Privacy policy

Last updated: October 2026

FairPlan (called Fairteilt in German) is a shared family planner. This policy explains which data is processed, what for, and what rights you have. It is a translation of the German Datenschutzerklärung; if the two differ, the German version prevails.

1. Controller

The controller is based in Germany. Processing is governed by the EU General Data Protection Regulation (GDPR) and German law. For users in the United Kingdom, the UK GDPR applies accordingly.

2. What data is processed

FairPlan does not need real names. A display name or nickname of your choice is enough for every family member, and this explicitly includes children added as members. In detail:

• Family name (freely chosen) and for each member: display name, optional role, colour/initials
• Password, stored only as a hash (Argon2id), never in plain text
• Optional, if entered: the birthday of a member or of a person outside the family
• Content you create: tasks, events, shopping lists, meal plans, notes, checklists and gift ideas; with Premium also shared expenses (expenses and fixed costs), school timetables and tests, holidays and childcare, notices and the week planner
• Your language setting (German or English), so notifications arrive in your language
• The family’s time zone, taken from the device when the family is created, so reminders and the daily overview arrive at the right time; from it we also count, as anonymous totals, which regions families come from (no location tracking)
• If notifications are switched on: your device’s technical push address (endpoint)
• A technically necessary session cookie or a sign-in key in your device’s storage (section 10)
• For technical reasons when you open the app: your IP address (section 5, “Server logs”)

This information is needed to use FairPlan; without a display name and password no login can be created. Everything else you enter voluntarily.

3. Encryption

The content you enter in the app (tasks, events, notes, gift ideas, etc.) is stored encrypted field by field on the server using AES-256-GCM. Only details the server needs for sorting, reminders and calculations stay unencrypted: for example date and time, whether something is done, which person it belongs to and, in the shared expenses, the amount, date and category of an expense. Passwords are not stored; they are only checked against an Argon2id hash. The session ID in the cookie is only compared as a SHA-256 hash on the server.

4. Purposes and legal bases

Data is processed to provide the features you and your family use; the legal basis is Art. 6(1)(b) GDPR (performance of a contract or pre-contractual steps by creating a family account). For push notifications the legal basis is your consent under Art. 6(1)(a) GDPR, which you can withdraw at any time in your device settings.

To protect against abuse (such as mass password guessing) we briefly process IP addresses; the legal basis is our legitimate interest in secure operation under Art. 6(1)(f) GDPR.

We do not sell your data. There is no advertising, no tracking and no profiling, and no data is passed on for anyone else’s purposes. There is no automated decision-making within the meaning of Art. 22 GDPR.

5. Who sees the data

Within a family, members see the content they share with each other; that is the purpose of the app. Gift ideas are hidden from the person they are meant for. Parents can also choose that restricted children only see the tasks they are assigned to, instead of all of the family’s tasks (under “Family & access”); this only affects tasks, not events, shopping lists or other content. Beyond that, data is passed to the following recipients:

Hosting

The app runs on servers of Fly.io (Fly.io, Inc., USA) in a data centre in Amsterdam, the Netherlands. A data processing agreement under Art. 28 GDPR is in place with Fly.io. As Fly.io is a US company, a transfer to a third country cannot be ruled out completely, even though processing itself takes place in the EU. Fly.io has committed to Standard Contractual Clauses under Art. 46 GDPR.

Push notifications

If you switch on notifications, delivery is handled by the push service of your operating system or browser: depending on the device, Google (Chrome, Android), Mozilla (Firefox), Microsoft (Windows) or Apple (Safari, iOS, macOS). These providers only receive the encrypted message and the technical device address, with no access to your content in plain text.

Server logs

Every time you open the app, your device sends its IP address for technical reasons. The server logs requests briefly for troubleshooting and security; these logs are kept at Fly.io and are deleted there automatically after a short time. For signing in, creating a family, recovering access and fetching calendar subscriptions we keep the IP address for at most two days to limit abuse; after that it is deleted. Our own logs contain neither IP addresses nor secret links.

Calendar subscription and imports

If you subscribe to the family calendar in a calendar app (such as Google Calendar, Apple Calendar or Outlook), that provider regularly fetches the events via your private subscription link and stores them under its own rules. You trigger this transfer yourself; you can revoke the link in the app at any time, after which the provider receives no new data.

If you import a calendar or timetable from a web address (for example from WebUntis), our server fetches that address; the provider only sees our server’s address. An imported file is only processed and not passed on.

Contact and feedback

If you email us or use the feedback or contact form (it prepares an email), your message ends up in a mailbox at Google (Gmail). We only use it to reply and delete it once the matter is dealt with (Art. 6(1)(b) or (f) GDPR).

Getting the app from Google Play

If you download FairPlan from the Google Play Store, Google processes data under its own privacy policy (purchase and installation data, updates). The Play Store app opens FairPlan in Chrome; your device’s Chrome settings apply to that. We do not receive any data about you from Google.

