FunTaskTik — Privacy Policy

1. Who is responsible for your data

The controller of personal data processed through FunTaskTik is:

Controller: Sebastian Puigserver Janer Status: individual Trading name: FunTaskTik Email: funtasktik.contact@gmail.com Website: https://funtasktik.com Country: Spain

FunTaskTik is the service's trading name and is not a legal entity separate from the controller identified above.

2. Who this Policy applies to

This Policy applies to the FunTaskTik mobile application, the official website and services that expressly state that they are subject to it.

FunTaskTik is a family organisation tool intended for adults. Registered accounts are for people aged 18 or over. Minors do not create independent accounts: an adult may create and manage a child profile within a family.

We do not currently request dates of birth or carry out general documentary age verification. A person registering must declare that they meet the age requirement.

3. Where data come from

3.1 Data you provide directly

We may receive data when you create or manage your account and family; add profiles; create tasks, calendars or lists; configure preferences and notifications; contact support; exercise your rights; or complete a necessary legal communication.

3.2 Data entered by another adult

An authorised adult may enter the minimum data needed to create and manage family profiles, including child profiles and profiles for adults pending registration.

Anyone entering another person's data must do so lawfully, use accurate information and limit it to what is reasonably necessary. This does not reduce FunTaskTik's own obligations as controller.

3.3 Adults pending registration

An administrator may prepare another adult's entry using data such as their name, avatar and email address. At that point, the invited person does not yet have their own FunTaskTik account or credentials.

FunTaskTik generates an invitation that the administrator can share. It may include the family name, a current invitation code, a link to this Policy and, when available, the official Google Play link.

The administrator acts as the operational channel for sharing the invitation and information provided by FunTaskTik. FunTaskTik does not record which app or person the share action targets and cannot prove that the invitation was delivered, opened or read.

When we receive data that did not come directly from the individual, we must provide the required information within a reasonable period and no later than one month. If we use the data to communicate with the person sooner, we must provide it no later than that first communication, unless a legal exception applies. The invitation and the administrator's operational role do not replace or limit FunTaskTik's obligations, and the share action does not by itself prove that the information was received or read.

If the person registers successfully, the profile prepared for them can be linked to their account without creating another family profile.

If they do not complete registration, their pending personal data will be deleted automatically within a maximum of 30 days from creation of the profile. Deletion may happen earlier if an administrator removes the pending profile.

3.4 Technical data

Services needed to operate FunTaskTik may process limited technical information, such as account or device identifiers, IP address, device type, operating system, security records and identifiers needed to send notifications.

4. What data we process

Depending on the features you use, we may process:

• account data, such as name, avatar, email, preferences and internal identifiers;
• credentials managed by the authentication service;
• families you participate in and family profiles;
• tasks, assignments, progress, calendars, lists and list items;
• device and notification information;
• support, security and rights-request data;
• a minimum record of legal versions shown or accepted.

Current access uses email and password through the Google/Firebase authentication service. FunTaskTik does not need to store or display your password in readable form.

4.1 Child profiles

A child profile may contain a name, avatar and necessary family activity, such as tasks, assignments and progress. It is not an independent account and does not require its own email, password or credentials.

We do not currently request the age or date of birth of these profiles. The category selected for a profile does not establish the person's real age.

4.2 Notifications and camera

If you allow notifications, we may process device information and identifiers needed to direct them. These data are not used for advertising or commercial profiling. Notification content may appear on the lock screen depending on your device settings.

The app may request camera access for a specific feature, such as scanning a QR code to join a family. We do not use the camera for advertising or commercial profiling.

Avoid including particularly sensitive or unnecessary personal information in tasks, lists and other content fields.

