Privacy policy · Tiny Task

Who is responsible for your data

Tiny Task is operated by Rick-y Media AB, Uppsala, Sweden (hello@tinytask.se). We are the data controller for everything stored in the service.

What we collect

Account: email, optional name, plus an ID from Apple or Google if you sign in via them.
Family data: family name and members, age (optional), color, optional photo, chores, schedules, allowance amounts, payment status.
Push tokens: device tokens for notifications (FCM) per child board. Only stored if you enable push.
Subscription status: product ID and expiry from Apple App Store or Stripe (web).
Usage: anonymous page view / event statistics via Datafast (cookieless, no IP tracking).
Marketing events (with consent only): if you accept marketing cookies, events such as page views, sign-ups and purchases are sent to Meta (Facebook) for ad measurement. Your email is hashed (SHA-256) before transmission. On iOS, IDFA is only shared if you grant the App Tracking Transparency prompt.
Product analytics & session replay (with consent only): we use PostHog to understand how the app is used and debug issues. When you opt in, anonymised session recordings are captured with every input field (passwords, family codes, payment fields, names, etc.) masked at the source. Recordings are kept for 30 days.

What we don't collect

No payment cards on our end — Stripe, Klarna and Apple handle those. We don't run any ad networks inside Tiny Task. Datafast analytics is cookieless and doesn't log IPs.

Where we store it

Family data lives in Google Firebase (Firestore + Storage + Auth) within EU/Belgium. Stripe data sits with Stripe in the US/EU per their sub-processor list. Klarna processes payments within the EU. Apple handles in-app subscriptions on iOS. Marketing events are sent to Meta Platforms (Facebook) and product analytics + session recordings to PostHog (EU region, Frankfurt) — both only after you consent.

Sub-processors

Google Firebase — database, auth, file storage, push (EU)
Stripe — card payments on the web (EU/US)
Klarna — alternative payment method on the web (EU)
Apple — in-app subscriptions + App Tracking Transparency (iOS)
Meta Platforms (Facebook) — ad measurement, consent-only
PostHog — product analytics + session replay (EU region), consent-only
Datafast — cookieless web analytics

Your rights

As a user, at any time you can:

See all data by signing in at /admin.
Delete your account + all family data from Settings → Delete family.
Withdraw or change marketing consent via the cookie banner (link at the bottom of the page).
Request data portability or object to processing — email hello@tinytask.se.

Children

Tiny Task is a tool for parents to manage their children's chores. Only the parent has an account. Children use the kiosk view on any tablet (iPad, Android or other) without an account of their own. Family member names, ages and photos are added by the parent and only visible within the family. We never send any child data to Meta or other marketing platforms.

Cookies & analytics

We use a session cookie (tt_session) for sign-in and a consent cookie (tt:consent) that remembers your choice in the cookie banner. Datafast analytics is cookieless. Marketing and analytics cookies (Meta Pixel and PostHog) are only set if you click "Accept" in the banner; you can withdraw consent at any time.

Contact

Questions about personal data? Email hello@tinytask.se. Complaints can be sent to the Swedish Authority for Privacy Protection (IMY).