Habibee

Informativa sulla privacy

Questo documento è disponibile solo in inglese.

Last updated: October 27, 2026 · This policy covers this website, the waitlist and the Habibee app, including the optional Family Sync and the founding families beta test.

1. Who we are

Habibee is operated by Aleksandr Ulanov (Gran Via de les Germanies 29
46006 Valencia
Spain). Contact: [email protected] or [email protected].

2. Our principles

  • No advertising, ever. No ads and no advertising or tracking SDKs, on this website or in the app.
  • We never sell data. Our customers are parents, not advertisers.
  • Data minimisation. We collect only what we need, especially where children are involved. A child profile holds a first name, an age and an avatar picked from our set, nothing more.
  • No account needed on a shared device. If your family uses Habibee on one shared phone or tablet, everything you enter stays on that device (section 5).
  • Family Sync is optional. Only if you turn it on (for example to use Habibee on your child's own phone) is your family's data stored on our server in Germany. Task photos stay there only a few days, reward photos only while the reward uses them (section 6).

3. This website and the waitlist

  • Waitlist: your email address, the language you signed up in, and when you signed up, confirmed and (if so) unsubscribed. To learn which pages work, we also store the page you signed up on, the first page you opened on this site during that visit, the website that linked you to us (its domain only) and any campaign tags in the link (e.g. utm_source), but no IP address. We use double opt-in: you only receive news after you click the confirmation link we email you. Unconfirmed sign-ups are deleted automatically after 7 days.
  • Security: to stop spam and abuse we check waitlist sign-ups and founding families applications with Cloudflare Turnstile (which processes your IP address and browser signals to tell people from bots) and briefly count requests per IP address.
  • Server logs: our web server records IP address, time, requested page and browser type for security and troubleshooting, kept for at most 14 days. This also applies to requests the app sends to our server.
  • Website statistics: we count page views with Umami, which we run on our own server at Hetzner in Germany. It sets no cookies and stores no IP address or other identifier that could single you out; we only see totals such as pages viewed, the referring website, country, browser and device type. It never runs in the app or on pages with personal links (sign-up confirmations, account pages). Legal basis: our legitimate interest in understanding which pages are useful (Art. 6(1)(f) GDPR).
  • Cookies: one first-party session cookie, deleted when you close your browser. It protects forms and remembers the first page you opened on this site during the visit (with the linking website's domain and any campaign tags), so that a sign-up can be credited to that page. It holds no identifier and is never shared. The app store buttons on this site pass only the name of that page (for example blog-morning-routine-for-kids) to Apple or Google as a campaign tag, so their statistics show which pages lead to downloads. No advertising or tracking cookies, and no cookies from anyone else.

Legal bases: your consent for the waitlist (Art. 6(1)(a) GDPR; withdraw anytime via the unsubscribe link in every email); our legitimate interest in keeping the service secure for logs, rate limiting and bot protection (Art. 6(1)(f) GDPR).

4. Who processes data for us

  • netcup GmbH (Karlsruhe, Germany): hosting of this website, its database and the Family Sync server, including task and reward photos, on servers in Nuremberg, Germany.
  • Hetzner Online GmbH (Gunzenhausen, Germany): hosting of the server that runs our cookieless website statistics (Umami), in Falkenstein, Germany.
  • Resend (Resend, Inc., USA; our emails are sent from its EU region in Ireland): delivery of our emails: waitlist confirmations and news, sign-in codes and account emails (email address and message content only).
  • Cloudflare (Cloudflare, Inc., USA): DNS, content delivery and protection against attacks for habibee.app, which also carries the app's connection to our server; Turnstile bot protection on the waitlist form.
  • RevenueCat (RevenueCat, Inc., USA): manages in-app purchases: which plan you bought, when it renews or ends, a purchase ID from Apple or Google and, if you have an account, your Habibee account ID. It never sees your payment details.
  • Expo (650 Industries, Inc., USA): delivers app updates. When the app checks for an update, Expo processes the device's IP address, platform, app version and a random installation ID that is created by the app and not linked to you or your family.
  • Sentry (Functional Software, Inc., USA; data stored in its EU region in Frankfurt, Germany): crash reports from the app. A report holds the error and where in the app's code it happened, the app version, device model and operating system. We set it up so reports leave out names, photos, task and reward texts, email addresses and IP addresses.
  • Apple and Google: the App Store and Google Play handle downloads and payments as independent controllers under their own privacy policies. On Family Sync devices where you allow notifications, Apple Push Notification service and Google Firebase Cloud Messaging deliver our push notifications (see section 6). Reminders the app schedules on the device itself never leave it.

