Privacy policy

1. Who is responsible for your data

Orgami is developed and published by Julien Gomes (developer account ‘CraftTools’), in the canton of Vaud, Switzerland.

Contact for any question about your data: contact@orgamiapp.ch, or in the app: Help › Contact us.

This policy is based on the Federal Act on Data Protection (FADP). Orgami is intended for families in Switzerland; if you live in the European Union, you also benefit from the rights provided by the General Data Protection Regulation (GDPR).

2. The data processed, and why

Your account

Your email address, your password (stored in an encrypted form that no one can read back) and your first name. They are used to create your account, to log you in and to send you account-related emails (confirmation, new password).

Your family

The family name, its photo if you add one, the list of members and their role (owner, adult, child account), the invitation code and the canton chosen to display school holidays and public holidays.

What you add to the app

Tasks, calendar, shopping list, recipes, loyalty cards, vouchers, warranties, shared codes, documents and official documents (for example a photo of an identity card or a driving licence, with its expiry date), and the photos and PDFs that go with them. This data is used solely to make the app work for your family.

The ‘Personal’ task list and calendars marked ‘Only me’ are visible only to you.

No health data

Orgami has no health features and does not ask you for any health data. If you choose to write some in a note or store some in a document, it is treated like the rest of your family’s content, and is visible to the whole family.

Other people’s data

When you add information about a child or another family member, or the email address of someone you invite, you are processing those people’s data. Only add it if you are entitled to (which is the case for your minor children), with the consent of the adult concerned, and inform the people concerned if necessary.

Location: ‘Where are you?’ (VIP Pass)

• Your location is only shown to the loved ones in your family with whom you have agreed to share it. You can always see who sees it, and when each of them last requested it. You can stop at any time.
• Your location is sent only when one of these loved ones asks you ‘Where are you?’ (and once at the moment you agree to share it). Your phone then sends a single location, even if Orgami is closed (‘Allow all the time’ location permission). There is no continuous tracking.
• Only your last location is kept, with no history. It is deleted when you stop the last share, when you leave the family or when you delete your account.
• To send it when the app is closed, your phone uses its own identifier: the server keeps only a fingerprint of it, and it is deleted when you log out or after 60 days without use.

Imported calendars (VIP Pass)

The link to the calendar you provide (Google Calendar, Outlook, iCloud…) is kept, along with a copy of its events, updated automatically about once an hour. Everything is deleted when you remove the calendar from Orgami.

Recipes imported by link

When you import a recipe, Orgami’s server downloads the page from the recipe website to extract the recipe. Orgami records the import (account, family, date) for 30 days, to apply the limits of the free version. The recipe photo is then displayed from the original website, which therefore receives your IP address.

Friend families and shared events (coming soon)

When you link your family to a friend family, that family sees your family’s name and photo. For a shared event, the invited families see its details, the first names of the participants, what each person is bringing and the shared expenses.

Notifications

Orgami keeps a notification identifier specific to your phone, and your notification preferences. The text of notifications passes through Google’s notification service. Notifications about official documents never show the document’s name.

The Android widget

If you place the widget on your home screen, it shows the lists you have chosen. It uses an identifier specific to the phone: the server keeps only a fingerprint of it. This identifier is deleted when you log out, or after 60 days without use.

The VIP Pass and purchases

• Payment is handled entirely by Google Play: Orgami never sees your bank details.
• The RevenueCat service manages purchases for Orgami. It receives your Orgami account identifier (a random number, without your name or email), the purchase information, your country, your currency and information about your device.
• Orgami keeps the status of the family’s VIP Pass (active, end date, type of offer), the account that paid and the Google Play purchase reference.
• Orgami also keeps a purchase log with no account identifier: type of event, product, price and date. This log is pseudonymised: only RevenueCat could link it to an account.

Email invitations

The address of the person you invite is used only to send them the invitation. The invitation contains your first name, your family’s name and your email address (so that they can reply to you). For 30 days, Orgami keeps who sent the invitation, for which family, and a fingerprint of the invited address (a code calculated from the address), to prevent repeated sending.

‘Contact us’ messages

Your message is sent by email to contact@orgamiapp.ch, together with your email, your first name, your family’s name and code, your role, the status of the VIP Pass, the number of members, your device and the app version, in order to help you. These emails are deleted no later than 12 months after the end of the exchange. Orgami also keeps a ‘one message, at a given time’ entry for 2 days, to limit abuse.

Usage statistics

To find out how many families use Orgami and to improve it, without any external analytics tool:

• the days on which your family opens the app;
• for your account: the day, the app version and the type of device (Android, web);
• an event log with no name or identifier: only a type and a time, for example ‘a family created’, ‘a notification sent’;
• totals per menu (number of items), without ever reading their content.

