Privacy Policy

The data controller is Jonatan Ortega González (devlicius), based in Spain. For any question about your data, write to devlicius.online@gmail.com.

If you don't sign in, everything you enter is stored only on your device, in a local database:

• Your kids: name, colour and date of birth (or age).
• Their activities: category, days and times, place, cost and enrolment fee, course dates, what to bring, notes and, if you add them, the name and phone number of a contact (coach, school…).
• One-off events (trips, birthdays, doctor…), the adults who take and pick up (only the name you type), holidays, and changes to a single day.
• Your preferences: language, theme, reminders.

Without a plan, none of this is sent to any server; it only leaves the phone if you export a copy and choose to share it.

CuandoTeToca is used by adults (parents, grandparents, carers) to organise children's activities. You enter the children's data and it is only used to make the app work: show the schedule, remind you and, with a plan, share it with the people you invite.

• We don't use it for advertising or profiling, and it is never sent to the ad network.
• We recommend entering only what is needed (a first name or nickname is enough).

You can create an account with your email and password, with Google or with Apple. We store:

• Your email, an internal account ID and the sign-in method. With Google or Apple, also the name they provide.
• The name shown to your family members (your name or the part of your email before the @) and the app language, to send you notices in your language.

Sign-in is handled by Firebase Authentication (Google). Having an account does not upload your family's data: that only happens with a plan.

With an active plan (Individual, Couple or Family), the data in "Without an account" is uploaded to our cloud and kept in sync across your family's phones. It is stored in Cloud Firestore (Google Cloud), on servers in the European Union (Belgium). Each phone's preferences and each person's chosen reminders are not uploaded.

• The plan is paid by the family's owner. With the Couple (2 people) and Family (up to 5) plans, the owner can invite others with a code that expires in 48 hours.
• Family members can see and edit all of the family's data, and each sees the others' name and email. Only members can read it.
• Any member can leave the family (keeping a copy on their phone or not), and the owner can remove someone. If the owner deletes their account, the family is deleted for everyone; each person keeps what is on their phone.
• If the plan ends, the family becomes read-only. 12 months after the owner's plan ends, the cloud copy is deleted automatically. Data on the phones is not touched.
• Changes to a single day and holidays are deleted from the cloud 30 days after their date.

If someone else in your family changes something in the coming days (for example "No swimming today" or who picks up a child), our server sends you a notification with their name and the change. For this we store your devices' notification token (Firebase Cloud Messaging), the platform, the language and your preferences (whether you want them and for which kids). We also keep a small technical record so you get no more than one notice every 10 minutes, deleted together with the family.

You can turn them off in Settings → Shared family or in your phone's notification settings.

Payments are charged by Apple (App Store) or Google (Google Play); we never see your card. We use RevenueCat to know which plan you have: it receives your internal account ID and the store's purchase receipts, but not your email or your family's data. We store which plan you have and until when.

If neither you nor your family has an active plan, the app shows a Google AdMob banner.

• We request non-personalised ads suitable for all audiences. In the European Economic Area, the UK and Switzerland, before requesting any ad the app shows Google's consent form; you can change your choice in Settings → Ad privacy.
• Even when non-personalised, Google may use limited technical data (for example, to count impressions and prevent fraud).
• On iOS we don't ask for tracking permission (App Tracking Transparency), so Apple's advertising identifier is not used.
• No information about your kids or their activities is ever passed to AdMob.
• With an active plan, yours or your family's, no ads are shown.

If you add the widget to your home screen, it shows today's (or tomorrow's) activities. The data is read from the phone itself and does not leave it, but anyone who sees your screen can see it. You can remove the widget at any time.

Communications are encrypted (HTTPS). Our database rules prevent anyone from reading a family's data except its members. The app uses Firebase App Check (Play Integrity on Android, App Attest/DeviceCheck on iOS), which sends Google proof that the request comes from the genuine app, with no additional personal data.

• Performance of a contract (Art. 6.1.b GDPR) for the account, the cloud, the shared family, notices between members and subscriptions.
• Your consent (Art. 6.1.a) for ads and notifications, given through Google's form and the phone permission, which you can withdraw at any time.
• Our legitimate interest (Art. 6.1.f) in protecting the service against abuse (App Check and attempt limits on invitation codes).

We use these providers, which process data on our behalf:

• Google: Firebase Authentication, Cloud Firestore, Cloud Functions, Cloud Tasks, Firebase Cloud Messaging, App Check and AdMob.
• RevenueCat, Inc.: subscription status.

Apple and Google, as stores, process payments as independent controllers. Some of these providers may process data outside the European Economic Area (for example, in the United States). In that case the transfer relies on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

• Data on the phone: until you delete it or uninstall the app.
• Account: until you delete it.
• Cloud copy: while the family's owner has a plan and up to 12 months after it ends.
• Single-day changes and holidays in the cloud: 30 days after their date.
• Invitation codes: 48 hours at most. Redeem attempt records: 1 hour.

You can access, rectify and erase your data, object to or restrict its processing, request its portability and withdraw your consent at any time. Most of these you can exercise in the app itself (Settings → Export / Import gives you a full copy). For the rest, write to devlicius.online@gmail.com. If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

You can export all data to a file, add activities to your calendar (.ics) and get the expenses summary as PDF or CSV. They are created on your device and you decide who to share them with. The app also keeps an automatic copy on the phone itself. Importing a copy replaces the app's data (and, with a plan, the family's data in the cloud).

An activity's Call, WhatsApp and Directions buttons open those apps only when you tap them, with the phone number or place you entered. Rate the app opens the store page. We don't send that information anywhere else.

The app is meant for adults and is not directed at children under 14, who must not create an account. Children's data is entered by their parents or carers. If you believe a child has given us data, write to us and we will delete it.

• Delete the account: in Settings → Your account → Delete account. Your account and your cloud data are deleted at once; if you are the owner, the family too, for all its members. Data on the phone is kept.
• Delete only the data: Settings → Delete all data deletes the phone's data and, if you are an owner with a plan, the family's cloud data too.

More details on the account deletion page.

We may update this policy. The current version will be published at this same address and, if the change is significant, we will tell you in the app.