We have data processing agreements with these providers. Transfers to the USA rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

5. The Habibee app on a shared device (no account)

Without an account, your family's data (children's first names, ages, tasks, rewards, honey, task photos and reward photos) is stored only on your device and is not sent to us. Children never enter an email address, surname, birth date, phone number or location; child profiles are created and controlled by a parent. Task and reward photos are resized and their metadata (such as location) is removed when they are taken. Settings → Delete all data in the app, or removing the app, erases everything on the device.

Even without an account, the app makes a few technical requests that contain no family data: it loads a few settings from habibee.app (such as the links to the app stores), downloads app updates from Expo, and handles purchases through the App Store or Google Play and RevenueCat (section 4). If the app crashes, it sends a crash report to Sentry (section 4). We never see payment details.

6. Family Sync and accounts (optional)

Family Sync connects your family's devices: a child's own phone or tablet, or a second grown-up's device. It needs an account. If you don't create one, nothing in this section applies to you.

What we process

  • Your account: your email address and language. There is no password: you sign in with a 6-digit code we email you. If you choose Sign in with Apple or Google once we offer it, we receive the email address (which may be an Apple relay address) and an account ID from them.
  • Your family's data: the app saves every change as a small record (a task added, done or approved, honey earned, a reward asked for) with the time it happened and the device it came from. These records contain children's first names, ages and avatar choices, the names of tasks and rewards (including ones you type yourself), notes and reasons you add, and the family's honey and reward history. We never ask for a child's surname, birthday, email address, phone number, location or a photo of the child as an avatar.
  • Task photos: with Family Sync on, a photo taken on one device is uploaded so the other family devices can show it for review. It is resized and stripped of metadata (such as location) before upload. Only your family's devices can fetch it, through links that expire after 15 minutes; it is never public.
  • Reward photos: if a grown-up takes a photo for a reward, Family Sync uploads it so the family's other devices, including a child's own phone or tablet, can show it in The Hive. It is resized and stripped of metadata (such as location) before upload. Only your family's devices can fetch it, through links that expire after 15 minutes; it is never public.
  • Devices: for each connected device, a random device ID, whether it is a grown-up's or a child's device (and for which child), platform, app version, language, a device name so you can tell devices apart, and when it was last used. If you allow notifications, also its push token.
  • Sign-in and pairing: access tokens for each signed-in device, the one-time sign-in codes, and the codes and QR codes used to connect a device. We store these only as hashes.
  • Premium status: whether your account or family has Premium or a trial, until when, and which plan, as reported to us by RevenueCat.
  • Technical data: IP addresses in server logs (at most 14 days) and short-lived counters to limit repeated requests.

Why we process it, and on what legal basis

  • To provide your account and Family Sync (keeping your family's devices in step, showing task photos for review and reward photos in The Hive, sending sign-in codes and notifications, and applying your plan): performance of our contract with you (Art. 6(1)(b) GDPR).
  • To keep the service secure and prevent abuse (logs, rate limits, hashed codes): our legitimate interest (Art. 6(1)(f) GDPR).

Children's data

A child's data is entered and controlled by a parent or legal guardian. We process it only to provide Habibee to your family, never for advertising, profiling or sale. We don't offer Habibee to children directly, so children are never asked for consent themselves (Art. 8 GDPR): children can't create an account, and a child's device is only connected when a signed-in grown-up shows a pairing code or QR code. By pairing a device, you confirm that you have parental responsibility for the child and agree to the processing described here.

For families in the USA (COPPA): we do not knowingly collect personal information directly from a child without a parent's involvement. The child's device only sends what the child does in Habibee (tasks done, rewards asked for and task photos) to the child's own family. As a parent you can review all of it in the app, change or delete it, stop further collection at any time by disconnecting the child's device or removing the child, and ask us to delete it by writing to [email protected].

Where your data is

Family Sync data and photos are stored on our server at netcup in Nuremberg, Germany. Emails are sent through Resend, and all connections run through Cloudflare's network (section 4). If you allow notifications on a Family Sync device, Apple (iPhone, iPad) or Google (Android) receive the device's push token and the notification text, which can include a child's first name, for example "Mia finished a task".

