Privacy Policy

1. Data controller

The controller of personal data is Rosteo s.r.o., company ID (IČO) 24627615, registered office at Mouchnice 142, 683 33 Mouchnice, Czech Republic, registered in the Commercial Register kept by the Regional Court in Brno, file number C 150751 (the “Controller”).

Contact email: [email protected].

2. What personal data we process

• Account: email, password in hashed form if you register by email, and your Google or Apple account identifier if you sign in with them.
• Parent profile: name, date of birth, role in the family, phone number and interests.
• Family: name, city, description, parenting values, photos and whether the family profile is public.
• Children: first name, month and year of birth, gender, milestones, other details you fill in about the child, and photos.
• Parent entries: energy during the day, emotions, completed exercises and the journal.
• Content you create: the Plan and tasks, events and connection requests to other families.
• Reports: when you report another family in Community, we store which family you reported, when, which parent sent the report and the reason you write.
• Subscription: type and status of the subscription and the store where you bought it. We don't see payment details. Apple or Google processes them.
• Device location: only when you choose, in Community, to search from where you are right now. We use it to calculate the distance to families and events and we don't store it. The next time you open the app, search goes back to your family's city.
• Technical data: device token for push notifications, server logs, and diagnostics of app errors, crashes and performance linked to a random installation identifier.

You enter most of the data yourselves. Parents enter the data about their children. You provide us with the email address of a partner you invite to the family.

3. Why we process data and on what legal basis

• Running the app: account and sign-in, family and children, energy, emotion, exercise and journal entries, the Plan, events, connecting families, searching nearby by the city you enter or by your current location when you ask for it in Community, push notifications, account emails and the subscription. Basis: performance of a contract (Art. 6(1)(b) GDPR). The app cannot be used without this data.
• Public family profile and recommending similar families: we show a public profile to other users. From the family description, values and interests and from the age, gender and other filled-in details of the children, we build a profile that we compare with other public families. This is not automated decision-making with legal or similarly significant effects. Basis: consent (Art. 6(1)(a) GDPR). You withdraw it by hiding the profile in the app, which also deletes the profile used for recommendations.
• Stability and security: error and crash reports, app performance monitoring and server logs. Basis: legitimate interest in a reliable and secure service.
• Reports in Community: we read them so we can deal with inappropriate content and harassment. Basis: legitimate interest in a safe community for families with children.
• Website analytics: consent, see Article 9.
• Handling your GDPR requests: legal obligation (Art. 6(1)(c) GDPR).

4. Who sees your data

• The other parent in your family: family and children's data, the Plan, and your name, email and phone number.
• Other users, if the family profile is public: name, photo, city and approximate distance, description, values, interests and, for children, their age and gender.
• Connected families: additionally the parents' names, emails and phone numbers. A connection is only made once the other family accepts it.
• A family you send a connection request to: your family's name and city and your message.
• Events: all users see an event, its address and the name of the hosting family. The host sees the name, city and number of children of the families interested in the event.

For events, the family name is shown even if the family profile is not public. We never show children's first names to other families, not even to families you connect with. We don't tell a family you report who reported it.

5. Who we share data with

We don't sell personal data or give it to advertising networks. These processors work with it:

• Microsoft (Ireland): hosting, database, storage for photos and the journal, server logs, locating cities and computing the profile for recommending families. Data is stored in the European Union.
• Sentry (USA, data stored in the EU): error reporting and app performance monitoring.
• Expo (USA): push notification delivery, app updates, and crash and performance diagnostics.
• Resend (USA): sending emails.
• RevenueCat (USA): subscription management.
• Google (Ireland): analytics for the rosteo.cz and rosteo.com websites.

Apple and Google, as independent controllers, provide sign-in with their accounts, the sale of subscriptions in the App Store and Google Play, and delivery of notifications to devices.

Data may be transferred to the USA (Sentry, Expo, Resend, RevenueCat and Google). For processors certified under the EU-US Data Privacy Framework, the transfer relies on the European Commission's adequacy decision (Art. 45 GDPR). For the others, it relies on standard contractual clauses (Art. 46 GDPR). We'll give you a copy of these safeguards on request.

6. How long we keep data

• We keep account and family data and content until you delete your account. You can delete journal entries, milestones and tasks at any time. Energy, emotion and exercise entries can't be deleted one by one. They are deleted together with your account.
• We keep reports for as long as we need them to deal with them, even after the account of the reporting family or of the reported family is deleted.
• We keep database backups for 14 days and photo backups for no more than 30 days.
• We keep server logs and app diagnostics for no more than 90 days.
• We keep website analytics data for 2 months.

7. Deleting your account

You delete your account in the app under Settings, in the Family section, by choosing Delete family. If you haven't created a family yet, you delete your account in the family setup guide. Deletion is immediate and cannot be undone.

Deleting removes all data in your profile and your family. Only reports remain (Article 6). The family is also deleted for the other parent, but their account remains.

If you don't have the app installed, email us from your account's email address at [email protected] and we'll delete your account within 30 days at the latest.

Deleting your account does not cancel your subscription. Cancel it in the App Store or Google Play.

8. Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing and to data portability. You can object to processing based on legitimate interest. You can withdraw consent at any time. Processing before the withdrawal remains lawful.

Send your request to [email protected]. We'll reply within one month. For complex requests we may extend this by up to two months, and we'll let you know.

You can lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), www.uoou.cz.

9. Website and cookies

The rosteo.cz website has information about the app and pages for email verification and password reset. Its English version is at rosteo.com. We store your cookie choice in your browser.

We measure traffic on both websites with Google Analytics 4, and only with your consent. After you consent, it stores the _ga cookies, which tell repeat visits apart. We don't run analytics on the email verification and password reset pages. Basis: consent (Art. 6(1)(a) GDPR and Section 89(3) of Act No. 127/2005 Coll., on Electronic Communications).

You can change your consent with the Cookie settings button in the website footer. When you withdraw consent, we delete the _ga cookies. We don't use marketing or advertising cookies.

10. Protecting children

Children don't use the app. Parents enter data about them, and we limit it to the data listed in Article 2. For a child you enter only the month and year of birth, and the app sets the day to the first of the month. Other families see only a child's age and gender. If children are in the family photo, other users will also see it on a public profile.

11. Changes to this policy

We'll tell you about significant changes to this policy in the app or by email. You'll always find the current version on this page.