Privacy at TidyWin

Your household’s information should help your household. Here is what TidyWin uses, who can see it, and how to stay in control.

Last updated: 28 September 2026

1. Who is responsible?

AZEEVA, EVGENIIA
Krechtenbroeklaan 50, 1640 Sint-Genesius-Rode, Belgium

This operator is responsible for TidyWin’s handling of personal information. Contact support@fancy-arty.com for app support, privacy questions or a rights request. This notice covers the TidyWin iOS app and this website.

2. Information used by TidyWin

Account and sign-in

Your email address, account identifier, authentication records and session information let you sign in, confirm your email, recover access and protect your account. Passwords are handled by the authentication service; support does not need your password or verification codes.

Household and profiles

Household names, member names or nicknames, roles, age-group labels, invitations, access requests, profile colours and optional photos. Information can be entered by you or another household member with permission to manage the family.

Tasks and progress

Task names and descriptions, schedules, assignments, completion dates, participation, approval records, optional proof photos, points, weekly history, rewards and household settings. A household time zone sets the calendar; it is not GPS tracking.

Device features

The app keeps settings, sign-in state and cached information on the device. Widgets can show selected household progress or tasks. Local reminders use iOS notification permission. Information visible on your home or lock screen may be seen by other people with access to the device.

Support messages

Your reply email, topic and message, plus any situation details or screenshot you choose to send. The app shows optional app version/build, environment, iOS version and device type. Account, family and member references are off by default. On the website you may enter an app version and family reference yourself. Browser diagnostics are not attached to the form.

Service and security records

Hosting and authentication providers process technical requests, which can include IP addresses, timestamps and error information. TidyWin also keeps operational records needed to diagnose failed weekly closes or cleanup. Feedback abuse controls store request identifiers, timestamps and keyed hashes instead of message text, email addresses or screenshots.

Email and authentication information are necessary for a separate login. Shared-device profiles do not each need their own email account. You choose your profile image and support attachments. Your household may require a photo for a particular task; ask a household adult to change that task’s verification setting if needed.

Please avoid putting passwords, financial or health information, precise addresses, or unnecessary details about children in task names, photos or support messages.

3. Why information is used

• Provide the service: create and secure an adult account, connect a household, synchronise tasks, show progress, calculate points and administer household rewards. Where applicable, this processing is necessary to provide the service requested by the adult account holder.
• Operate and protect TidyWin: investigate faults, prevent misuse, limit support spam and maintain reliable account and data access. Where applicable, the legal basis is a legitimate interest in running a safe service, balanced against the people affected, especially children.
• Respond to you: answer support and privacy requests using the details needed to understand the request. Optional attachments and references are selected and reviewed before sending. Where applicable, the basis is providing requested account support or the legitimate interest in answering enquiries, subject to the same balancing requirement. Processing a support request is not permission to send marketing.
• Meet legal duties: handle rights requests, required disclosures and other applicable obligations. Where a separate consent is required, it must be requested for that purpose; this notice or continued app use is not blanket consent.

Household scoring and reward selection use the app’s rules and the household’s settings and recorded activity. They are household game features, not credit, employment, insurance or other legally significant eligibility decisions. If a result is wrong, contact a household adult or support with the relevant example.

4. Who can see information?

Your household: authorised members see the family information needed for shared activities. Adults have additional management and approval controls. On a shared device, switching to a child profile changes the app experience while the adult account remains signed in; it is not a separate authenticated account. Keep your device and parent controls secure.

Service providers: Supabase provides authentication, database, file storage and server functions. Resend sends configured account emails and feedback to the support inbox. GitLab Pages hosts this website. The support mailbox provider processes messages delivered to the inbox. Authorised operators may access information when needed to run the service or investigate a specific request. Provider access, retention and international-transfer arrangements must match the deployed service.

Providers may operate in countries different from yours. A database’s selected region does not mean that all provider operations or email processing stay in that region. Where European transfer rules apply, the operator must have the required processing agreements and applicable transfer safeguards, such as an adequacy decision or standard contractual clauses. Contact support for information about the arrangements applicable to your data.

Provider information: Supabase privacy, Resend privacy, and GitLab privacy. These notices do not replace TidyWin’s responsibilities.

