Privacy policy
This policy explains what personal data Tasnna processes, an Android app that families download from Google Play, together with its web version (app.tasnna.com) that uses the same account, for what purpose, and what rights you have. Tasnna operates in Spain, the United States, Argentina, Mexico, Colombia, Chile, Peru, Uruguay, Paraguay, Bolivia, Costa Rica, Guatemala, Honduras, Nicaragua and the Dominican Republic. We apply the General Data Protection Regulation (GDPR) and Spain's Organic Law 3/2018 on data protection, Argentina's Law 25.326, and the personal data protection law in force in each of the other countries where we operate (the detail, country by country, is in the children's privacy policy). In Bolivia, Guatemala and Honduras there is today no general data protection law applicable to the private sector; in those countries we apply the same criterion as everywhere else as our own standard: consent from the responsible adult and rights of access, rectification and erasure over the data the app processes.
1. What data we collect
| Data | Source and use |
|---|---|
| Adult's email and password | You provide them when you sign up. The password is stored hashed; we never see it in the clear. |
| Children's nicknames | Parents choose a nickname (the real name is not needed) to create the profiles. We do not ask for minors' legal name, surname, email or phone. |
| Family activity | Chores, approvals, savings goals, rewards, streaks, achievements, virtual balances, wallet movements and balance transfers between siblings that the family records in the app. |
| Vacation periods | If you mark vacation days for a child, we store those dates so their streak is not broken and no consequences apply for chores that expire during that period. |
| Deductions (behavior) | Parents can record behavior deductions for a minor, with a reason, a description and a virtual penalty (money or XP). They are only visible inside the family. |
| Proof photos (optional) | If a child attaches a photo when finishing a chore, it is stored so the Parents can review it. The photo is deleted automatically the moment the chore is approved; it is not kept permanently. |
| Access codes and PIN | Invitation codes and the family and children's PIN, stored hashed, to protect access to the account and to sensitive actions. |
| Notification subscription | Technical device identifier (push token) to send you alerts if you switch them on. |
| Child comment on a chore (optional) | When finishing a chore, the child can add a comment that the Parents can see. |
| Contact form (optional) | If you write to us from the website, we store your email and your message and, in the contact form, minimal technical data (the browser type and an irreversible fingerprint of your IP to curb abuse). We use them only to reply to you. |
| Connection data | When you use the website or the app, our providers receive your IP address and technical connection data. We also keep for one day a per-IP counter to curb abuse in sign-up and sign-in. |
| Support reports (optional) | If you send a bug report or a suggestion, we store your description and, if you attach one, a photo, so we can help you. |
| How you heard about us (optional) | When you sign up we ask where you heard about Tasnna (for example, social media, a friend or relative, an AI). You pick an option from a list; if you pick "Other", you can type free text of up to 120 characters (please do not include personal data). If you installed the app from Google Play, we also store the campaign label you arrived at the store with (for example, "website, home page button" or "Play search"). We use it only to know which channels work. |
| Use of the welcome screens | We record whether you saw, finished or skipped each welcome screen (tutorial, first-run guide, guided tour, Tasnna Pro introduction) and the two questions we ask only once ("Did you find a bug?" and "Do you like Tasnna?"), whether you shared your child's invitation link, and when they marked their first chore. It tells us whether those screens help and at which step people stop, and keeps us from asking you something you already answered. We do not store or analyze any other screen in the app. |
| Technical session data | Session and device tokens, stored securely on the device, to keep the account signed in. |
We do not collect location data, contacts or browsing history. We do not show ads and we do not use advertising trackers.
2. Minors' data
Parents can edit (the nickname) or delete their children's data at any time from the app. Balances and rewards in the app are virtual and do not represent real money; see the Terms and conditions. If you use Tasnna from the United States, see also our Children's privacy policy, which details how we comply with the Children's Online Privacy Protection Act (COPPA).
3. What we use the data for (legal basis)
- Providing the service (performance of a contract): syncing chores and profiles between the family's devices.
- Push notifications and account emails (consent): chore alerts, verification codes and password recovery. You can switch notifications off whenever you want.
- Security and website statistics (legitimate interest): preventing unauthorized access and abuse, and measuring website use in aggregate with Umami, including how often its buttons are pressed (for example, the one to install the app).
We do not sell your data and we do not share it with third parties for advertising.