These statistics are used only by Orgami, are never shared and are never used for advertising. You can object to them by writing to contact@orgamiapp.ch.

Technical data

Like any online service, the servers receive your IP address and technical information about your device. This is used to run and protect the service, for example to limit repeated attempts at invitation codes (a wrong code attempt is kept for 1 day). Technical logs are kept by the providers listed in section 5, according to their own retention periods.

On your phone

• Orgami keeps your login session and a few settings on your device (last tab opened, review request reminder…). There are no advertising cookies.
• To work with a poor connection, Orgami also keeps on your device a copy of your loyalty cards, your vouchers, the shopping list and your family’s name. It is deleted when you log out, and is not included in Google backups. Documents are never included in it.
• The document scanner works on the phone (Google ML Kit): the image is not sent anywhere until you save it in Orgami. Google receives only technical data about how the scanner is working (type of device, version, errors).
• Photos taken with the camera from Orgami do not go into your gallery: their temporary copy is deleted from the phone the next time you open Orgami (at the earliest 10 minutes after the photo was taken).

3. On what legal bases

• Running the service you asked for (contract): your account, your family and everything you add.
• Your consent for location (by accepting each share and the phone permission), notifications and imported calendars. You can withdraw it at any time: stop sharing, turn off notifications, remove the calendar.
• Orgami’s legitimate interest: the security of the service and the usage statistics described above, limited to what is strictly necessary.
• Legal obligations: for example keeping records of sales for accounting purposes.

Orgami does not make any automated decisions about you.

4. Who can see your data

• Your family: everything you add, except your ‘Personal’ list and your ‘Only me’ calendars.
• Friend families: your family’s name and photo, and the shared events they take part in.
• The publisher of Orgami: they can technically access the database for maintenance, for security or to respond to a request from you. They do not look at families’ content outside these cases.
• The technical providers listed below, only to run the service.
• The authorities, only if the law requires it.

Your data is never sold or used for advertising.

5. Providers and countries involved

Switzerland recognises the level of protection of the European Union and the United Kingdom. To the United States and Singapore, transfers are based either on the provider’s certification under the Swiss-U.S. Data Privacy Framework (Netlify, Google), or on the European Commission’s standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC) (Supabase, RevenueCat, Resend). You can obtain a copy of these safeguards by writing to contact@orgamiapp.ch.

6. How long

When you delete your account, it is erased immediately, along with your notification, widget and location identifiers, your position, your ‘Personal’ list (including in the bin) and your activity days. If you were the only member of your family, the family and all its content are erased too; its photos and files disappear during the automatic clean-up the following night. Any precautionary copies disappear no later than 5 weeks afterwards.

Important: your official documents belong to the family, not to your account. If other members remain, they can still see them. Delete them first if you don’t want to leave them behind, or ask for them to be erased by writing to contact@orgamiapp.ch. Details are on the Delete your account page.

7. Security

• All connections are encrypted (HTTPS).
• Each family can access only its own data: access rules are checked by the database itself, not just by the app.
• Photos and documents are stored in a private space, accessible only to the family, through temporary links.
• Sensitive screens are protected on Android, and technical secrets are never in the app.
• When someone joins your family, the adults are notified, and the owner can change the invitation code at any time.

No system is infallible. In the event of a breach of data security that poses a risk to you, the publisher will report it to the FDPIC as quickly as possible and inform you.

8. Children

• A personal account can be created from the age of 16.
• Younger children can use Orgami with a parent’s consent: the parent gives them the family code. The child declares themselves as a child account when joining the family, or an adult marks them as one.
• A child account sees and edits the family’s content like the other members, but cannot invite anyone, leave the family on their own or restore what is in the bin.
• Parents remain responsible for their children’s data that they add to Orgami, and for how their children use the app.

9. Your rights

• To know what data Orgami processes about you, and to receive a copy of it free of charge in a common format, which you can also have transferred to another service.
• To correct your data: directly in the app.
• To delete your data: each item in the app, or your whole account (My profile › Delete my account, or the Delete your account page).
• To withdraw your consent or object to processing: turn off notifications, stop sharing your location, or write to contact@orgamiapp.ch.

To exercise these rights, write to contact@orgamiapp.ch. You will receive a free reply within 30 days; you may be asked to confirm your identity.

You can also contact the FDPIC or, if you live in the European Union, the data protection authority of your country.

10. Changes to this policy

If this policy changes, the new version is published on this page with its date. If there is a significant change, Orgami will let you know in the app.