Using FairPlan from outside the EU

If you use FairPlan from a country outside the EU, your data is sent to and stored in the EU (data centre in Amsterdam, the Netherlands). The protections described in this policy apply to it there.

6. How long data is kept

Content is kept as long as the family exists. A sign-in session is valid for 90 days by default. Every member can delete their own account at any time, and a parent can remove a member at any time (see section 7); push registrations end when you turn off notifications, delete your account or the family is deleted. A parent can delete the family at any time (under “Family & access”); this deletes all content and access immediately and irreversibly. Every member can delete individual entries directly in the app. The activity overview, which shows parents the latest changes, only keeps the last ten entries per family; older ones are deleted automatically when new ones are written.

We also tidy up automatically: checked-off shopping items after 30 days, past meals in the meal plan after 90 days, completed tasks (including any attached checklist) and past single events after 180 days, gift ideas for people outside the family three days after their birthday. Anything deleted, by hand or automatically, is removed technically for good after a further 30 days; that is how long the family's devices need to pick up the deletion. Expired sign-ins, used or expired codes and sign-in attempts are removed continuously.

We also delete families that are no longer used: if not a single member of the family has opened the app for 180 days, the family and all its data, access and content are deleted automatically and irreversibly. We warn you twice beforehand by notification, 30 days and 7 days before deletion, provided a device in the family allows notifications; the period starts again whenever anyone in the family uses the app. This way no data is kept that nobody needs any more (storage limitation, Art. 5(1)(e) GDPR).

A family that was never used – only the person who created it, not a single entry of its own (example entries don’t count) and no sign-in for 30 days – is deleted after those 30 days without prior warning; there is nothing in it that could be lost.

7. Delete your account

In the app: Under “More” → “Family & access” → “Delete my account”, confirmed with your own password. Every member can do this, including children with their own access.

What is deleted: immediately and irreversibly your display name, initials, role, birthday, password hash, all your signed-in devices including device names, your push registrations, your entries in the activity overview and your school and childcare details (timetable, subjects with teacher and room, tests, pick-ups).

What stays: content you created or completed for the family (such as a shopping item or a task) stays for the other members so that shared lists don’t get gaps. It is no longer linked to any person but to a “Former member”. If you want this content deleted as well, remove it yourself in the app first.

The same applies when a parent removes a member from the family. The last parent who manages the family cannot delete their account on its own; they first hand management to another parent or delete the whole family (section 6).

Without the app: FairPlan works the same in a browser. Open fairteilt.fly.dev in any browser, sign in with the family code and your password, and delete your account the same way. If you have forgotten your password, a parent can remove you from the family under “Family & access”, with the same effect.

Automatically: If nobody uses a family for 180 days, we delete it together with all accounts (section 6).

8. Children as family members

FairPlan is aimed at families and is set up and managed by parents. It lets parents add children as family members so their tasks and events are visible too. No full real name is required; a first name or nickname is enough. The parent who manages the family is responsible for adding a child and for the data entered, and gives any consent required for this under the law of their country. Parents can edit or delete a child’s profile at any time (section 7).

Families in the United States

Families who state, when creating the family or later under “Family & access”, that they live in the United States follow a stricter rule: only adults (18+) get their own login. The person creating the family confirms that they are an adult and a parent or legal guardian. Children and teenagers are added by a parent as profiles without their own login; they never sign in, set no password and enter no data themselves – parents assign them tasks and events and manage their profile on their own devices. We therefore do not knowingly collect personal information directly from children under 13 (Children’s Online Privacy Protection Act, COPPA). If we learn that a child has nevertheless been given their own login, we remove that login.

Parents can review, change and delete everything stored about their children at any time in the app, or ask us to do so at the email address above (section 7).

California and other US states: We do not sell or share personal information, do not show advertising and do not track users across apps or websites. Data is used only to run the app for your family (section 4). You can request access to or deletion of your data at the email address above; we will not discriminate against you for doing so.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21), which you can exercise with the controller at the email address above. You can withdraw consent, for example for push notifications, at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live. The authority responsible for the controller is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI), Germany; in the United Kingdom it is the Information Commissioner’s Office (ICO).

10. Cookies and device storage

FairPlan only sets a technically necessary session cookie for signing in (Art. 6(1)(b) GDPR). The app also keeps what it needs to work in your device’s storage: a sign-in key, your language and display settings, a copy of the family’s data for use without a connection, and the app files themselves (service worker). This is strictly necessary for the service (§ 25(2) no. 2 TDDDG) and stays on your device; the app deletes the sign-in key and family data when you sign out. There is no tracking, and there are no analytics or advertising cookies.

11. Contact

The controller answers questions about data protection at nicob.handy@gmail.com or via the contact form.