How long we keep it

  • Account, family data and device records: until you delete your account. Removing a child, task or reward in the app hides it everywhere, but it stays in your family's history on our server until the account is deleted; if you want one child's data removed sooner, write to us.
  • Task photos: deleted from our server 7 days after the task is reviewed, and never kept longer than 10 days after upload. The copies on your devices stay until you delete them.
  • Reward photos: kept on our server while the reward uses them, and deleted when you change or remove the photo, remove the reward or the child, or delete your account. A photo that was uploaded but never used is deleted after 10 days. The copies on your devices stay until you delete them.
  • Sign-in codes and pairing codes: valid for 10 minutes, the records are deleted a day later.
  • When you delete your account, we delete it immediately (section 9). Our database backups are overwritten within 30 days, so deleted data also disappears from them within 30 days.
  • Apple, Google and RevenueCat keep purchase records under their own policies and legal duties, such as tax law.

Security

All connections are encrypted in transit (TLS). Access tokens, sign-in codes and pairing codes are stored only as hashes, so they couldn't be used even if someone copied our database. Photo links are signed and expire after 15 minutes. We keep email addresses, codes, tokens and family data out of our logs, and access to the server is limited to the operator, with key-based login only.

7. Retention (website and waitlist)

  • Unconfirmed waitlist sign-ups: deleted after 7 days
  • Confirmed waitlist emails: until you unsubscribe, and at most 12 months after the app launches
  • Server logs: at most 14 days
  • Founding families beta: 90 days after the program ends (section 8)

8. The founding families beta program

If you apply at habibee.app/founding to test Habibee early, we process the following. If you don't take part, nothing in this section applies to you, except in-app feedback, which anyone can send.

  • Your application: your email address, the language you applied in, which devices you'll test on (iPhone, iPad, Android), for Android the email address of your Google account, how many children will use Habibee and their ages (no names), the app language you prefer, and when you applied and confirmed. Like for the waitlist, we also store the page you applied on, the first page you opened on this site during that visit, the website that linked you to us (its domain only) and any campaign tags in the link (e.g. utm_source), but no IP address. We use double opt-in like the waitlist; unconfirmed applications are deleted after 7 days.
  • Tester code and check-ins: once you confirm, you get a tester code. If you enter it in the app, the app tells our server which days it was opened and whether it was used that day (yes or no; for example, a task done or checked, or a reward handled), plus the platform and app version. It never sends what was done: no children's names, tasks, rewards or photos. If your family also uses Family Sync with the same email address, we count the days on which your family's synced records show use in the same way.
  • Feedback: what you type in the app under Settings → Help & feedback, an optional star rating, and the app version, platform, language and screen it was sent from. With a tester code it is linked to your application; without one it isn't linked to anyone.
  • Test versions: to give you access, we may add your email address to our TestFlight tester list (Apple) and, on Android, your Google account email to our Google Play testing list (Google). Apple and Google process these under their own privacy policies.

Why: to run the test (inviting you, sending you the test emails, seeing who has used Habibee on enough days, and giving lifetime Premium to families who qualify) and to improve Habibee from your feedback. Legal basis: the test arrangement you enter by applying (Art. 6(1)(b) GDPR); for feedback without a tester code, our legitimate interest in improving the app (Art. 6(1)(f) GDPR).

How long: we delete your application, tester code, check-ins and the link between you and your feedback 90 days after the program ends. If you keep a Habibee account, we keep only what's needed to give you lifetime Premium with that account. You can leave at any time with the link in our emails, and ask us to delete everything sooner by writing to [email protected].

9. Your rights and deleting your account

You can access, correct, export or erase your data, object to processing and withdraw consent at any time. Parents exercise these rights for their children. Write to [email protected]; we answer within 30 days. You may also complain to your data protection supervisory authority.

You can delete your account yourself at any time: in the app (grown-up area → Settings) or at habibee.app/account/delete. Deletion is immediate and permanent: we delete your account, your devices' sign-ins and, if you are the only grown-up in the family, your family's data, photos and connected devices on our server, and send you a confirmation email. If another grown-up shares the family, the family stays with them. Data on your phones and tablets stays until you delete it in the app or remove the app. Deleting your account doesn't cancel a subscription; do that in your App Store or Google Play settings.

10. Children

The waitlist and accounts are for parents and other adults. We do not knowingly collect personal data from children through this website; if you believe a child signed up, contact us and we will delete it. In the app, children's data is handled as described in sections 5 and 6.

11. Changes

We will announce material changes on this page, for waitlist members by email and, once the app is out, in the app.