Privacy Policy

This policy explains, in plain language, what personal information Mishpi collects, why we collect it, who we share it with, and the rights you have over your data. We have tried to keep it readable rather than legalistic.

Who we are

Mishpi is a service that turns a family's shared photos and updates into a printed gazette and posts it to the people they choose. If you have any question about this policy or about your data, write to us at hello@mishpi.com.

For European users, Mishpi acts as the data controller for the personal data described below.

What we collect

• Account details — your name and email address, or, if you sign in with Google, the identifier Google gives us to recognise your account.
• Family information — your family or group name, the members you add, and the invite code that lets people join.
• The content you post — the photos and text that you and your family members add to the shared feed each month.
• Payment status — whether your subscription is active, when it renews, and the result of payments. We use Stripe to handle billing; we never see or store your card numbers.
• Basic technical data — the kind of information any website receives, such as your device type and approximate region, used to keep the service running and secure.

Why we use it

We use this information for two main purposes: to run the shared family feed (so members can post, view and comment), and to produce and mail the printed gazette to the recipients you choose. We also use it to manage your subscription, provide support, and keep the service safe.

Who we share it with

We do not sell your data. We share it only with the service providers (processors and sub-processors) we rely on to operate Mishpi:

• Stripe — to process subscription payments securely.
• Fly.io and Tigris — to host the application and to store and serve images via a content delivery network (CDN). We use EU regions for this hosting and storage.
• Google — when you choose to sign in with your Google account.
• A print and mail partner — to print each gazette and post it to the recipients on your list. We share the recipient's name and postal address, and the content of that issue, for this purpose only.

Photos and images

Photos you upload are stored on a CDN so they load quickly inside the app and can be laid out for print. When you upload a photo, we strip its location metadata (GPS and EXIF data) so that hidden coordinates are not stored or shared.

Please remember that anyone your family chooses to share a gazette or photo with can see those images. Once a printed issue is posted, we cannot recall it.

Children

Families naturally include children, and gazettes often feature minors. Mishpi is operated by adults: the family admin is responsible for obtaining the consent of the people who appear in posted photos and text, including children and their parents or guardians. If you believe a child's data has been added without proper consent, contact us at hello@mishpi.com and we will help.

Your rights

Under the GDPR and similar laws, you have the right to access your data, receive a copy of it, correct it, and have it deleted.

• Export and deletion are self-service. Account holders can export their data and delete their account from Settings inside the app, or use the account & data deletion page.
• You can also email hello@mishpi.com and we will help you access, correct, export or delete your information.
• You have the right to lodge a complaint with your local data protection authority (in France, the CNIL).

Retention

We keep your account and family content for as long as your account is active. When you delete your account, we delete your personal data and posted content from our systems, except where we must keep limited records (for example, billing records Stripe requires for tax and accounting). Printed gazettes already posted cannot be recalled.

Security

We use reputable infrastructure providers, encrypt data in transit, and limit access to personal data to what is needed to run the service. No system is perfectly secure, but we work to protect your information and to respond quickly if something goes wrong.

Cookies and analytics

We use a small number of essential cookies needed to sign you in and keep the app working. We also use the Meta (Facebook) Pixel for analytics and advertising measurement, which may set cookies and share limited usage data with Meta. EU and EEA visitors may opt out of advertising tracking through their browser settings or via the Your Online Choices tools.

International transfers

We host data in the EU where possible. Some of our providers (for example, Stripe and Google) may process data outside the EU/EEA. Where that happens, transfers are covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses.