This translation is provided for your convenience. In case of any discrepancy, the French version prevails.
Privacy policy
1. Who is responsible for your data
- MAMMATCHA
- 2 chemin des Fades, 33133 Galgon, France
- SIREN 938 630 449
- Contact: flam@99m.fr
This controller determines the purposes and means of processing your data within the meaning of Regulation (EU) 2016/679 (GDPR).
Flam is an independent project, not affiliated with stove manufacturers nor with their connected service providers.
2. The principle
Flam needs three things to work: to know which stove to control, to measure what it does, and to know whether it is cold outside. Everything collected serves one of those three things.
We sell no data, run no advertising, and use no advertising tracker.
3. What we collect, and why
3.1 Account
| Data | Source | Why | Legal basis |
|---|---|---|---|
| Email address | You, or Apple / Google at sign-in | Identify your account, restore your settings on a new device, reset the password | Performance of the contract (art. 6.1.b) |
| Password | You | Authentication | Performance of the contract |
| Provider identifier (Apple / Google) | Apple / Google | Passwordless sign-in | Performance of the contract |
The password is never stored in clear text: our authentication provider keeps only an irreversible cryptographic hash.
If you use Sign in with Apple and choose to hide your address, we receive only the relay alias Apple provides. We then have no way of knowing your real address, and nothing about the service changes.
You can use Flam without an account. Your settings then stay on your phone only and disappear when you uninstall.
3.2 Your stove
| Data | Why |
|---|---|
| WiFi module MAC address and PIN | The only way to reach your stove through the manufacturer's service |
| Brand and model | Match the available commands to the hardware |
| Pellet quality and price | Estimate consumption |
| Home time zone | Trigger your schedules at the correct local time |
Your stove's credentials are encrypted in a dedicated vault and are decrypted only for the duration of a call to the manufacturer's service. They are never displayed in clear text server-side, nor visible to the publisher in the administration interface.
3.3 Location
Flam never accesses your phone's GPS.
You pick a city from a list, at sign-up or in the settings. We keep its coordinates at city level (an accuracy of several kilometres, never your street address).
They are used solely to obtain weather data, including the outdoor temperature: Eco+ and Flam Pilot use it to estimate heating needs, and the application shows that temperature alongside your readings. Without a location those two features are unavailable; the rest of the application works normally.
You can delete your location at any time: Settings, then Weather, then Remove location.
3.4 Stove operating data
Periodic readings: ambient and target temperature, status (off, lighting, burning, eco, cooling), power level, error codes, heating sessions, estimated consumption, daily summaries, and the actions decided by Flam Pilot and Eco+.
These readings are used to display your statistics, to run the automations, and to diagnose a fault when you report one.
Frequency: every 5 minutes with an active Flam+ subscription, once an hour without one.
3.5 Notifications
If you enable them, an anonymous notification token provided by Apple or Google is stored so we can send you alerts. It is deleted as soon as you turn notifications off or sign out.
3.6 Subscription
The purchase is handled by Apple or Google: we never see your payment data or your card number. Our subscription provider passes us only your subscription status (active, trial, expired) and its expiry date, linked to your account's internal identifier.
These exchanges happen server to server: they do not depend on the usage statistics consent setting described below, because they relate to performance of the contract and to billing, not to audience measurement.
3.7 Usage statistics
We measure which screens are used and which features fail, so we can fix what does not work. Two levels, adjustable in Settings, then Usage data.
Anonymous measurement, on by default. No persistent identifier: the session’s identifier disappears when the application closes. No profile, no city, no location: we see what happens in the app, never who does it. What a session sends is never linked to your account afterwards, even if you turn on the next level. Legal basis: our legitimate interest in measuring the application’s audience, under the consent exemption provided for audience measurement (article 82 of the French loi Informatique et Libertés). You can object at any time by turning off “Anonymous measurement”.
Statistics linked to your account, off by default. If you turn them on, at the end of sign-up or in Settings, your statistics are linked to your account’s internal identifier, together with the city chosen in the settings, to follow usage over time and from one device to another. Legal basis: your consent (art. 6.1.a), withdrawable at any time through the same switch.
In both cases we measure: screens viewed, actions, technical errors, language, country, stove brand, device type. Your IP address is not kept: our tool discards it on receipt, without deriving any location from it. Never transmitted: your email address, your stove’s credentials, your precise address, or any content you type.
3.8 Crash reports
If the application crashes, a technical report (device model, system version, Flam version, stack trace) is sent to our error tracking tool so the defect can be fixed. Legal basis: legitimate interest (art. 6.1.f): having an application that does not crash.
