Doneby Privacy Policy
Doneby is made by Gremlin Garage ("we") in the United Kingdom. This policy explains what the Doneby Android app stores, why, and how you can delete it. In short, we keep only what's needed for your household to see who did what. There are no ads, no tracking, and we never sell data.
Questions? Email support@gremlingarage.dev.
What we store
Your household's shared list. This covers your household name, each person's display name, emoji and colour, pet names, jobs and their schedules, and logs ("Tom fed Biscuit at 5:42pm"). It's stored on your phone and, so the rest of your household can see it, in Google Firebase (Cloud Firestore, London region). Only people in your household can read it. They join with a 6-character code that lasts 48 hours.
A random sign-in ID. Doneby signs you in anonymously. There's no email, phone number or password. The ID just lets the server know which household you belong to.
A push token. This lets your phone get a quiet nudge when someone else logs a job, so your widgets and notifications stay up to date. It's removed when you leave the household.
Purchases. If you buy Household Pro, Google Play handles the payment. We never see your card details. Our server checks the purchase with Google and keeps the order ID and a scrambled copy of the purchase token, so one purchase can't unlock Pro for lots of households.
Crash reports (optional). If the app crashes, Firebase Crashlytics sends a report with your device model, Android version and what the app was doing. It doesn't include your jobs or names. You can switch this off in Settings → Privacy and data.
Settings on your phone only. Your theme, reminders, quiet hours and widget choices stay on your device.
What we don't collect
Location, contacts, photos, files, microphone, email address, phone number, advertising ID or browsing history.
NFC stickers only hold a random tag number. The app reads it and nothing else.
Who can see it
- People in your household: names, pets, jobs and logs.
- Google: Google Firebase stores and processes the data for us as our service provider, under its data processing terms. Google Play processes payments.
- Nobody else. We don't sell, rent or share data for advertising.
Keeping and deleting data
- Leave a household. Settings → Household → Leave. You stop receiving its data, and your push token is removed. Jobs and logs you added stay in the household's shared history with your name on them, because they're part of the other members' record.
- Delete a household. The owner can do this from Settings → Household. It permanently deletes the household, its people, pets, jobs and logs from our servers.
- Delete my data. Settings → Privacy and data → Delete my data. This leaves your household, deletes your sign-in ID and wipes everything from your phone. If you were the last person in the household, the whole household is deleted.
- By email. Write to support@gremlingarage.dev to have your name removed from a household's history, or for any other request. We'll reply within 30 days.
- Purchase records. These are kept for as long as needed for fraud prevention and tax records, which is up to 6 years.
- Crash reports. Crashlytics deletes these automatically after 90 days.
Your rights
Under UK GDPR you can ask to see, correct, delete or move your data, or object to how we use it. Email us and we'll help. You can also complain to the Information Commissioner's Office (ico.org.uk).
We use your data to provide the service you asked for (contract), and for crash reports with your consent (switch them off any time).
Children
Doneby is meant to be set up by adults. Children can be added to a household by a parent. We don't knowingly collect more than a display name for anyone.
Changes
If this policy changes, we'll update the date at the top. If a change is significant, we'll mention it in the app.