This translation is provided for your convenience. In case of any discrepancy, the French version prevails.

Privacy policy

1. Who is responsible for your data

• MAMMATCHA
• 2 chemin des Fades, 33133 Galgon, France
• SIREN 938 630 449
• Contact: flam@99m.fr

This controller determines the purposes and means of processing your data within the meaning of Regulation (EU) 2016/679 (GDPR).

Flam is an independent project, not affiliated with stove manufacturers nor with their connected service providers.

2. The principle

Flam needs three things to work: to know which stove to control, to measure what it does, and to know whether it is cold outside. Everything collected serves one of those three things.

We sell no data, run no advertising, and use no advertising tracker.

3. What we collect, and why

3.1 Account

| Data | Source | Why | Legal basis | |---|---|---|---| | Email address | You, or Apple / Google at sign-in | Identify your account, restore your settings on a new device, reset the password | Performance of the contract (art. 6.1.b) | | Password | You | Authentication | Performance of the contract | | Provider identifier (Apple / Google) | Apple / Google | Passwordless sign-in | Performance of the contract |

The password is never stored in clear text: our authentication provider keeps only an irreversible cryptographic hash.

If you use Sign in with Apple and choose to hide your address, we receive only the relay alias Apple provides. We then have no way of knowing your real address, and nothing about the service changes.

You can use Flam without an account. Your settings then stay on your phone only and disappear when you uninstall.

3.2 Your stove

| Data | Why | |---|---| | WiFi module MAC address and PIN | The only way to reach your stove through the manufacturer's service | | Brand and model | Match the available commands to the hardware | | Pellet quality and price | Estimate consumption | | Home time zone | Trigger your schedules at the correct local time |

Your stove's credentials are encrypted in a dedicated vault and are decrypted only for the duration of a call to the manufacturer's service. They are never displayed in clear text server-side, nor visible to the publisher in the administration interface.

3.3 Location

Flam never accesses your phone's GPS.

You pick a city from a list, at sign-up or in the settings. We keep its coordinates at city level — an accuracy of several kilometres, never your street address.

They are used solely to obtain the weather forecast that Eco+ and Flam Pilot use to anticipate heating needs. Without a location those two features are unavailable; the rest of the application works normally.

You can delete your location at any time: Settings, then Weather, then Clear city.

3.4 Stove operating data

Periodic readings: ambient and target temperature, status (off, lighting, burning, eco, cooling), power level, error codes, heating sessions, estimated consumption, daily summaries, and the actions decided by Flam Pilot and Eco+.

These readings are used to display your statistics, to run the automations, and to diagnose a fault when you report one.

Frequency: every 5 minutes with an active Flam+ subscription, once an hour without one.

3.5 Notifications

If you enable them, an anonymous notification token provided by Apple or Google is stored so we can send you alerts. It is deleted as soon as you turn notifications off or sign out.

3.6 Subscription

The purchase is handled by Apple or Google — we never see your payment data or your card number. Our subscription provider passes us only your subscription status (active, trial, expired) and its expiry date, linked to your account's internal identifier.

These exchanges happen server to server: they do not depend on the usage statistics consent setting described below, because they relate to performance of the contract and to billing, not to audience measurement.

3.7 Usage statistics — off by default

We measure which screens are used and which features fail, so we can fix what does not work.

This processing stays off until you turn it on (Settings, then Usage data). While it is off, no data is stored persistently: the identifier is volatile and disappears when the application closes.

Measured: screens viewed, actions, technical errors, language, stove brand, device type. Never transmitted: your email address, your stove's credentials, your precise address, or any content you type.

Legal basis: your consent (art. 6.1.a), withdrawable at any time through the same switch.

3.8 Crash reports

If the application crashes, a technical report (device model, system version, Flam version, stack trace) is sent to our error tracking tool so the defect can be fixed. Legal basis: legitimate interest (art. 6.1.f) — having an application that does not crash.

