Flatkin Privacy Policy
Effective date: 29 October 2026.
This policy explains how we process your data on flatkin.app and in the Flatkin apps for iPhone and Android. We want organising money and everyday life with the people at home to feel straightforward, including when it comes to privacy.
Controller and contact
The controller is Tiago Oliver Pinheiro Oliveira, an individual developer in Spain. You can contact tiopioli89@gmail.com with any question about your data or to exercise your rights.
What data we use and why
We receive data you provide, data other members add about your household, and technical data needed to operate the service.
| Data | Why we use it |
|---|---|
| Account: name, email address, profile photo URL, Google identifier and linked authentication data, including tokens supplied by Google, when you use Google to sign in; when you sign in with Apple, the name you authorise on first use, the email you choose to share or a private relay address, a stable user identifier and linked authentication data, including a refresh token when obtained; an anonymous account identifier for guest access. | Recognise you, give you access to your households, let you link a guest account to Apple or Google and manage sign-in authorisations. |
| Sessions and access: session identifiers and tokens, IP address, user agent —information about the browser or app— and session dates. Hosting access and error logs may also contain technical data. | Keep you signed in, resolve issues and protect accounts and the service. |
| Household and members: household name and address if entered, currency, language, time zone, member names, avatars, roles, membership links and invitations. | Create and manage the household and control who can access it. |
| Money: rents, deposits, expenses and their splits, payments, transfers, reimbursements, payment claims and balances. | Keep household accounts, calculate each member's share and display statements. Flatkin records these transactions; it does not need card numbers or banking credentials to do so. |
| Household life: events, absences, chores and rotations, board notes, comments and an activity history with authors and dates. | Coordinate everyday life and keep a useful history for household members. |
| Notifications: device token, platform, language, preferences and links to the session, member and household. | Deliver the household notifications you enable through Expo and, for delivery to the device, Apple Push Notification service (APNs) on iPhone or Google’s Firebase Cloud Messaging on Android. Delivery providers receive the identifiers and message needed for that delivery. Messages may contain details of the activity that triggered them. |
| Google Calendar, if connected: OAuth authorisation, encrypted access and refresh tokens, and the selected calendar's identifier and name. We retrieve your calendar list so you can choose one. | Write, update or delete Flatkin events in the Google calendar you select. Data sent may include the title, dates, household name and assigned person's name. We do not import the content of your other Google Calendar events. |
| Support and reports: the address you email us from, household and note identifiers, your explanation and any files you choose to send. A note-report draft adds only those identifiers, not the note text. | Answer your questions, investigate reports of inappropriate content and handle incidents. Email is sent from the address you choose in your email app. |
| Local board preferences: identifiers of the people whose notes you choose to hide in each household. | Hide their notes from the board and Home on that device. This list stays on the device and is not sent to the server or to the person whose notes you hide. |
Google sign-in takes place through the system browser; Flatkin does not receive your Google password. Guest access creates an anonymous account on the server: it does not mean household data stays only on your phone. Email code sign-in may be offered when an email provider is configured; it is not currently available in production.
On iPhone you can use native Sign in with Apple. Apple provides your name only the first time you authorise sign-in; it does not send it again on later sign-ins. It also provides a stable identifier to recognise you in Flatkin and the email address you choose to share. If you select Hide My Email, we receive Apple’s private relay address rather than your real email. We respect that choice and do not require you to disclose your real email to use this sign-in method. Flatkin does not receive your Apple password. We use this data to provide the service and manage your account, not for advertising tracking.
We need an access identity, including an anonymous one, and certain technical data to provide the service. The household address, Google Calendar connection and notifications are optional. You can use other features without enabling them. The content you provide depends on the features you choose to use.
Who can see household content
Authorised members can access their household's content according to their permissions. Rents and deposits are visible to the administrator and the member they belong to; other members cannot see them. The administrator can also see a member's linked Google email address when it is recorded in their member profile. Keep invitation links safe: whoever uses one can join the household.
If you connect Google Calendar, events sent there are also subject to that calendar's access settings. Disconnecting stops synchronisation but does not itself delete event copies already in Google Calendar.
Legal bases
- Providing the service and performing our contract —GDPR Article 6(1)(b)—: managing your account, sessions and household memberships, and the money, calendar and board features you request. We cannot provide these features without the necessary data.
- Legitimate interests —Article 6(1)(f)—: protecting the service, preventing abuse and resolving incidents through technical logs and request limits. Also retaining necessary shared household history after a member leaves so other members can continue using their accounts and records, taking your rights and the option to replace your name into account. Also answering support enquiries and investigating content reports to help users and protect the people who use Flatkin. You can object to these uses.