4. Providers that process data on our behalf
- Supabase: database and authentication. Each family can only reach its own data through row level security rules.
- Cloudflare: hosting of the website and of the web app (app.tasnna.com). It receives the IP address and technical data of each visit.
- Resend: sending transactional emails (verification codes, password recovery).
- Expo (Expo Application Services): intermediate delivery service for push notifications. It receives the device token and the text of the alert (for example "Ana finished a chore") and forwards it to Firebase Cloud Messaging. It is only used if you switch notifications on.
- Google Firebase Cloud Messaging: final delivery of the notification to the phone. It only processes the technical device identifier (push token) so alerts can reach you; it does not access your family's content. It is only used if you switch notifications on.
- Google: only if you choose to sign in with Google (OAuth); we receive your basic Google email.
- Google Play Integrity: checks that the installed app is the original one from Google Play. It processes technical device data.
- Your browser's notification services (Google, Mozilla or Apple, depending on the browser): deliver the web app's alerts if you switch them on. They receive your browser's technical identifier and the text of the alert.
- Umami: usage analytics for the tasnna.com website (not the app), designed not to identify people. It does not use cookies.
5. International transfers
Your data is stored on servers in the European Union (Ireland). Even so, some of the providers above are US companies and certain processing may involve a transfer of data outside the European Economic Area:
- Google (Firebase Cloud Messaging and sign in with Google): United States.
- Expo (push notification delivery): United States.
- Resend (verification and recovery emails): United States.
- Supabase (database and authentication): the data is in the European Union, but the company is American and its staff may access it from outside the European Economic Area: United States.
- Cloudflare (hosting and delivery network for the website): United States.
- Umami (website analytics, cloud service): United States.
- Google Play Integrity and browser notification services: United States.
These transfers rely on the Standard Contractual Clauses approved by the European Commission and, where the provider has certified, on the EU-U.S. Data Privacy Framework.
6. How long we keep the data
- Your family's data is kept while the account is active.
- Automatic cleanup of old data: proof photos are deleted the moment the chore is approved (if it is rejected or nobody resolves it, at the latest after 24 hours); unread notifications after 45 days (read ones after 15); activity history after 30 days with Tasnna Pro or 7 on the free plan; wallet movements after 180 days; and deductions already applied after 90 days.
- Record of adult activity (who added or removed balance, who changed the PIN, who deleted a profile): kept for 7 days and then deleted automatically. It exists so the adults in the family can see what just happened, not to keep a long history.
- When you link a new phone to a profile, that profile's previous link is removed right away: only one device per profile has access.
- Contact form messages: kept for the time needed to handle your request and until you ask for their erasure.
- If you delete your account, the family, the profiles (including the other parent's account, if there is one; the app warns about it before you confirm) and all associated data are deleted, as well as the contact messages sent with your account email.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, withdraw any consent you have given, and ask not to be subject to decisions based solely on automated processing (we make none), by writing to info@tasnna.com. We reply within one month. From the app, under Settings → Privacy, you can download your data and each child's in JSON format, and delete a profile or your whole account without waiting for a reply. You also have the right to complain to the data protection authority of your country (in Spain, the Spanish Data Protection Agency, aepd.es).
8. Storage on the device
Tasnna stores data in the device storage for technical purposes only: keeping your session signed in and keeping the app's data available offline. Session tokens are stored securely (the system's encrypted storage). The app does not use cookies or third-party analytics.
The tasnna.com website uses a traffic analyzer (Umami), designed not to identify people. It does not use cookies, although the website keeps two technical preferences in your browser's local storage (your language and whether you have seen the Tasnna Pro offer). It does not know who you are and does not cross-reference it with your Tasnna account.
The web version of the app (app.tasnna.com) uses the same account and keeps your session and the family's data in the browser so it can work offline. If you switch alerts on, it uses a service worker to receive them. You can clear all of that from your browser settings or by signing out.
9. Security
All communication travels encrypted (HTTPS). Passwords are stored with a secure hash and access to the data is restricted by family. No system is infallible: if we detect a breach affecting your data, we will notify you as the law requires.
10. Changes to this policy
If we change this policy in a meaningful way, we will announce it in the app before the change takes effect.
Data controller
The data controller is Mariana Lis Hinojosa Jury, the natural person behind Tasnna.
Contact for any privacy matter, and to exercise your rights: info@tasnna.com.