Privacy policy
Last updated: August 2026
OpenFamily comes in two forms, and what happens to your data depends entirely on which one you choose.
Self-hosted (free): you install OpenFamily on your own server. Your data never
passes through us and we have no access to it.
OpenFamily Cloud (subscription): we host the server for you. Your data is then
stored with us, in France, and this policy sets out exactly what and why.
1. Data controller
NexaFlow (SIRET 879 027 373 00049, France) — contact: contact@nexaflow.fr. Full details in the legal notice.
2. The openfamily.fr website
The site sets no cookies, uses no analytics and makes no request to any third-party service when it loads: fonts, images and flags are served from this site.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Email address (waiting list) | To send you one single email when OpenFamily Cloud opens | Consent (art. 6.1.a) | Until that email is sent, 12 months at most |
We do not store your IP address: it is used only for the duration of the request, to limit how many sign-ups can be made per hour. That counter expires after an hour and is never linked to an email address.
3. The mobile app
3.1 — In self-hosted mode
You enter your own server's address. The app talks only to that server. No data is sent to NexaFlow, no account is created with us, and we have no technical means of accessing anything. In this case you are the data controller for your family's data.
The app contains no analytics, no advertising tracker and no third-party collection SDK. It keeps locally, on your device, your server address, your session token and your preferences (language, theme).
3.2 — With an OpenFamily Cloud subscription
If you choose the Cloud plan, the server is ours, so we host the following data for the sole purpose of running the service you subscribed to:
| Category | Contents |
|---|---|
| Account | Name, email address, password (hashed, never readable), language, currency |
| Household members | First names, roles, dates of birth, colours, avatars |
| Health data (optional) | Allergies, medications, blood type, vaccines, emergency contacts |
| Organisation | Shopping lists, tasks, appointments, planning, recipes, meals, notes |
| Budget | Expenses, income, recurring debits and limits you enter |
| Subscription | Google Play purchase identifier, status and expiry date |
Legal basis: performance of our contract with you (art. 6.1.b) — without this
data the service cannot work.
Retention: for as long as your account exists, then 30 days
after you delete it (a safety window against accidental deletion), after which erasure is
permanent. Encrypted backups are purged within 35 days.
Health data. The health fields are optional and entirely free-form: you are never required to fill them in. Because the GDPR treats them as sensitive data (art. 9), filling them in constitutes explicit consent to storing them (art. 9.2.a). You can erase them at any time from the app without deleting the rest of your account. We never use them for any other purpose and never disclose them to anyone.
4. Payments
Subscriptions are sold and charged by Google Play. We never see or store your payment details: Google only gives us an anonymous purchase identifier and your subscription status, so we can unlock the service and know when it expires. Billing is covered by Google's privacy policy.
5. Hosting and processors
- openfamily.fr website — Hostinger International Ltd (European Union)
- OpenFamily Cloud servers — Scaleway SAS, in France
- Payments — Google Ireland Ltd (Google Play)
No other recipients. No reselling, no sharing for advertising purposes, and no transfer of your data outside the European Union for hosting.
6. Security
Encryption in transit (HTTPS), passwords hashed with bcrypt, strict isolation between families (every query is scoped to one household), and encrypted backups. No system is infallible: should a breach affect your data, we will inform you and the French supervisory authority as required by art. 33 GDPR.
7. Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw your consent at any time.
- Export your data: in the app, Settings → Export (a complete JSON file).
- Delete your account and all your data: in the app, Settings → Delete my account. You can also write to contact@nexaflow.fr.
- Any request is handled within 30 days at most.
- You may lodge a complaint with the French data-protection authority, the CNIL.
8. Children
OpenFamily is not intended for children as independent users: accounts are created and administered by an adult in the household, who decides which profiles to create and what to put in them. We never collect data directly from a child, and we carry out no advertising profiling at any age.
9. Changes
Any change to this policy will be published on this page with a new update date. If a change materially affects your rights, Cloud subscribers will be notified by email.