Privacy Policy

Who is responsible for your data

Flatmate is operated by Kineto Soft (Ugur Akcelik), Turin, Italy — VAT IT12938420010 — the "data controller" under the EU General Data Protection Regulation (GDPR).
Contact: info@kineto-soft.com · PEC: ugurakcelik@pec.it

Data we collect

• Account data — your email address, display name, and a securely hashed password (we never store your password in plain text).
• Google sign-in — if you sign in with Google, we store Google's stable account identifier so we can recognize you next time. We do not receive your Google password.
• Household data — households you create or join, tasks, task completions, expenses, expense splits, and payments you or your flatmates enter. This is visible to the other members of your household, since that's the point of the app.
• Images/Photos — if you choose to upload receipts, we store these images to display them to your household members.
• Subscription status — if you or a flatmate subscribes to Flatmate Premium, we store whether your household's subscription is active and when it renews. Purchases are handled entirely by Google Play and RevenueCat — Flatmate's servers never see your card details.
• Basic technical data — standard request metadata (like IP address) used transiently for rate-limiting and abuse prevention. We don't use analytics or advertising trackers.

How we use it

Solely to operate the app: authenticating you, running the task rotation, computing expense splits and balances, sending in-app notifications, and verifying your subscription status. We do not sell your data or use it for advertising.

Legal basis for processing (GDPR)

• Contract — most processing (account, household, task, and expense data) is necessary to provide the app you signed up for.
• Legitimate interest — technical data like request metadata, used for rate-limiting and abuse prevention.
• Consent — not currently used for anything beyond the above; we don't send marketing email or run ad tracking.

Who we share it with

• Google — if you use Google Sign-In or purchase a subscription through Google Play.
• RevenueCat — to manage and verify Flatmate Premium subscriptions purchased through Google Play.
• Your flatmates — household data (tasks, expenses, balances) is shared with the other members of any household you join, by design.

We do not sell personal data to third parties.

International data transfers

Google and RevenueCat are based in the United States. Where they process your data outside the European Economic Area, they do so under appropriate safeguards (such as the EU Standard Contractual Clauses) as required by GDPR Chapter V — see Google's and RevenueCat's own privacy policies for details of their safeguards.

Data retention & deletion

We keep your account and household data for as long as your account is active. To request deletion of your account and associated data, email info@kineto-soft.com from the address on your account. We'll confirm and delete your account data within 30 days, except where we're required to retain records (e.g. unresolved payment disputes). Residual copies may persist briefly in backups (no more than 90 days) before being purged.

Your rights

If you're in the EU/EEA, GDPR gives you the right to access, correct, delete, restrict, or export ("port") your personal data, and to object to how it's processed. Email info@kineto-soft.com to exercise any of these. You also have the right to lodge a complaint with your local supervisory authority — in Italy, the Garante per la protezione dei dati personali.

Children's privacy

Flatmate is not directed at children under 16, and we do not knowingly collect data from them.

Changes to this policy

If this policy changes, we'll update the "Last updated" date above.

Contact

Questions about this policy: info@kineto-soft.com