Privacy Policy

Effective from: 9. 6. 2026 · Last updated: 9. 6. 2026

This policy applies to HugoFamily at hugofamily.app.

1. Who is responsible for your data (controller)

The data controller is:

• Veratec s.r.o., Sokolovská 128/82, 186 00 Praha 8, Česká republika — IČO: 28740459, DIČ: CZ28740459, sp. zn. C 291354 vedená u Městského soudu v Praze
• Privacy contact: privacy@hugofamily.app

If we appoint a Data Protection Officer or an EU representative, their details will appear here.

2. The short version

• We collect only the minimum we need to run a family organizer: how you sign in, who's in your family, and the content you create (lists, tasks, etc.).
• We don't sell your personal data, we don't share it with anyone else for their own purposes, and we don't use your family's content for advertising.
• We don't employ staff or hire anyone who has access to your personal data. To run the Service we use only strictly necessary providers, who process data solely within the EU/EEA.
• We contact you only for essential service messages (sign-in links, important notices), when you request support, and — only if you opt in — occasionally with news about a new version or planned maintenance.
• Payments are handled by Paddle — we don't store your card details.
• You can export all your family's data and delete your family account at any time — directly in the app.
• The free tier is free forever while your family keeps using it. If a free family is inactive for 3 months, we warn you by email first and then permanently delete it.
• For families with children, parents control the account and we keep children's data to a minimum.

3. What data we collect

3.1 Account and family data

• Email address (used to sign you in via magic link, social login, or to contact you).
• Display name and role (parent/admin or child) within a family.
• Preferred language and timezone.
• Family details you set: name, slug, colors, and the assistant name.
• Membership and invitation information (who is in the family, their approval status).

3.2 The content you create

• HugoShopping: shopping lists, items, quantities, notes, prices, stores, “bought” status, and aliases.
• HugoTasks: tasks with titles, descriptions, status, priority, category, due dates, and completion times.
• HugoCards: loyalty cards — encrypted barcode values, store names, optional websites, card notes, and brand-colour metadata.
• HugoNotes: note text, colour, pin, optional expiry, and author.
• HugoMeals: meal ideas, member votes, weekly plan, cooking history, ingredients, and recipe notes.
• Future modules (e.g. HugoPocket): the data you enter there, such as allowance balances and ledger entries.

3.3 Technical and security data

• A security/audit log of important actions in your family (e.g. sign-ins, member changes, exports, settings changes), which can include the IP address and browser user-agent at the time. It helps protect your account and detect abuse.
• Basic technical data needed to deliver the app (session cookies, language) and diagnostic/error data if something goes wrong, via our error-monitoring tool.

3.4 Payment data

When you subscribe, Paddle processes your payment details as merchant of record. We receive only what we need to manage your subscription — a customer/subscription identifier, the plan, status, and billing period — not your full card number or CVV.

3.5 Data from sign-in providers and integrations

• With social login (Google, Apple, Microsoft) we receive a verified email (and minimal profile data) to create or link your account.
• When you enable integrations (e.g. Home Assistant) or create service tokens/API access, we process the data exchanged through them as you direct.

4. Children's data

HugoFamily is designed for households that include children, and we treat children's data carefully:

• A parent/admin sets up and controls the family, including adding children and managing their access.
• For children we keep data to a minimum — typically a display name, role, language, and the content the family creates together. Children don't manage billing or subscriptions.
• The age of digital consent varies across the EU (13–16). Where consent is the basis for processing for a child below that age, it must be given or authorised by the parent/guardian. By adding a child, you confirm you have the right to do so.
• Parents can view, export, and delete the family's data, including a child's, from settings.

If you believe a child's data has been provided without proper authorisation, write to privacy@hugofamily.app and we'll address it.

5. Why we use your data and our legal bases (GDPR Art. 6)

Where we rely on legitimate interests, we've weighed them against your rights; you can object (see §10).

6. Who can access your data

We keep access to your data as tight as possible:

• We don't sell your personal data and we don't share it with any third party for their own purposes (no advertising networks, no data brokers).
• We don't employ staff or engage contractors who have access to your personal data. The Service is run without giving outside people access to families' content.
• To run the Service we rely only on a small number of strictly necessary providers, who act solely on our instructions, may not use your data for their own purposes, and process it within the EU/EEA:

• Hosting & infrastructure: running the Service and storing the data, including technical diagnostics (configured not to include your family's content or unnecessary personal data).
• Email: sending essential service emails (sign-in links, invitations, notices).
• Payments: Paddle (merchant of record) — only when you buy a paid plan. You give your payment details to Paddle directly; we don't see your card number.

With social login you authenticate with that provider and we receive a verified email from them — we don't send them your family's content.

We may disclose data if required by law, to enforce our terms, or to protect the rights and safety of users — and as part of a business transfer (e.g. a merger), in which case we'll tell you.

7. Where your data is processed

We store and process your personal data within the EU/EEA, and we don't transfer it outside the EU/EEA. If this ever needs to change, we'll update this policy first and rely on the safeguards the GDPR requires. More at privacy@hugofamily.app.

8. How long we keep data

• Account and family content: for as long as your account is active.
• Inactive free families: the free tier is free forever while you use it. After 3 months of inactivity we send a reminder email and then permanently delete the family and its content. Just sign in and keep using the Service, or export your data first.
• After you delete a family: the family is deactivated immediately and the data is permanently purged after a short retention window (about 30 days) — to recover from accidental deletion and meet operational needs; after that, it's gone.
• Security/audit log: retained for a limited period appropriate to security needs.
• Billing records: Paddle and we keep invoices and transactions as required by tax and accounting law (often several years), even after you cancel.
• Backups: copies in routine backups are overwritten on our normal backup cycle.

9. How we protect your data

• Passwordless sign-in (magic links, social login, passkeys) — we don't store passwords for the app.
• Per-family isolation — one family can't see another's data.
• Service tokens for integrations are hashed, revocable, and scoped (the raw token is shown once and never stored in readable form).
• Encryption in transit (HTTPS), access controls, login rate limiting, and an audit trail for sensitive actions.
• We don't store full card numbers or CVV — Paddle handles payment data.

No system is perfectly secure, but we work to protect your data and respond quickly to incidents, including notifying you where the law requires.

10. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• erase your data (“right to be forgotten”);
• restrict or object to certain processing;
• portability — your data in a structured, machine-readable format;
• withdraw consent where we relied on it;
• complain to a supervisory authority.

You can exercise the main rights directly in the app:

• Export: download your family's data as JSON from settings.
• Delete: permanently delete your family from settings.

Jinak napište na privacy@hugofamily.app. Odpovíme v zákonné lhůtě (obvykle do jednoho měsíce). Stížnost můžete podat u Úřadu pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7 (www.uoou.cz) — nejdřív nám ale dejte šanci pomoci.

11. Cookies and similar technologies

The app uses a small number of cookies/local storage that are necessary to run it — for example to keep you signed in and remember your language. If we ever add non-essential cookies (such as analytics), we'll ask for your consent first. The marketing website may have its own cookie notice.

12. Automated decisions

We don't make decisions about you with legal or similarly significant effects based solely on automated processing. The Hugo assistant offers suggestions — the decision stays with you.

13. Changes to this policy

We may update this policy. For a material change we'll give reasonable prior notice (by email or in the app). The “Last updated” date above always reflects the current version.

14. Contact

• Controller: Veratec s.r.o., Sokolovská 128/82, 186 00 Praha 8, Česká republika
• Privacy / requests: privacy@hugofamily.app
• General support: support@hugofamily.app

These documents belong together: Privacy Policy · Terms of Service · Refund Policy