4. What we never collect

• Your GPS position
• Your contacts, photos, microphone, camera, calendar
• Your payment data
• Any advertising identifier
• Any third-party tracker for advertising purposes

Flam requests no sensitive system permission, except notifications — which you can refuse without losing access to the rest of the application.

5. Who else sees your data

We neither sell nor rent your data. It is processed by the following processors, each bound by contract and for the stated purpose only.

| Processor | Role | Hosting | |---|---|---| | Supabase | Database, authentication, application servers | European Union (Frankfurt, Germany) | | Your stove manufacturer's cloud service | Communication with your stove — unavoidable, it is the only channel that exists | European Union | | Open-Meteo | Weather forecasts. Receives city coordinates, never an identifier relating to you | European Union | | Apple / Google | Notifications, subscription processing | International | | RevenueCat | Subscription management | United States — standard contractual clauses | | PostHog | Usage statistics, if you have enabled them | European Union (Frankfurt, Germany) | | Sentry | Crash reports | European Union | | Vercel | Hosting of this site, and cookie-free measurement of its audience | International |

Transfers outside the European Union are covered by the European Commission's standard contractual clauses.

We may also disclose data where the law requires it.

6. How long we keep it

| Data | Duration | |---|---| | Account and settings | As long as the account exists | | Detailed stove readings (5-minute resolution) | 90 days | | Hourly readings | 2 years | | Daily summaries and statistics | As long as the account exists | | Compressed archive of stove readings | As long as the account exists; after deletion, in anonymous form (see section 7) | | Notification tokens | Until disabled or signed out | | Usage statistics | 12 months | | Crash reports | 90 days |

Detailed readings are progressively condensed: beyond 90 days only one measurement per hour is kept in the database, and beyond two years only the daily summaries remain.

7. The readings archive, and deleting your account

To keep the database small, readings older than three months are exported into compressed monthly files, filed per account in private storage.

When you delete your account, your personal data is erased immediately and permanently: email address, encrypted stove credentials (automatically purged from the vault), location, time zone, time slots, preferences, the history of Flam Pilot and Eco+ decisions, notification tokens. We also ask PostHog and RevenueCat to erase what they hold about you.

Your stove's operating readings are kept, in anonymous form: temperatures, power, consumption, heating sessions, daily summaries, stove brand and model. They are detached from your account and filed under a random identifier we keep nowhere, so nothing links them back to you. They contain neither your email address, your location, nor your stove credentials. We use them for statistics and to improve Flam Pilot's thermal estimation.

Backups. Technical backups of our database expire on their own at the end of their rotation cycle; they are used only to restore the service after an incident.

8. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw your consent at any time.

Directly in the application, without writing to us:

• View and correct your settings: Settings
• Withdraw consent to statistics: Settings, then Usage data
• Delete your location: Settings, then Weather, then Clear city
• Delete your account and your data: Settings, then Account, then Delete my account. The full procedure is described on the Delete your account page.

For any other request: flam@99m.fr. We reply within one month.

You may lodge a complaint with the French supervisory authority, the CNIL (3 place de Fontenoy, 75007 Paris, www.cnil.fr), or with the supervisory authority of your country of residence.

9. Security

• All network exchanges are encrypted (TLS).
• Your stove's credentials are encrypted at rest in a dedicated vault.
• On your phone, sensitive data is stored in the iOS Keychain or the Android Keystore.
• Each user can access only their own data, a constraint enforced by the database itself, not merely by the application.

No system is perfectly secure. In the event of a data breach likely to result in a high risk to your rights, you will be informed and the CNIL notified within 72 hours, in accordance with articles 33 and 34 of the GDPR.

10. Children

Flam is not intended for people under 16 and does not knowingly collect their data. If you become aware that a child has provided us with data, write to us: we will delete it.

11. Changes

Any substantial change will be notified to you in the application before it takes effect.

12. Contact

• MAMMATCHA — 2 chemin des Fades, 33133 Galgon, France
• flam@99m.fr