccurate data or completion of incomplete data.
• Erasure: request deletion where the conditions provided by law are met.
• Restriction: request restriction of processing in the applicable cases.
• Portability: receive data in the cases provided by the GDPR and request transmission to another controller where technically feasible.
• Objection: object, on grounds relating to their particular situation, to processing based on legitimate interests, under the conditions set out in the GDPR.
• Withdrawal of consent: withdraw consent where particular processing is actually based on it, without affecting the lawfulness of processing before withdrawal.

Requests can be sent to the current public privacy contact, FamiDeck Support: famideck.support@gmail.com.

Responses are provided within the time limits set by the GDPR. Where necessary to protect personal data, proportionate information may be requested to verify the requester's identity.

Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority (Garante). Information is available on the Authority website.

10. Data about other family members

FamiDeck may receive information about a member through another family member, for example when setting up the family group or sending an invitation.

In such cases, the source is the member entering the data or preparing the invitation. Information may include the person's identity within family management, their role or relationship to the family and, if needed for the invitation, the recipient's email address.

Where applicable, this policy also covers the information duties underArticle 14 GDPR for data not collected directly from the data subject. Information must be provided within the time limits and in the manner required by that article, taking account of any applicable exceptions.

The purposes and legal bases in section 4 apply to the extent relevant to the person's specific situation. In particular, contractual necessity requires processing to be necessary for a contract with the data subject or pre-contractual steps requested by them; mere family membership does not amount to accepting a contract.

Membership in the same family does not automatically give access to other members' private data. The ADMIN role maintains this distinction.

11. Minors

A family space may contain information about children, including children listed as people or beneficiaries without an account. A minor may also have an account and request access to the family space: the request must be approved by the ADMIN under the member access rules.

The ADMIN role does not, by itself, establish parental responsibility, and ADMIN approval does not automatically constitute any parental consent required by law for the relevant processing of a minor’s data.

Required check before launch: assess the applicable legal bases, any parental consent and parental responsibility verification mechanisms, child-friendly notices and Google Play requirements, without assuming an age threshold that is not part of the service model.

12. Security and access management

Planned measures include end-to-end encryption of synchronized financial data, individual accounts, device authorization where applicable, separation of shared and private information and Recovery Key management.

Personal recovery keys are distinct from any family key available to the ADMIN. Users must store keys securely and never send them to support.

For a user-facing explanation, see Privacy and security. For help using the service, see Support and FAQ.

13. Cookies and website

For information about cookies and tools used by the website, see the Cookie Policy.

14. Privacy Policy changes

This policy may be updated following changes in law, technology or the service. The current version displays its last-updated date. Any new processing purposes will be communicated as required by law.

Last updated: 13 October 2026

For the conditions of service, see the Terms.