Privacy Policy

Last updated: 20 October 2026

Controller

Marlon Bosse, Sophie-Scholl-Weg 8, 21684 Stade, Germany
Email: mobdev@tuta.com

What the app does

Token System lets families and caregivers manage token balances, reward goals and allowances for children. It contains no ads, no analytics and no tracking SDKs.

Local mode (no account)

Children's first names, token rules, balances and history stay on your device. We receive nothing. Uninstalling the app or clearing its data deletes everything.

Sync mode (optional)

If you choose to sync, we store the following in a Supabase database (primary region: Ireland, EU):

• an account identifier (an anonymous ID, or, if you sign in with Google, your Google account ID plus the name and email address Google provides)
• family name, children's first names, token types and rules (including optional goal labels), balances, history of earnings and redemptions (timestamps, which parent booked, and the optional short free-text reason you enter, up to 40 characters, e.g. "YouTube" or "helped cooking")
• a list of frequently used reasons per family (up to 30 labels) so you can reuse them
• invitation codes for the QR code (valid for 10 minutes, single use)
• invitations by Google address: if you invite someone by email address, we store the address you enter (the invited person's Google address) together with your account and the family until the invitation is accepted, declined or expired (7 days). Expired invitations are deleted automatically. We do not send any email.

Purpose: providing the sync and backup features you request (Art. 6(1)(b) GDPR). Children's names and free-text reasons are entered by the parent; you may use nicknames and should avoid sensitive details. For invitations you decide to enter another person's address; please only invite people who expect it.

We also compute aggregate operating statistics from the database (for example the number of families, how many were active in the last 7 or 30 days, and bookings per day). These are counts only and contain no names, email addresses or identifiers; they are used to run the service and improve the app (legitimate interest, Art. 6(1)(f) GDPR). The app itself contains no analytics or tracking.

Crash reports and feedback

After a crash, Settings offers to send a report by email. The report (app version, Android version, device model, technical error text) stays on your device and is only sent when you tap send in your own mail app. Feedback you send by email is used to answer you and is deleted when no longer needed. Google Play shows the developer anonymous crash and usage statistics from devices that opted in to share them with Google; we do not control this data collection.

Processors

• Supabase (database and authentication hosting)
• Google, only if you choose Google sign-in. The QR scanner uses Google Play Services and works on the device.

Retention

• History (earnings, redemptions, resets) older than 400 days is deleted automatically.
• Expired invitations (QR and email) are deleted automatically one day after expiry.
• Families inactive for 180 days whose members are all anonymous accounts are deleted.
• Anonymous accounts without a family older than 30 days are deleted.

Deleting your data and your rights

In the app: Settings → "Delete account and data" deletes your account and, if you are the last parent, the whole family including children's data and kid-tablet access. You can also email mobdev@tuta.com; we will delete your data within 30 days. You have the rights of access, rectification, erasure, restriction, portability and objection, and may lodge a complaint with a data protection authority (in Lower Saxony: LfD Niedersachsen).

Children

The app is operated by parents. Children only see their own balances on a view-only kid tablet. We do not collect data directly from children and offer no advertising or social features.

Security

Data is transmitted over HTTPS. Database access rules restrict every account to its own family; kid accounts are read-only.

Changes

If data handling changes we will update this page and its date.