Privacy Policy

issho ("we", "us", "our") is a household management app for couples. We take your privacy seriously. This policy explains what data we collect, why we collect it, how we process it, and your rights under the EU General Data Protection Regulation (GDPR/DSGVO).

1. Data Controller

Leon Pawelzik
Email: feedbackforissho@gmail.com

2. Data We Collect

2.1 Account Data

When you create an account, we collect:

• Email address
• Display name
• ADHD profile selection (optional, see below)
• Accent color preference

If you sign in via Apple or Google, we receive your name and email from the respective provider. We do not receive or store your password for social sign-ins.

ADHD profile. During onboarding you can optionally tell us whether you, your partner, both of you, or neither have ADHD. Because this answer can be considered health-related data under the GDPR (Art. 9) and similar laws, we process it only with your explicit consent, which you give by actively selecting an answer. You can skip the question entirely, and issho works the same either way. We use your answer solely to tailor the app experience. It is never shared with third parties in a form that identifies you: our analytics only ever receive an anonymous, aggregate category that is not linked to your account or device. Your answer is deleted together with your account.

2.2 Household Data

Data you create while using the app:

• Household name and partner information
• Areas/rooms in your household
• Tasks, subtasks, and their metadata (title, effort level, priority, tags, status)
• Energy check-ins (energy level, mood)
• Focus sessions and co-clean sessions
• Gamification data (points, virtual home level)
• Appreciation messages between partners

2.3 Photos

When you use the photo-to-tasks feature, your photo is uploaded to our servers and sent to Google's Gemini AI for analysis (see Section 4). Photos are stored on our backend infrastructure. You can delete photos by deleting the associated tasks.

2.4 Feedback

If you submit in-app feedback, we collect your emoji rating, text comment, the screen you were on, and your app/iOS version.

2.5 Alpha Signup Data

When you sign up for the alpha via our website, we collect your email address and your optional questionnaire responses (ADHD relationship, household challenge, feature wishes, device type).

2.6 Automatically Collected Data

• Analytics: Screen views and usage events (anonymized). We use PostHog with EU data residency (eu.i.posthog.com).
• Crash reports: If the app crashes, we collect error data, device information, and a screenshot of the app at the time of the crash. This may include visible task names or household information. We use Sentry for crash reporting.
• Push notification token: If you enable notifications, we store your device push token to send reminders.

3. How We Use Your Data

• Provide the service: Store your tasks, sync between partners, manage your household (legal basis: contract performance, Art. 6(1)(b) GDPR).
• AI task enrichment: When you create a task, we send the task title to Google Gemini to estimate effort, suggest an area, and generate micro-steps. When you use photo-to-tasks, the photo is sent to Google Gemini for room detection and task generation (legal basis: consent, Art. 6(1)(a) GDPR). You can disable AI features in your settings.
• Send notifications: Gentle reminders and partner activity updates, max 3–5 per day (legal basis: consent, Art. 6(1)(a) GDPR).
• Improve the app: We use anonymous, aggregate product analytics that are not linked to your account to understand which features are used and fix issues (legal basis: legitimate interest, Art. 6(1)(f) GDPR).
• Alpha communications: If you signed up for the alpha, we use your email to send access invitations and development updates, max once per week (legal basis: consent, Art. 6(1)(a) GDPR).

4. Third-Party Services

We use the following third-party services to operate issho:

We do not sell your data to any third party.

5. Data Retention

• Account & household data: Stored as long as your account is active. Deleted upon request.
• Photos: Stored as long as the associated task exists. Deleted when you delete the task.
• Crash reports: Retained by Sentry for up to 90 days.
• Analytics data: Retained for as long as your account is active. You can request deletion of your analytics data at any time.
• Alpha signup data: Retained until the alpha program ends, then deleted unless you become a user.

6. Your Rights (GDPR/DSGVO)

Under the GDPR, you have the right to:

• Access. Request a copy of all data we hold about you.
• Rectification. Correct inaccurate data.
• Erasure. Request deletion of your data ("right to be forgotten").
• Data portability. Receive your data in a machine-readable format.
• Restrict processing. Limit how we use your data.
• Object. Object to processing based on legitimate interest.
• Withdraw consent. Withdraw consent for AI processing or notifications at any time, without affecting prior processing.

To exercise any of these rights, email feedbackforissho@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority.

7. Data Security

All data is transmitted over HTTPS. Authentication tokens are stored in your device's secure keychain (Expo SecureStore). API keys for third-party services are stored server-side and never exposed to the client. We use Convex's managed infrastructure which includes encryption in transit.

8. Children's Privacy

issho is not for use by anyone under 16. We do not knowingly collect data from anyone under 16. If you believe someone under 16 has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via the app or email. The "last updated" date at the top of this page reflects the most recent revision.

10. Contact

Questions about this privacy policy or your data?
Email: feedbackforissho@gmail.com