- Consent —Article 6(1)(a)—: connecting Google Calendar and enabling notifications. You can withdraw consent by disconnecting Calendar or disabling notifications in Flatkin or device settings. Withdrawal does not affect processing carried out before it.
- Legal obligation —Article 6(1)(c)—: meeting data protection duties and applicable legal requirements, using only the necessary data.
We do not display ads, include analytics or tracking SDKs, or sell or disclose data for marketing. We do not make automated decisions with legal effects or carry out profiling of that kind.
Providers and international transfers
We use Vercel for hosting and server functions, Neon for the Postgres database, Google for Google sign-in, Google Calendar and Firebase Cloud Messaging on Android, Apple for Sign in with Apple and APNs notification delivery on iPhone, and Expo for notification delivery. These providers receive the data needed for authentication, storage or delivery. Sign in with Apple exchanges the data and tokens needed to verify identity, manage authorisation and request revocation. APNs processes delivery identifiers and the notification message. Apple and Google also process data about their respective accounts under their own terms when you use their services.
We also use Google's Gmail to receive and reply to support emails, reports and requests about your data. Google processes the messages, attachments and technical data needed to provide that email service.
Some providers may process data outside the European Economic Area. Where applicable, transfers rely on the European Commission's Standard Contractual Clauses and any necessary additional safeguards. You can request information about recipients, destinations and a copy of the applicable safeguards at tiopioli89@gmail.com.
How long we keep data
We keep your account and the data needed to provide the service while you maintain your account. Household content remains while it forms part of the household history and is needed for members' accounts and organisation, or until it is deleted where appropriate. It does not expire automatically with age.
When you delete your account, the next section applies. Email deletion requests are completed within 30 days. Security logs, rate-limit keys and backups have retention cycles separate from active content. Their duration depends on their purpose and the provider's configuration; an expired session or counter does not guarantee that its record has been erased. We do not promise that every copy disappears immediately or within a fixed 30-day period. You can ask us for the retention period applicable to your data.
If a specific legal obligation requires us to retain data, we limit retention to what is necessary for the required period, with restricted access. We do not claim a general tax or accounting obligation for retaining shared household history: it remains so other members can continue using their records.
Your rights
You can request access and a copy of your data, correction, erasure, restriction of processing, object to processing based on legitimate interests, and request portability where applicable. You can also withdraw consent at any time.
Contact tiopioli89@gmail.com. We will ask only for the information needed to verify that the data belongs to you. We normally respond within one month; if complexity requires a lawful extension, we will explain why within that first month. Email requests to delete an account are completed within 30 days.
You can lodge a complaint with the Spanish Data Protection Agency (AEPD), particularly if you believe we have not properly addressed your rights. You may also contact the competent data protection authority where you live.
Deleting your account
In the app, open Settings › Account › Delete account and confirm deletion. If you're signed in and have no household, tap Delete my account on the screen shown when you enter the app. You can also request deletion by emailing tiopioli89@gmail.com from your account's email address. If you're a guest or can no longer access that email, contact us so we can verify the account another way.
We delete your account, sessions, linked Apple or Google sign-in records, notification tokens and household access memberships. If you linked Apple, after deleting the account from active systems we attempt to request revocation of access from Apple, provided we have a token and the necessary configuration. The request may fail or may not be made; this does not undo deletion of your Flatkin account. You can check and remove the authorisation in your Apple Account settings, as explained on the account deletion page. This does not delete your Apple Account or Google account. Households with no other users are deleted entirely. If you connected the household to your Google Calendar, or were its only administrator, that connection is removed.
In households with other members, the board notes and comments you wrote are deleted with your account. Other records you created, such as expenses, payments, transfers and calendar events, remain in the history with your display name because others depend on them for their accounts and organisation. You can ask by email for your name to be replaced in that history. Records remain for as long as they are needed for that history, without a fixed automatic deletion period; this does not limit your right to request erasure of data that is no longer necessary.
If you were the only administrator of a household with other members, the household continues working, but nobody will be able to change administrator-only settings.
See the full steps and effects in Delete your Flatkin account.
Children
Flatkin is for people aged 16 and over and is not directed at children under 16. If you believe someone below that age has provided personal data, contact us so we can review it and take action.
Changes to this policy
We will publish updates on this page with their effective date. If a change materially affects how we use your data, we will notify you through an appropriate channel. Where fresh consent is needed, we will request it before starting that processing.