FamiPrivacy policy
FamiLab is a website of science experiments to do as a family. We store the minimum needed for your account to work and nothing else: no ads, no tracking, no selling of data. Here is what we keep, why, and how you can delete it.
Who is responsible
The data controller is the owner of familab.app. You can write to hola@familab.app about anything related to your data.
What we store
Your email. It is the only thing we ask for to create an account. There are no passwords: you sign in with a code we send by email. If you sign in with Google, we receive your email and name from Google.
Your children, without identifying them. For the achievement diary we store only a nickname and the year of birth of each child. We do not ask for full names, photos or any other data. The account always belongs to the adult; children do not sign up.
What you do on FamiLab. Which experiments you completed, when, and how many quiz answers were correct. This is what fills the diary and the certificates.
Your language and where you came from. We store the language you chose and, if you arrived from a social network, the name of that network (for example, "instagram"). Nothing else: no profile, no followers, no activity on that network.
If you pay for FamiLab complete. Payments are processed by Stripe. We only store that your account is unlocked. We never see or store your card.
What we use it for
To make your account work: signing in, saving your children's achievements and generating their certificates. The legal basis is the performance of the service you ask us for.
To send you emails about your account (the sign-in code, for example). If one day we send a newsletter with new experiments, we will ask for your permission first and you will be able to unsubscribe from every email.
To protect the service from abuse (for example, limiting how many codes can be requested from one address). The legal basis is our legitimate interest in keeping the site running.
We do not use your data for advertising, we do not sell it and we do not build profiles.
Cookies
We only use technical cookies, needed for the session to work: the ones that keep you signed in, one that remembers your language and one that remembers which social network you came from. There are no analytics or advertising cookies, so we do not show a cookie banner.
Who else processes your data
We rely on a few providers, each bound by its own data protection commitments:
Supabase stores the database and manages account access. Cloudflare hosts the site and serves the animations. Resend sends the sign-in emails. Google is only involved if you choose to sign in with your Google account. Stripe is only involved if you pay.
None of them may use your data for their own purposes.
How long we keep it
For as long as you have an account. If you delete it, we remove your email, your children and their achievements within 30 days at most. Backups are rotated within a similar period.
Your rights
You can ask us at any time to see what data we hold about you, correct it, take it with you or delete it, and you can also object to or restrict its use. Just write to hola@familab.app from your account email. We reply within a month.
You can edit or remove your children's nicknames and achievements yourself from your family.
If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es) or to your local supervisory authority.
Changes to this policy
If we change anything important, we will let account holders know by email. The date above indicates the current version.