5. Why we use data and our legal bases

Depending on the circumstances, we process data to:

• create, authenticate and manage an account and provide the requested service, based on our contractual relationship;
• provide family features and keep shared content consistent, based on our contractual relationship and, where appropriate, our legitimate interest in providing the family service;
• prepare an invited adult's entry, based on the legitimate interest in managing a requested family invitation and subject to data minimisation and information duties;
• manage child profiles created by an authorised adult, based on the legitimate interest in providing the requested family organisation, with enhanced protection for the child, or on consent where a specific activity legally requires it;
• send requested notifications or schedule reminders, based on the contractual relationship and, where a specific activity legally requires it, consent;
• protect accounts, prevent abuse and maintain security, based on our legitimate interest;
• answer enquiries and provide support, based on the contractual relationship or our legitimate interest in responding and resolving incidents, as applicable;
• handle the exercise of rights and comply with other legal duties, based on compliance with those duties;
• retain minimum evidence needed to establish, exercise or defend claims, based on our legitimate interest and, where applicable, compliance with legal duties.

Where an activity requires consent, you may withdraw it at any time without affecting earlier processing. Accepting the Terms or confirming that you have read this Policy is not general consent to all processing.

6. Information shared within a family

Names, avatars, tasks, assignments, progress, calendars, lists and other family content may be visible to authorised people in the same family according to their permissions.

Deleting a profile or account does not necessarily erase shared content needed by others. If the family continues, that content may remain while personal references to the departing person are deleted, detached or anonymised where appropriate.

If a pending adult profile is removed, its pending personal data are deleted. Family tasks may remain but are no longer assigned to that profile. Lists and list items may also remain as shared content.

7. Providers and recipients

FunTaskTik uses Google/Firebase services for functions such as account management, data storage and synchronisation, notifications and other services needed to provide the app.

Separately, and only when the person allows it, the website may use Google Analytics to measure visits, navigation and performance, and PostHog to understand specific interactions with public pages and the beta access process. These providers do not perform the same function as the services used to operate the app.

Google and PostHog may process information when we use their services, in accordance with the terms and data protection agreements applicable to each provider. We may also disclose data to authorities, courts, public bodies, advisers or providers where a valid obligation exists or where strictly necessary to handle an incident or claim, with appropriate safeguards.

FunTaskTik currently does not sell personal data, contain advertising, use data for personalised advertising, or offer subscriptions or in-app purchases.

8. International transfers

Use of Google/Firebase, Google Analytics or PostHog means that some data may be processed outside Spain and the European Economic Area.

Firebase Authentication processes data in data centres located in the United States. Other Firebase services may use global infrastructure and, where supported, configured locations.

PostHog is configured to use its European hosting region. This does not mean that all processing by PostHog or its subprocessors necessarily remains in the European Economic Area.

Where a transfer is subject to the GDPR, the applicable contractual safeguards and legally recognised mechanisms will be used, including, where applicable, the EU-U.S. Data Privacy Framework and the European Commission's Standard Contractual Clauses. We do not claim that all data processed by these providers remain exclusively in Europe.

9. How long we keep data

• Account data are kept while the account is active and needed to provide the service.
• Pending adult data are deleted automatically within a maximum of 30 days if registration is not completed, and may be deleted earlier.
• Shared content is kept while the family exists and it is needed by its members.
• Device and notification data are kept while needed to provide the active feature.
• Enquiries and security records are kept for the time needed to resolve the matter and address potential liability.
• Minimum legal evidence may be kept for the periods needed to demonstrate compliance or handle claims.
• The website analytics preference is kept in the browser for up to 180 days, unless you withdraw or change it or clear your browser data sooner.
• After consent, Google Analytics may use cookies whose default duration is up to two years; browser settings or limits may shorten that period.
• PostHog keeps the technical information needed to maintain consistent measurement in the browser for the duration of the session.
• Under our current Google Analytics configuration, event data are retained for 2 months and user data for 14 months. For user data, the retention period starts again when new activity is recorded.
• Under the current PostHog plan used by FunTaskTik, analytics data are retained for 1 year.
• These periods refer to retention in each provider's systems and are separate from the lifetime of cookies or other information stored in the browser. If our configuration or a provider's applicable plan changes, we will review this Policy where appropriate.
• Providers may retain backups or records during their applicable recovery and retention periods.

After account deletion, we keep only data temporarily justified by a legal duty, security, fraud prevention or the defence of claims. They are not reused for advertising or marketing.

10. Security

We apply reasonable technical and organisational measures, such as authentication, access controls, separation of permissions, data minimisation, protection of communications and reduction of unnecessary information in operational records.

