Privacy policy
This is an English translation provided for convenience. In case of any difference, the French version prevails.
MyFamCare helps you organise your family’s papers, health and daily life. This is some of the most personal information there is: here we explain, simply, what data we use, why, who can see it and how it is protected.
Who is responsible for your data
The data controller is Epignosis Group, publisher of MyFamCare, Cotonou, Benin (RCCM: RB/ABC/26 A 142110; IFU: 0202628567119).
- Personal data contact: myfamcare.app@gmail.com
- Phone: +229 01 97 21 16 45 · +33 7 81 61 49 47
This policy applies Book V of law no. 2017-20 of 20 April 2018 on the Digital Code of the Republic of Benin, supervised by the Personal Data Protection Authority (APDP). For people using MyFamCare from the European Union, it also applies the General Data Protection Regulation (GDPR).
The data we use
| Category | Examples | Why |
|---|---|---|
| Account | last name, first name, e-mail, phone, country, password (never stored in plain text) | create your account and sign you in |
| Family | members, family ties, dates of birth, roles and rights | organise your family space |
| Documents | files, titles, expiry dates, text read during scanning, notes | store your papers and warn you before they expire |
| Health and emergency | blood type, allergies, treatments, emergency contacts | show your emergency card, only if you fill it in |
| Budget and pay | income, expenses, payslips | your budget tracking, only if you use it |
| Messages | messages, photos, voice notes and files exchanged within the family | family messaging |
| Payments | chosen plan, amount, date, transaction reference | manage your subscription (we never see your card number) |
| Technical data | phone model, app version, crash reports | run and secure the service |
We do not collect your location, your contacts or your microphone in the background. The camera and microphone are only used when you scan a document or record a voice message.
Health data and sensitive data
Health information is sensitive data. We only process it with your explicit consent, given when you fill in these fields yourself, for the sole purpose of showing and sharing your emergency card with your family.
- You can withdraw this consent at any time, free of charge, by deleting this information.
- No health data is used for advertising or profiling.
MyFamCare is not a medical service: it replaces neither a doctor nor an emergency service.
Why, and on what legal basis
- Performance of the service you asked for: account, family space, documents, reminders, messaging, subscription.
- Your consent: health data, artificial intelligence features, notifications, SMS or WhatsApp alerts. You can withdraw it at any time.
- Legal obligations: invoices and payment records.
- Legitimate interest: security of the service, prevention of fraud and abuse.
MyFamCare does not sell your data, shows no advertising and does not pass your data to any advertiser.
Who can see your data
| Who | What they can see |
|---|---|
| You | all your data |
| The family’s main parent | the documents, profiles and information of the family space, according to each person’s rights |
| A co-parent | what the main parent allows them to see |
| A member with personal access, or a child | only their own profile and documents |
| A person removed from the family | nothing any more: their access is cut immediately and documents added afterwards can no longer be read by them |
| The recipient of a sharing link | only the shared document, for the duration and number of openings you chose |
| The MyFamCare team | only what you voluntarily send them (support request, file submitted through MyFamCare), with role-based access, two-factor authentication and a log of every action |
Our team does not look at the content of your documents. Technical access to the server is restricted to a few authorised people, bound by confidentiality, and only to run the service.
How your data is protected
On your phone
- Your documents are encrypted on the phone (AES-256-GCM) before they are sent: what goes online is an unreadable file.
- Text read during scanning, notes, payslips and messaging attachments are encrypted too.
- Sensitive screens cannot be captured (Android) and are hidden in the app switcher (iPhone).
- When you sign out, keys and temporary copies are erased from the phone.
- You can lock the app with your fingerprint, face or a code.
Online
- All communications are encrypted (HTTPS/TLS).
- The keys that open a family’s documents are kept by our server, themselves encrypted by a master key held in a secure vault (Google Secret Manager). They are only handed to members whose access is active.
- When a member is removed, a new key is created for subsequent documents.
- Access rules check, on every read, who you are and what your role allows.
- Sharing links are end-to-end encrypted: the key stays in the link, and our server cannot read the shared document.
- MyFamCare administration is protected by two-factor authentication, and every action is logged.
No system is invulnerable. In the event of a data breach presenting a risk, we notify the APDP and the people concerned without delay, and the CNIL within 72 hours for people located in the European Union.
Artificial intelligence
Analysis features (reading a document, explaining a payslip, assistant) only run when you ask for them.
- Only the information needed for your request is sent to our AI provider: Google (Gemini) or Anthropic (Claude).
- These providers process it to produce the answer, under their business terms. It is not kept in MyFamCare beyond what your request needs.
- No decision about you is made automatically: results are suggestions that you check.
Our service providers and where data is hosted
| Provider | Role | Location |
|---|---|---|
| Google Cloud / Firebase | hosting, database, files, sign-in, notifications | European Union (Belgium, the Netherlands) |
| Google (Gemini) | document analysis at your request | United States and European Union |
| Anthropic (Claude) | analysis and assistant at your request | United States |
| Brevo | sending e-mails (address confirmation, forgotten password, service information) | European Union (France) |
| FedaPay | payment by Mobile Money or card | Benin |
| Apple (App Store) | payment for subscriptions on iPhone | United States and Ireland |
| Meta (WhatsApp) | WhatsApp alerts, only if you turn them on | United States and European Union |
These providers only access the data needed for their task. Your data is therefore stored outside Benin, mainly in the European Union. These transfers rely on the performance of the service you request, on your express consent and on our providers’ contractual safeguards, in accordance with articles 391 and 392 of the Digital Code and the GDPR.
How long we keep it
| Data | Duration |
|---|---|
| Account, family, documents, messages | as long as your account is active; deleted when you delete your account |
| Documents you delete | kept in the trash, where you can restore them, for the period shown on the app’s Trash screen (currently 30 days), then permanently erased with their files |
| Documents archived at the end of a plan | kept as long as the account exists, so you lose nothing |
| Sharing links | until they expire or are revoked, then deleted automatically |
| Payment records | 10 years (accounting obligations) |
| Security logs | a few days to a few months |
Your rights
At any time, you can:
- access your data and get a copy;
- correct or complete it;
- delete it: from the app (Privacy → Delete my account) or by e-mail;
- object to processing or withdraw your consent;
- ask for the portability of your data in a readable format;
- give instructions on what happens to your data after your death.
Write to myfamcare.app@gmail.com. We answer free of charge, within 30 days at most. If your request is complex, this period may be extended, and we will tell you.
If you believe your rights are not respected, you can contact the APDP (Personal Data Protection Authority, Cotonou, https://apdp.bj) or, in the European Union, the CNIL (https://www.cnil.fr).
Children
A child under 16 cannot create an account alone. Their information is added by their parent, who exercises parental authority and can give them personal access limited to their own profile. The parent can change or delete their child’s data at any time.
Changes
If this policy changes significantly, we will inform you in the app and ask you to accept it again. The update date is shown at the top of this page.