3.9 Waiting list for a brand
If your stove is from a brand Flam cannot control yet, you can leave an email address to be told as soon as it can. We store that address, the brand and the app language for one purpose only: writing to you when the brand is supported. Legal basis: your consent (art. 6.1.a), which you can withdraw at any time by writing to us. Only our servers can read the address, and it is erased with your account.
4. What we never collect
- Your GPS position
- Your contacts, photos, microphone, camera, calendar
- Your payment data
- Any advertising identifier
- Any third-party tracker for advertising purposes
Flam requests no sensitive system permission, except notifications, which you can refuse without losing access to the rest of the application.
5. Who else sees your data
We neither sell nor rent your data. It is processed by the following processors, each bound by contract and for the stated purpose only.
| Processor | Role | Hosting |
|---|---|---|
| Supabase | Database, authentication, application servers | European Union (Frankfurt, Germany) |
| Resend | Sending the app's code emails (password reset, email address confirmation) | European Union (Ireland); US company, standard contractual clauses |
| Your stove manufacturer's cloud service | Communication with your stove: unavoidable, it is the only channel that exists | European Union |
| Open-Meteo | Weather data, including the outdoor temperature. Receives city coordinates, never an identifier relating to you | European Union |
| Apple / Google | Notifications, subscription processing | International |
| RevenueCat | Subscription management | United States, standard contractual clauses |
| PostHog | Usage statistics: anonymous measurement, and linked to your account if you have agreed | European Union (Frankfurt, Germany) |
| Sentry | Crash reports | European Union |
| Vercel | Hosting of this site, and cookie-free measurement of its audience | International |
Transfers outside the European Union are covered by the European Commission's standard contractual clauses.
We may also disclose data where the law requires it.
6. How long we keep it
| Data | Duration |
|---|---|
| Account and settings | As long as the account exists |
| Detailed stove readings (5-minute resolution) | 90 days |
| Hourly readings | 2 years |
| Daily summaries and statistics | As long as the account exists |
| Compressed archive of stove readings | As long as the account exists; after deletion, in anonymous form (see section 7) |
| Notification tokens | Until disabled or signed out |
| Brand waiting list | Until you withdraw your consent, and at the latest until the account is deleted |
| Usage statistics | 12 months |
| Crash reports | 90 days |
Detailed readings are progressively condensed: beyond 90 days only one measurement per hour is kept in the database, and beyond two years only the daily summaries remain.
7. The readings archive, and deleting your account
To keep the database small, readings older than three months are exported into compressed monthly files, filed per account in private storage.
When you delete your account, your personal data is erased immediately and permanently: email address, encrypted stove credentials (automatically purged from the vault), location, time zone, time slots, preferences, the history of Flam Pilot and Eco+ decisions, notification tokens. We also ask PostHog and RevenueCat to erase what they hold about you.
Your stove's operating readings are kept, in anonymous form: temperatures, power, consumption, heating sessions, daily summaries, stove brand and model. They are detached from your account and filed under a random identifier we keep nowhere, so nothing links them back to you. They contain neither your email address, your location, nor your stove credentials. We use them for statistics and to improve Flam Pilot's thermal estimation.
Backups. Technical backups of our database expire on their own at the end of their rotation cycle; they are used only to restore the service after an incident.
8. Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent at any time.
Directly in the application, without writing to us:
- View and correct your settings: Settings
- Withdraw consent to statistics: Settings, then Usage data
- Delete your location: Settings, then Weather, then Remove location
- Delete your account and your data: Settings, then Account, then Delete my account. The full procedure is described on the Delete your account page.
For any other request: flam@99m.fr. We reply within one month.
You may lodge a complaint with the French supervisory authority, the CNIL (3 place de Fontenoy, 75007 Paris, www.cnil.fr), or with the supervisory authority of your country of residence.
9. Security
- All network exchanges are encrypted (TLS).
- Your stove's credentials are encrypted at rest in a dedicated vault.
- On your phone, sensitive data is stored in the iOS Keychain or the Android Keystore.
- Each user can access only their own data, a constraint enforced by the database itself, not merely by the application.
No system is perfectly secure. In the event of a data breach likely to result in a high risk to your rights, you will be informed and the CNIL notified within 72 hours, in accordance with articles 33 and 34 of the GDPR.
10. Children
Flam is not intended for people under 16 and does not knowingly collect their data. If you become aware that a child has provided us with data, write to us: we will delete it.
11. Changes
Any substantial change will be notified to you in the application before it takes effect.
12. Contact
- MAMMATCHA, 2 chemin des Fades, 33133 Galgon, France
- flam@99m.fr