Privacy Policy
En Familia is a family organisation and shared lists app developed by Jesús Lunar Pérez in Córdoba, Spain.
Data controller
Controller: Jesús Lunar Pérez
Location: Córdoba, Spain
Contact: privacy@enfamilia.app
Data the app may process
- Email address, user identifier and credentials associated with sign-in.
- Name or nickname, phone number and optional profile information, including gender.
- Age confirmation for access to public features: whether the person has confirmed being at least 13, the method used and the confirmation date. On Android, web and Windows, this is based on a self-declared date of birth that is discarded after the result is calculated.
- Lists, items, invitations, members and activity required to provide the service.
- Push notification tokens for app activity alerts.
- Technical and diagnostic data through Firebase Crashlytics and pseudonymised markers for opening tools.
- For a merchant poster referral, an opaque temporary attribution session used to measure new sign-ups from that merchant.
- Menu files, images or photos voluntarily provided for AI-assisted import.
Aggregated list analysis
En Familia may calculate internal aggregate statistics on list use, such as the number of lists by type or repeated products and shopping locations. These calculations run on the server, are reused for 24 hours to reduce processing and cost, and only show values found in at least five different lists. No history of these aggregates is kept, and no identifiers, email addresses, phone numbers or individual attribution are included. The data is not currently sold or shared with supermarkets or other third parties; any future commercial use would require a legal review and an updated policy first.
Our measurement of tool use
When a signed-in person opens one of the six main tools, we may save a pseudonymised daily marker to count how many different people opened it. The marker contains no list or product text, free-form routes or user-entered parameters. This measurement is best effort: offline openings are discarded rather than recovered later. Markers expire within 72 hours. The Admin portal shows only the aggregate for the last complete calendar day, with a cache lasting up to 24 hours.
This measurement starts enabled based on our legitimate interest in learning which parts of the service are useful. It can be disabled at any time under Preferences, “Anonymous usage measurement”; doing so immediately deletes the account's current markers. On Android and iOS, if sending a marker fails, Crashlytics may receive a limited non-fatal technical diagnostic containing only the tool and a standard error category, at most once per category and day. It cannot recover the lost opening.
Merchant referral attribution
Scanning a QR code on a merchant's poster creates a random session that expires after 30 days. After a new account is created, the server may use it to increment that merchant's cumulative count once. Sign-ins to existing accounts are not counted. We do not store the referring merchant in the user's profile or keep a permanent link between a person and a merchant. A temporary pseudonymised HMAC marker prevents duplicates; it contains no readable user ID, email or phone number and expires shortly after 30 days. Merchants receive neither personal data nor access to the count; Admin hides values from one to four as “<5”.
The basis is our legitimate interest in measuring this recruitment with minimal data, limited attribution and aggregate results. You can object by emailing privacy@enfamilia.app; we will delete any locatable temporary session or marker and omit the corresponding measurement.
Mailbox flyers
The QR on new flyers lets you download En Familia. Sign-up attribution for this channel is disabled: no attribution signal is created or retained. Any future activation requires a legal review and a prior update to this policy; publishing this information does not constitute consent.
Device contacts
The app may ask to access device contacts to help with invitations and family connections. Address books are not bulk-synced to En Familia servers. Processing mainly takes place on the device, with a possible local cache. To find contacts already using En Familia, the app may perform limited Firebase lookups using email addresses or phone numbers selected or read from the address book, and temporarily cache those results locally.
Purposes
- Provide lists, groups, invitations and synchronisation between members.
- Manage authentication, security and access to private or public lists.
- Send functional notifications.
- Analyse app operation and fix errors.
- Measure, in aggregate, new sign-ups through merchant posters.
- Prepare for possible advertising in future versions.
Business partnership enquiries
If someone voluntarily writes to colabora@enfamilia.app, we process the contact details and business information they provide to answer the enquiry, assess a partnership and, where appropriate, manage onboarding as a partner. Someone writing about a business they do not own must not provide another person's personal data without authorisation. We keep the conversation while needed to handle the enquiry and possible business relationship, then for periods required by legal obligations or liability. Data subjects may exercise their rights by writing to privacy@enfamilia.app.
Legal basis
The basis depends on the processing: contract performance for requested functions; consent where required; legitimate interest in security, technical diagnostics and aggregate service improvement; and compliance with legal obligations. We have documented the purpose, necessity, proportionality and safeguards of our own measurement. You may object by disabling it in Preferences.
Third-party services
En Familia uses Google Firebase and Google Cloud Platform services, including Authentication, Firestore, Cloud Messaging, Hosting, Crashlytics and Firebase AI Logic/Gemini for specific assisted-import features. These services may involve international transfers outside the European Economic Area, supported by European Commission standard contractual clauses and other safeguards offered by the provider.
AI menu import
En Familia may offer a feature to import weekly menus from PDFs, images or photos voluntarily provided by the user. When used, the file is sent to Firebase AI Logic/Gemini to identify a meal menu and extract its structure. The result is shown for review and saved to the user's lists only if they confirm the import. We use this information only to provide the requested feature, not for advertising or commercial profiling.
Alexa integration
En Familia offers an official Amazon Alexa skill for reading and updating a user's shopping list by voice.
- Account linking: the user links their En Familia account in the Alexa app, allowing the skill access. Access tokens and a user identifier are exchanged; the password is not shared with Amazon.
- Data from Alexa: the skill receives text interpreted by Alexa from the user's voice, such as a product name. En Familia neither receives nor stores audio.
- Use: this data is used only to perform the requested action—adding, marking or reading shopping-list items—and is stored in the same Firebase database as the user's other list data.
- Data shared with Amazon: En Familia sends no personal data beyond what is necessary to respond to the skill invocation.
- Revocation: users can unlink the skill in the Alexa app at any time, revoking access.
Retention and deletion
Data is kept while the account is active or as needed to provide the service. The app includes permanent account deletion. Associated data is then deleted permanently and cannot be recovered, subject to applicable legal obligations. Referral sessions expire after 30 days and their pseudonymised deduplication markers shortly afterwards. The irreversible aggregate count per merchant is retained as historical data and cannot identify a person.
Your rights
You may request access, correction, erasure, objection, restriction of processing or portability by writing to privacy@enfamilia.app. You may also complain to the Spanish Data Protection Agency (www.aepd.es) if you believe the handling of your data breaches applicable rules.
Minors
En Familia is not specifically directed at children under 13. Younger family members may use it under the supervision of their legal guardians where appropriate. Public features—making a list public, joining a public list or interacting with other users' posts—require confirmation of being at least 13. This confirmation is requested only to control access and is not obtained automatically from sign-in providers. See Recommended age for more information.