We review these measures according to the services used and the risk. No Internet-connected service can guarantee absolute security.

11. Analytics, advertising and cookies

The app currently contains no advertising and does not use analytics to build user profiles. We do not make decisions based solely on automated processing that produce legal or similarly significant effects on a person.

11.1 Optional website analytics

The website may use analytics tools to understand how people navigate its public pages, improve content and experience, assess the beta access process and detect performance issues.

These tools are initially disabled. We ask for your consent before activating them. You can accept or reject all of them, choose each one separately and change your choice later. They are not necessary to use the website.

If you withdraw consent, we will stop taking new measurements from that point and, where applicable, remove or reset analytics information stored in your browser by these tools. Withdrawal does not affect the lawfulness of processing carried out before that point or mean that data already sent are automatically deleted from each provider's systems.

11.2 Google Analytics

When you allow it, we use Google Analytics to obtain statistics about visits, navigation, use and website performance. FunTaskTik activates it only after consent.

We do not use this configuration for personalised advertising, remarketing, Google Signals or advertising audiences. Google Analytics may process public pages visited, language, specific interactions, technical identifiers and browser, device and network information needed to perform the measurement.

11.3 PostHog

When you allow it, we use PostHog to understand specific interactions with public pages and the beta access process through statistics and technical identifiers that we do not deliberately link to your FunTaskTik account.

This configuration does not record sessions, automatically capture everything you do or create named profiles. It also does not identify you through your FunTaskTik account or deliberately link website analytics to family or child profiles, tasks, lists or other app content.

PostHog may process public pages visited, language, specifically selected interactions, technical identifiers and browser, device and network information needed to perform the measurement. Technical information stored in the browser is limited to the session.

11.4 Limits on the information measured

Analytics is used only on certain public pages of the website, currently the home page and beta access page. It is not used on legal pages or pages intended for authentication, recovery or account deletion.

We do not deliberately send these tools names, email addresses, account data, family or child profiles, task or list content, invitation codes, form entries, free text or additional information attached to the visited link.

See the Cookie Policy for the technologies used, their duration and how to manage your choice.

12. Children

Child profiles are created and managed by adults and are not independent accounts. The adult must be authorised to provide the data, limit them to what is needed and supervise use of the device. FunTaskTik retains its own privacy, minimisation and security obligations.

Where specific processing concerning a child requires consent, the applicable age, representation and authorisation rules will apply. This does not mean that all processing concerning children is based on consent.

Public website analytics is not deliberately used to identify children, does not contain child profiles from the app and does not attempt to infer a visitor's age. A child may visit a public website without FunTaskTik necessarily knowing their age. This possibility does not make optional analytics a child-directed feature.

More information: https://funtasktik.com/en/minors

13. Your rights

Where applicable, you may request access, rectification, erasure, restriction, objection or portability, and withdraw consent previously given.

Write to funtasktik.contact@gmail.com. We may request information reasonably needed to verify your identity and prevent another person from accessing, changing or deleting your data.

Where analytics information is truly anonymous or cannot reasonably be linked to you, it may not be possible to locate a specific record in response to a request. This does not limit any rights you have over identifiable personal data.

You may also lodge a complaint with the Spanish Data Protection Agency: https://www.aepd.es

14. Account and data deletion

You can start deleting your account from within the app. To protect you, you may be required to verify your identity again.

Deleting the whole account is not the same as leaving a family or deleting only a family profile. If the family continues, tasks, lists and other shared content needed by its members may remain. Personal references are deleted, detached or anonymised where appropriate, and tasks are reassigned or unassigned before the profile is removed.

Where appropriate, the app also clears local data and reminders related to the account.

As an alternative channel, write to funtasktik.contact@gmail.com. More information:

https://funtasktik.com/en/account-deletion

15. Changes to this Policy

We may update this Policy when the product, providers, purposes, law or our processing change. If a change requires new information or consent, we will take the relevant steps before applying it.

16. Contact

Controller: Sebastian Puigserver Janer Trading name: FunTaskTik Email: funtasktik.contact@gmail.com Website: https://funtasktik.com Country: Spain

---

FunTaskTik — Privacy Policy Version 1.4 — 11/10/2026