Privacy policy

Who we are

Maison Martin is a family app operated by [LEGAL NAME], trading as Galaco Software ("we"). Contact us about privacy at [email protected]. We will tell you our address on request.

What we collect

Account: your email address, and the identifier and name from Apple or Google if you sign in with them (with Apple, the email may be a private relay address). If you sign up with email, we keep a hash of your password, never the password itself.

Household: your household's name, and the display names and roles of its members, including children added by adults and pets (with what kind of animal each is). Invite links you create, when they expire and whether they were cancelled.

Calendar: the calendars and events you and your household add, and the photos and documents attached to events. If you allow notifications, your device's push token, app language and time zone, used only to send you reminders and your daily agenda. If you search for a place for an event, your iPhone sends what you type, and your approximate location if you allow it, to Apple Maps to find places; we receive only the place you pick. If you import events from Apple Calendar or a calendar file, your iPhone or browser reads them and sends us only the events you choose to import. Other apps import on the website. For TimeTree, the browser can't reach it directly, so your TimeTree email and password pass once through our server on Cloudflare to TimeTree to sign in, and the requests that read your calendars go the same way. A calendar link from Google Calendar, iCloud or Outlook is read once through the same server. Our server doesn't store or log any of it, and TimeTree's session ends when you leave the page.

Technical: our providers keep server logs (such as IP addresses and times of requests) for security and reliability.

How we use it

To sign you in, to share your household's information with its members, to keep the service secure, and to meet legal obligations.

We don't sell your information, show advertising, or use analytics or tracking tools.

Who handles it for us

We use service providers to host our database and sign-in, synchronise your household's information between our database and your devices, send the codes we email you, deliver notifications to your iPhone, and host this website. They handle your information only to provide these services to us. Our database and the synchronisation service run in data centres in Tokyo, Japan.

These providers are companies based in the United States. By agreeing to this policy when you sign up, you consent to us providing your information to them. Their terms with us limit their use of it to providing their services, and they protect it with security measures such as encryption and access controls.

The United States has no comprehensive federal law on personal information. It is protected by federal laws for particular sectors, by the Federal Trade Commission's action against unfair or deceptive practices, and by state laws such as the California Consumer Privacy Act. Japan's Personal Information Protection Commission describes the US system at www.ppc.go.jp/personalinfo/legal/kaiseihogohou/#gaikoku.

Adverts and subscriptions

If your household doesn't have Premium, the app shows a small banner advert from Google AdMob. Adverts are never personalised, and we never ask to track you across other companies' apps or websites. To show and count adverts, Google receives your IP address (which it uses to estimate your general location), information about your device, an identifier limited to this app, and which adverts you saw or tapped. In the European Economic Area, the UK and Switzerland, the app asks for your consent first. Google explains how it uses this information at https://policies.google.com/technologies/ads.

Premium is bought through Apple, which handles the payment; we never see your card details. RevenueCat keeps a record of which household a subscription belongs to and whether it renews, so that everyone in the household gets Premium.

Children

Children don't create accounts. An adult in the household may add a child as a profile with a display name only.

An adult may also set up the child's own iPhone with a one-time code. That iPhone then signs in with an anonymous login: no email address, name or other account details are collected from the child. The child can see the household's calendar, lists and recipes, but not its finances, and can't change anything. An adult can disconnect the iPhone at any time, which deletes its login.

Keeping and deleting your information

We keep your information while you have an account. You can delete your account at any time in the app under Settings, Delete account, or on this website under Account, Delete account. This removes your information from our active systems straight away; encrypted backups expire within 30 days.

If you are Head of Household and no other member has a login, deleting your account also deletes the household.

Your rights

You can ask us to disclose, correct, delete or stop using your personal information, as provided by the Act on the Protection of Personal Information. Contact [email protected].

Changes

We will tell you in the app before any significant change to this policy takes effect.