Privacy statement

Last updated on August 26, 2026.

Who is responsible

Framilia is a platform of JAVASTART BV, unit QUANTUMprogrammers.com, a small Belgian company. Questions about your data, or a complaint about how we handle it, go to hallo@framilia.be. A human reads along.

What we keep, and why

• Your first name, your surname, your email address and your language. Needed to recognise you, to address you, and to tell you apart from someone with the same first name in the same family. We ask for nothing more: no date of birth, no postal address, no phone number on your account.
• What you put on your lists yourself: titles, links, prices, notes and photos.
• The names and addresses of the people you invite. You give them to us, and we use them only to show them your list and to send their invitation.
• What is on the family calendar: title, place, day and time, who is coming, and what someone brings. An event you set to "only me" is not visible to your family: they only see that you are busy.
• Who is home and when: the rhythm you set and its exceptions. That can be a co-parenting arrangement, and therefore a sensitive family detail. Outside your family nobody ever sees the rhythm, the arrangement or the reason, only whether someone is around that day.
• Your family’s shared grocery list: what is on it, who put it there, and which shop it belongs to.
• Your loyalty cards: the shop, and the number of the card. We store that number encrypted and it never appears in a web address or in a log line.
• Your profile picture, if you choose one, and the photos you add to a gift yourself.
• Support: that you help someone in the simple view, and when you looked at their screen with them. We keep that so it never happens quietly.
• Technical: a session cookie, a "stay signed in" cookie if you tick it, and small cookies for your language, your theme and the kind of screen you are looking at. No other cookies. Server logs contain IP addresses and timestamps; they serve to counter abuse and are erased after thirty days.
• The Android app: that is the same service in an app shell. The app keeps a copy of your own screens on your device, so you can read them offline too, and a queue of what you tapped offline; signing out wipes both. No extra data goes to us or to Google.

We measure whether our emails arrive, are opened and clicked, so we can see that everything works. That measurement happens with our own pixel and our own measuring links on our servers; the mail provider that sends our messages (a processor, established in the EU, with a processing agreement) does not measure along. We keep the measurement for at most ninety days.

We count visits without cookies: browser, device type, language and the place of origin. That place is looked up at request time via MaxMind GeoLite2 and forgotten right away: the address is not kept, only summed counts per country, province and city remain, and a city only appears above a threshold. We also measure anonymously where the app is rough. None of these figures can be traced to a person, and devices that ask not to be tracked never take part.

For security and the prevention of abuse, we temporarily keep technical data such as your IP address (at most 90 days). This is separate from the ordinary server logs, which are gone after thirty days.

On what basis

Performance of the contract you enter into with us when you create an account, and our legitimate interest in countering abuse. For the emails that come with using the service, such as the confirmation, the invitation and your draw, no separate consent is needed. We send commercial messages only if you consent to them yourself at sign-up or on your profile, and you can withdraw that consent at any time. We record when you gave or withdrew it, because otherwise we could not show that we kept to it.

For how long

• As long as your account exists. An account that was never confirmed disappears after thirty days.
• From a draw, the pairings and the questions disappear after a year. That there was a draw, and who took part, remains: otherwise "not the same as last year" no longer works.
• An event stays as long as it is on the calendar; delete it and it is gone. Who answered and what someone brought goes with it.
• The rhythm and its exceptions stay as long as you leave them. Delete an exception and it is gone.
• What you tick off leaves the list as soon as someone clears it; the history that feeds the suggestions we keep for a year.
• Your loyalty cards stay until you throw them away, and disappear with your account.
• Server logs: thirty days. That is different from the data we keep separately in case of abuse or an incident, such as your IP address: that is kept for up to ninety days (see Security).
• A file with your data that you request stays for fourteen days and is then deleted. That you asked for it, and when, we keep for ninety days.

Cookies

Framilia only uses strictly necessary cookies: a session cookie for signing in, a "stay signed in" cookie if you tick it, and small cookies for your language, your theme and the kind of screen you are looking at. Framilia places no other cookies.

There are no statistics, advertising or tracking cookies: our visit numbers count without cookies. That is why we show no cookie banner; it is not required for strictly necessary cookies. Should anything non-essential ever be added, we will ask for your consent first.

Your rights

You can view and download your data, have it corrected, and have your account deleted. Deletion is a button on your account page and works immediately; you request the file with your data there and it is ready after a short wait, with the password by email. If you disagree with how we handle your data, you can lodge a complaint with the Belgian Data Protection Authority.

My account

Who else sees it

The mail provider that sends our messages, and the host where the servers are. Both established in the EU, both with a processing agreement. There are no analytics services, no advertising networks and no share buttons that look along.

Children

In Belgium a minor can consent to an online service from the age of thirteen. Below that, no account is needed: a parent keeps the list inside their own account, and the child can become a co-manager later. That way we collect nothing about children.

Security

Passwords are stored as an Argon2id hash, never readable. Keys from emails are kept as a hash only. All traffic runs over https. There is a daily backup, and it is restored regularly to check that it works.

Questions? Write to hallo@framilia.be