Sharing you choose: exporting a share card or sending a screenshot can create a copy outside TidyWin. The chosen recipient and service control that copy. We do not sell household data or use it for targeted advertising. A disclosure required by law is handled separately from everyday household sharing.

5. Photos, permissions and security

Profile photos and task proofs use private storage with authenticated access rules. Private storage is not end-to-end encryption: the service operator and infrastructure providers may have authorised operational access. Use the image picker to select an image. Selecting a photo does not give other household members access to your whole photo library. Support screenshots are resized and redrawn before upload to remove the original image metadata.

Photo use and storage limits

TidyWin is a household-task app, not a photo repository or backup service. Upload images only for profile pictures, task verification or a relevant support request. Keep your own copies of any images you want to retain.

To manage storage costs, maintain reliable service and prevent misuse, we may introduce or adjust reasonable limits on photo uploads and storage. These may include the number of photos an account or household can upload per week, individual file size, total storage and how long photos remain available.

Any applicable allowance, who it applies to, when it resets and any photo-expiry rules will be explained in the app before they apply. We will provide reasonable advance notice of material changes that reduce an existing allowance or shorten the availability of stored photos, except where urgent action is needed for security, misuse or legal reasons. Any change remains subject to applicable law and your statutory rights.

Removing a task-proof photo on its own does not remove the recorded completion, awarded points or scoring history. Account or personal-data deletion is a separate process with the consequences described in the deletion guide.

The app communicates with its backend over HTTPS. Access controls limit household data by account and role. No internet service can guarantee perfect security. Keep account credentials private and report suspected unauthorised access to support@fancy-arty.com.

6. Retention and deletion

• Active accounts and households: we retain records while needed to provide the service and useful history to an active household, subject to applicable deletion rights and legal duties. Completing, retiring, restoring or deleting a task is not the same as requesting erasure of a person’s data; historical points can remain.
• Account deletion: choose deletion without a recovery hold, or choose a 30-day recoverable hold. Normal access stops when deletion is requested. Physical removal runs in the background and can be delayed by retries; it is not guaranteed at the exact moment you press Delete.
• Hidden profiles and empty households: eligible records have a 30-day recovery period before scheduled cleanup. Linked accounts and household responsibilities affect what can be removed. See the deletion guide.
• Feedback protection records: metadata older than 25 hours is removed when the next valid submission reserves a send. If no new request arrives, the last bounded set remains until a later submission or operator cleanup.
• Support correspondence: messages and attachments remain in the support mailbox and email-provider systems while needed to resolve the request and any necessary follow-up or legal issue. Account deletion does not automatically erase these separate copies; contact support to request their review or removal.
• Backups and operational logs: separate recovery copies and provider logs may remain after removal from the live service. Their actual rotation periods and any necessary exceptions must be confirmed in the operator’s retention schedule before public launch. A recovery procedure must account for previously completed deletion requests.

7. Your choices and privacy rights

You can edit available profile settings, choose an illustrated avatar, control notifications in iOS, remove optional details from a feedback draft, and use the account-deletion controls. Uninstalling the app does not itself delete the server account or household.

Where GDPR applies, you may request access and a copy, correction, erasure, restriction, portability where applicable, or object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting earlier lawful processing. These rights can have legal limits, including other people’s rights.

Email support@fancy-arty.com with the request and the account email or optional family reference. We may need proportionate information to verify identity or parental authority. Never send your password, PIN or authentication codes. GDPR requests must normally be answered within one month; a permitted extension requires an explanation. You can complain to the data protection authority where you live or work or where the issue occurred. See the European authority directory.

8. Children and household members

Children’s information needs particular care even when an adult creates the profile. Read Children and family privacy for the information a household shares, parental controls and help with a child’s information. A role called Parent, an invitation approval or a parent PIN does not on its own establish legal parental authority or verified consent.

9. Website, tracking and changes

This website adds no advertising, analytics scripts or tracking cookies. Its support form uses local JavaScript to prepare and review a message and submit it. The web host still handles network requests and may keep operational logs. The current app has no advertising identifier collection, cross-app tracking, product-analytics SDK or in-app crash-reporting SDK; platform diagnostics are governed separately by Apple and your device settings.

Updates to this notice will carry a new date. Material changes should be brought to affected users’ attention, and a change requiring fresh consent cannot be authorised merely by updating this page.