Privacy notice

1. Who is responsible?

SiDIT GmbH, Fahrentalstraße 55c, 97261 Güntersleben, Germany, email info@sidit.de, is responsible for processing personal data in ClanDome.

2. What this app does

ClanDome helps families organise tasks, appointments, points, rewards, invitations, avatars, optional task photos and notifications. We process only data needed to provide these features. There is no advertising or third-party analytics. We use Lovable's built-in, cookie-free visitor statistics; it sets no analytics cookies and creates no advertising profiles.

3. Accounts and family membership

Parents use an email-based account. Kid accounts use a family code, username and PIN. Account, profile, family and membership data is processed to provide secure access and separate each family's information. Family data is protected so only authorised members can access it.

Language setting. The app shows text in German or English. Without your own choice it follows your browser's language setting. If you choose a language, we store it in your profile so it applies on all your devices; your browser also remembers the choice locally. Content entered by you or your family is not translated and not sent to translation services.

Sign-in emails. We send confirmation, sign-in and password links via Lovable's email service from the sender address noreply@notify.clandome.app. This processes your email address, the message content and technical delivery information. The links are valid for 24 hours; this validity period is not a retention period.

4. Children's data

Parents create and manage kid profiles. Children only see information intended for their role, including their own tasks and points and the shared family calendar.

5. Tasks, points and rewards

We process task assignments, completion records, confirmations, point transactions, streaks, reward requests, ideas, counterproposals and vouchers. Point changes are recorded as transactions. Points are kept for all family members, including parents.

Subscription data. For each family we store the subscription status (for example trial, active or expired), the end of the free trial, the end of the current subscription period, the chosen plan and, where applicable, a reference from the payment provider. We use this to check whether the family can create and change content. This information is visible to members of the own family and is deleted together with the family.

Responsibilities, weekly plan and swaps. Parents can assign a task to a fixed person, to everyone ("Whoever wants"), to specific people depending on the weekday, or to several people taking turns. For this we store the assignment per weekday or the rotation order. Parents can also assign tasks to themselves or to other parents. If a family member asks to swap one occurrence of a task with another person, we store the request with task, date, requesting and requested person, answer, where applicable a parent's decision, and the respective times. The swap history is visible to those involved and to parents and is kept as part of the task history for as long as the family exists.

Private tasks. Parents can create a task they assign to themselves as "private". It is then visible only to the person who created it, not to the rest of the family. Private tasks are not included in family overviews.

"Who does what?" (optional, off by default). If parents switch this overview on for the family, the app shows within the family how many family tasks each member completed in certain periods. No additional data is collected; existing completions are counted and private tasks are excluded. If parents switch the overview off again, it is no longer shown.

"My day". The start page summarises, for the signed-in person, the tasks, events, open decisions, points and shopping hints visible to them. No additional data is stored for this.

To make page switches faster, the app keeps its own app files (program code, fonts, icons) and the most recently shown family data (e.g. tasks, points, rewards, shopping list, events) in a temporary store – only on your device, separately for each signed-in user and for at most 7 days. Photos and proofs, sign-in data and PINs are not stored there. Signing out, switching to another account and deleting the account erase this temporary store completely. As soon as there is a connection, the current state from the server is always shown.

6. Shopping list

The family can keep a shared shopping list. For each entry we store name, quantity, category, status (open, wish, done), who added or wished for it and who checked it off, and the times. The list is visible to all family members and continuously synchronised between their devices. The app detects quantities and categories itself using fixed rules; entries are not sent to AI or other external services for this.

Children can add items as a wish. A wish only appears on the actual list once a parent accepts it; parents can also decline it. Notifications about new wishes are off by default.

For input suggestions the app stores per family which items were added how often and when last. These statistics are used only within your own family, not analysed across families and not used for advertising. Parents can remove completed entries from the list; the suggestion statistics remain for as long as the family exists and can be removed as part of a deletion request.

