Privacy policy

Who is responsible for your data

The controller is Rafał Wichowski, a sole trader operating as RAWIC - Rafał Wichowski. For anything about your data, email [email protected].

Parent account

You sign in with your email address, and we send a code to it. The account keeps a copy of your family’s data on a server, so you can restore it on a new phone and pair your child’s phone. We store:

• your email address,
• your children’s names or nicknames,
• missions, their steps and schedules, and requests,
• stars, rewards, approvals and the friend’s progress,
• family and phone identifiers, the time zone and when things changed.

The parent PIN and reward photos stay on the phone.

You pair your child’s phone with a QR code. Your child gives no email or password. Their phone gets a technical account linked to the family. You type the names and mission content. You can use a nickname. Don’t enter your child’s health information.

The account is optional. We process the parent’s data to provide the account service (GDPR Article 6(1)(b)). We process children’s data in our legitimate interest of running the features a parent uses with their child (Article 6(1)(f)).

We show no ads, do no tracking and no profiling. We make no automated decisions about you or your child.

This site and your messages

Cloudflare hosts this site. Like any server, it sees your IP address and request details to deliver the page and protect it from attacks (Article 6(1)(f)). The site uses no cookies or analytics. It saves your language choice in browser storage. Clear the site’s data to remove it.

When you write to us, we use your address and message to reply (Article 6(1)(f)). If you leave your email in the form on this site, we send one email to it on launch day based on your consent (Article 6(1)(a)). One email withdraws your consent.

Who else processes data

We use providers who process data on our behalf:

• Supabase: accounts, sync and the launch-day email list, database in Frankfurt,
• Resend: sending sign-in codes,
• Google (Gmail): the [email protected] mailbox,
• Cloudflare: this site and its protection.

Some of them also process data outside the European Economic Area, including in the US. These transfers are covered by the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework. Ask us and we’ll send you a copy of these safeguards.

We also disclose data to public authorities when the law requires it (Article 6(1)(c)).

How long we keep data

We keep account data until you delete the account. Old mission runs and one-off requests are deleted automatically after 35 days. The history of stars and rewards stays until you delete the account.

We make no database backups, so deleted data can’t come back from a backup. Providers’ technical logs expire under their own rules.

We delete correspondence 12 months after the matter is closed. We keep an address for the launch-day email until we send it or you withdraw consent. If data is needed for a legal duty or a dispute, we keep it as long as the law requires.

How to delete your account

In the parent zone, choose “Usuń konto” (Delete account). We delete the family’s data and its phones’ accounts from the server. Data on that phone stays. To remove it too, also choose “Wyczyść wszystkie dane” (Clear all data). Clearing the phone alone doesn’t delete the account.

You can also email [email protected] from the address you sign in with. Before we delete the account, we check that it’s yours. Don’t send your PIN or sign-in code.

Your rights

You can ask to access, correct, delete, restrict or transfer your data and your child’s data. You can object to processing based on our interest and withdraw consent at any time.

Email [email protected]. We reply within a month. If a request needs more time, we’ll tell you why. You can also complain to Poland’s data protection authority, UODO (uodo.gov.pl), or to the authority where you live.