Privacy Policy — FairHome

At a glance

We only process the data the app needs to work: your account, your home, chores, shopping, goals, requests, rewards and notifications.
We don’t sell personal data, we don’t show ads, and we don’t use tracking or advertising analytics tools.
Kids take part through profiles managed by their parents or guardians, with no email or account of their own.
FairCoins are a virtual family currency: they have no money value and can’t be bought with real money.
You can export your data and delete your account from inside the app.

1. Who is responsible and how to reach us

The data controller is Manuel Sacramento, who develops and operates FairHome from Portugal. For any privacy question, or to exercise your rights, write to [email protected].

2. What data we process and why

We process five categories of personal data. For each one we explain the purpose, how long we keep it, who it is shared with and how it can be deleted.

2.1 Name

What it is: The name you choose to show in the app, and the names or nicknames that parents or guardians give to kids’ profiles.
Why: To identify each person inside the home: who did a chore, who bought an item, who made a request, who is on the leaderboard.
How long: For as long as the account or profile exists.
Sharing: Visible to the members of your home. It is stored with our hosting provider and passes through the technical providers listed in section 6 (for example, in the text of a notification).
Deletion: When you delete your account, your name is replaced with “—”. A kid’s profile that the parents delete for good no longer has a name.

2.2 Email address

What it is: The email you sign up with. Kids’ profiles don’t have an email.
Why: To create your account and sign you in, confirm your address, reset your password and send essential account messages. We don’t send newsletters or advertising.
How long: For as long as the account exists. Confirmation links expire after 24 hours and password reset links after 60 minutes.
Sharing: It isn’t shown to other members of your home. Our email delivery provider uses it only to deliver our messages.
Deletion: When you delete your account, your email is removed straight away and replaced with a meaningless technical address.

2.3 User ID

What it is: Randomly generated internal identifiers for your account and the profiles linked to it (for example, your membership in each home).
Why: To make the app work: linking your chores, points and requests to the right person, keeping you signed in, and applying each member’s permissions.
How long: For as long as the account or profile exists. Once deleted, the identifiers are only attached to anonymized records.
Sharing: Never sold or used for advertising. They stay with our hosting provider.
Deletion: When you delete your account, they are no longer linked to any name, email or contact detail.

2.4 Device ID and notification token

What it is: The token your phone’s operating system gives the app so it can receive push notifications, together with the platform (iOS or Android) and the device language, plus the technical session identifiers on that device.
Why: To send the notifications you choose (chores assigned to you, help requests, rewards, reminders) and to keep your session secure on each device.
How long: While the app is installed and you’re signed in. Tokens the provider reports as invalid are deleted automatically, and sessions expire after 30 days without use.
Sharing: The token is sent to Google (Firebase Cloud Messaging) and, on iPhone, to Apple (Apple Push Notification service), only to deliver notifications.
Deletion: When you sign out, turn notifications off on your phone, or delete your account. Deleting your account removes every token and session immediately.

2.5 User content

What it is: Chores, shopping lists and product names, goals (including school results, if your family records them), missions, requests, offers and agreements, rewards, your home’s name and settings, points, levels and badges, and the information in family profiles (a nickname and, if parents add it, an age group).
Why: This is the service itself: organizing the home, awarding points, showing the family’s history and leaderboards, and negotiating rewards.
How long: For as long as the home exists. Point history isn’t erased when an action is undone: it is corrected with an offsetting entry, so the family’s totals always add up.
Sharing: Visible only to the members of your home, according to the permissions and visibility you set (school goals, for example, are only seen by the people parents choose). There are no public profiles and no global leaderboards.
Deletion: Whoever created content can edit or delete it in the app, within their permissions. When you delete your account, what you added to a shared home stays there without your name; if you are the only adult in the home, the home and the kids’ profiles are deleted.

3. What we don’t collect

We don’t collect location, contacts, photos, files, audio recordings or payment details.
We don’t use advertising, third-party analytics tools, or tracking across apps and websites.
The child mode PIN is stored only on the phone itself, in protected storage, and is never sent to our servers. Face ID, Touch ID and fingerprint are handled by the phone’s operating system: we never receive biometric data.
To deliver the service and protect it from abuse, our servers and Cloudflare receive technical connection data such as your IP address. We only use it briefly (for example, attempt counters that expire within minutes) and don’t link it to your profile.

