Last updated: 26 June 2026

Privacy Policy

This Privacy Policy explains what personal data the TeamFamily app (the “App”) collects, why we process it and what rights you have. We use your data solely to make the App work — we do not sell it and we do not use it for advertising.

1. Data controller

The controller of your personal data is SWANSOFTWARE Maciej Bandyk, based in Jaworzno, Poland, NIP 6322029900, REGON 520713370. For data-protection matters, contact: support@teamfamily.pl.

2. What data we collect

Account data

You provide it on sign-up and in your profile:

• email address,
• password — stored only as a secure, irreversible hash, never as plain text,
• username and first name (optional),
• profile color and initial.

Data created while using the App

• families/groups you belong to — their names and members,
• shopping lists: products, quantities, prices, categories and the author of each item,
• settlements: amounts, currencies and balances between household members (who owes whom and how much).

Technical data

• the device token required to send push notifications,
• the IP address recorded on sign-in and session refresh — for security purposes,
• technical service logs (events, errors).

We do not collect your location data, we do not profile you for advertising and we do not sell your data.

3. Purposes and legal bases for processing

• Providing the service (creating and running your account, shopping lists, settlements) — Art. 6(1)(b) GDPR (performance of a contract).
• Push notifications — Art. 6(1)(a) GDPR (your consent expressed in your device settings; you can withdraw it at any time).
• Security, abuse prevention and diagnostics — Art. 6(1)(f) GDPR (our legitimate interest).
• Transactional emails (account activation, password reset) — Art. 6(1)(b) GDPR.

4. Data recipients

We use trusted providers who process data only on our behalf:

• OVH — server hosting (servers in the European Union),
• Google Firebase Cloud Messaging — delivery of push notifications (the device token is passed to Google in order to deliver the notification),
• an email provider — sending transactional messages.

We do not share your data with third parties for marketing purposes.

5. Transfers outside the EEA

Push notifications are handled by Google (Firebase). As a result, the device token may also be processed by Google outside the European Economic Area. Google applies Standard Contractual Clauses (SCC) approved by the European Commission as the safeguard for such a transfer.

6. Retention period

• We keep account data and data created in the App for as long as you have an account.
• After you delete your account, we delete or anonymize the data within 30 days, except for data we must retain for legal or security reasons.
• We keep technical logs for a limited time, usually up to 90 days.

7. Your rights

You have the right to: access your data, rectify it, erase it, restrict its processing, data portability, object to processing and withdraw consent at any time. To exercise these rights, email support@teamfamily.pl.

You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

8. Deleting your account

You can delete your account and the data linked to it at any time — directly in the App under Profile → Account → Delete account (confirm with your password and it is done immediately). If you no longer have access to the App, email support@teamfamily.pl from the address linked to your account and we will complete the request within 30 days. Some shared data (e.g. historical settlements visible to other household members) may be anonymized rather than deleted, so as not to affect other users' data. Details and step-by-step instructions: the account deletion page.

9. Data security

We apply technical and organizational measures to protect your data:

• data is transmitted over an encrypted HTTPS/TLS connection,
• passwords are stored only as a secure hash,
• sensitive data is additionally encrypted in the database (AES-256),
• access to the infrastructure is restricted and secured.

10. Push notifications

The App sends notifications (e.g. shopping-list changes, settlement reminders). You can turn them off at any time in your phone's system settings.

11. Children

The App is intended for family use. An account should be created by an adult. If children use the App, it happens under the supervision of a parent or guardian. Under Polish law, consent to process the data of a child under 16 is given by a parent or guardian.

12. Changes to this policy

We may update this Policy. We will announce material changes in the App or on this page. The date of the last update is shown at the top of the document.

13. Contact

For privacy and personal-data matters, write to: support@teamfamily.pl.