7. Calendar

Calendar entries may include titles, dates, times, locations and notes. Optional feeds and downloads can be used with another calendar provider, which then processes copies under its own terms.

8. Photos and files

Avatars and optional task-proof photos are stored privately for the relevant family. Only photograph what is necessary and avoid sensitive details.

9. Push notifications

If enabled, we store a device subscription and preferences. Messages contain only what is needed for the alert, such as a first name, task title or points, and never task photos. Categories include tasks, reviews, rewards, swap requests and – only if switched on – children's shopping wishes.

10. Invitations and sharing

Parent invitations use time-limited, revocable one-time links. Kid device links may include a family code and username, but never a PIN.

11. Service providers and security

We use contracted hosting, database, storage and email-delivery providers. Lovable also sends the sign-in emails (sender domain notify.clandome.app). Access controls, encrypted transmission and family-specific permissions protect the data. Data is not sold.

The project database is located in Europe (Ireland), EU. The database location does not automatically determine where all hosting, support, logging, backup and AI processing takes place. Exclusive processing within the EU is therefore not promised.

12. Retention and deletion

We retain data while needed to provide features or meet legal and security duties. Security records may remain while needed to prevent unauthorised access or duplicate point entries. Backups follow protected overwrite cycles. The shopping list, suggestion statistics, weekly-plan, rotation and swap data are likewise not subject to automatic time-based deletion; they are deleted with the family or removed on request.

Backups: daily encrypted backup with Hetzner Online GmbH (Falkenstein data centre, Germany), kept for up to 30 days; monthly backups for up to 12 months.

If you delete your account, we remove your sign-in account, profile, profile picture, push subscriptions and private tasks. In the shared family history (e.g. who completed or approved a task, booked points or ticked off a shopping item) we replace your name with "Former member" so that the remaining family's point balances and histories stay consistent. If parents delete the family, all family data including children's accounts, photos and profile pictures is deleted. If a child is permanently deleted, we remove the child's login, PIN data, points and histories as well as photos. Deleted data may remain in backups until they are overwritten in the regular cycle; they are accessed only to restore service after a failure.

13. Your rights

Subject to legal requirements, you may request access, correction, deletion, restriction and portability, object to processing, and withdraw consent for the future. Contact info@sidit.de. You may also complain to a data protection authority.

As a parent, you can exercise your right to erasure (Art. 17 GDPR) directly in the app under Family → Data & deletion. There you can also download a copy of your data in machine-readable JSON format (Art. 15 and 20 GDPR). Parents can do this for their children.

14. A short note for kids

Your family uses this app to plan tasks and events. Your parents can see completed tasks, points and rewards. Never share your PIN or secret links. If something worries you, speak to your parents. If you wish for something for the shopping, your parents see your wish and decide whether it goes on the list.

15. Guest access (babysitters, grandparents)

Parents can invite guests such as babysitters or grandparents. Guests have their own account with their own e-mail address; the invitation works once, is valid for 7 days and can only be accepted with exactly that address. We store name, e-mail, role, validity period and the permissions granted.

Guests only see what the parents individually share: today's and tomorrow's events, today's meal plan, the kids' routines for today (read only), family rules, wish lists (with reservations), the family shopping list and an emergency card with phone numbers and explicitly shared info cards. Health details and passwords only appear after a separate release. Points, rewards, private tasks and lists, polls, the family code and other guests are never visible to guests. When access expires or is ended, the server blocks every request immediately.

For parents we log when a guest opened the app and which areas were viewed – without any content. This log is deleted automatically after 90 days. Messages from guests to the parents are kept until the family or the guest account is deleted.

The legal basis is the parents' release as part of organising family life (Art. 6(1)(b) and (f) GDPR); for shared health details the parents' explicit decision (Art. 9(2)(a) GDPR). Guests can download their data and delete their guest account at any time.

16. Changes

We update this notice when features or data processing change. An activity requiring consent will not become permitted merely because this text changes.