4. Legal bases

Performance of a contract (GDPR Article 6(1)(b)): your account, home, chores, shopping, goals, requests, rewards, essential emails and syncing between devices.
Consent (Article 6(1)(a)): push notifications, which are only sent if you allow them on your phone. You can withdraw consent at any time in your phone’s or the app’s settings.
Legitimate interests (Article 6(1)(f)): security, preventing abuse and fraud, backups and answering support requests.
Legal obligation (Article 6(1)(c)): when the law requires us to keep or provide information.

5. Kids’ profiles

Kids take part through supervised profiles created by an adult guardian in the home. These profiles have no email, password or phone of their own.
Parents decide what information the profile has (a nickname and, optionally, an age group), approve chores, goals and rewards, and choose which notifications the child gets. Age only adjusts the experience: it never grants permissions.
In child mode, a parent hands over their own phone and the child only sees their own profile. Leaving child mode requires the adult’s PIN or Face ID / Touch ID.
School results never lead to negative points and are only visible to the people parents choose.
Once the child has a phone, a parent can create their own access through a single-use link valid for 7 days. By sharing it, the parent allows the child to have their own account. The child keeps their progress and stays supervised.
Parents can remove a profile (it is deactivated and can be brought back with its balance, history and badges) or delete it for good: in that case the profile’s personal progress, badges and prize eligibility are deleted and can’t be recovered.
When creating a supervised profile, the adult confirms that they are the child’s parent or guardian, or are authorized by them. We process this data on the parents’ instructions and on their behalf, and they can ask for access, correction or deletion at any time.

6. Providers and sub-processors

We don’t sell or rent personal data. We only use the providers we need to run the service, under contracts that require them to process data on our instructions:

Hetzner Online GmbH (Germany, EU): servers, database and backups.
Cloudflare, Inc. (USA, global network): DNS, secure connections (HTTPS) and protection for the website and the API.
Resend (USA): sending account confirmation and password reset emails.
Google (Firebase Cloud Messaging): delivering push notifications.
Apple (Apple Push Notification service): delivering push notifications on iPhone.

We may also disclose data where the law requires it, for example under a court order.

7. International transfers

The app’s data is stored in the European Union (Germany). Some providers (Cloudflare, Resend, Google and Apple) may process data outside the European Economic Area, in particular in the United States. In those cases the transfer relies on the EU-US Data Privacy Framework, where the provider is certified, or on the standard contractual clauses approved by the European Commission.

8. Retention and deletion

We keep data for as long as the account and the home exist.
Deleting your account: in the app, under Settings › Account › Delete account (you’ll be asked for your password). Deletion is immediate: your name and email are removed, your sessions end, your notification tokens are deleted and you leave every home. If you are the only adult in a home, that home and its kids’ profiles are deleted. What you added to homes that carry on stays there without your name.
Backups: we back up the database daily and keep each backup for up to 14 days. Deleted data disappears from backups as they expire.
Email links: confirmation links expire in 24 hours, password reset links in 60 minutes, and a child’s own-access links in 7 days.

9. Your rights

Under the GDPR you have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time.

Access and portability: in the app, under Settings › Account › Export my data, you get a copy of your data in a file.
Correction: content you created can be edited in the app, and parents can correct kids’ profiles under Family › Edit profile. To correct your account name or other details, write to us.
Deletion: under Settings › Account › Delete account, or by email.
By email: send your request to [email protected] from the address on your account. We reply within one month and may ask you to confirm your identity.

If you think your data isn’t being handled properly, you can complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (www.cnpd.pt), or to the data protection authority in your country.

10. Security

Connections are encrypted (HTTPS), passwords are stored with a hashing algorithm built for that purpose (never as plain text), access to each home’s data is limited to its members and their permissions, and we make daily backups.

11. FairCoins

FairCoins are a virtual currency used within each family. They have no money value, can’t be bought with real money and can’t be exchanged for money, and the app never buys anything: rewards are agreements between family members.

12. Changes to this policy

We may update this policy when the app changes. The date of the last update is shown at the top of this page. If a change is significant, we’ll let you know in the app or by email before it takes effect.