Privacy Policy.

§ 01Controller

The controller responsible for data processing on this website and within the Elterntakt app, within the meaning of the General Data Protection Regulation (GDPR), is:

§ 02Data we collect

Elterntakt processes as little personal data as possible. We collect the following categories:

• Account data — name, email address and (optionally) a profile picture when you create an account (via email or Apple Sign‑In).
• Family structure — parents, children, caregivers and their roles and permissions in your family.
• Calendar data — events, custody periods, handovers and swap requests you create in Elterntakt.
• Records — documents you upload (e.g. vaccination card, school report). These are stored with fine‑grained per‑document permissions; only people you explicitly authorise can read them.
• Ledger entries — amount, category, date, optional receipt photo and the agreed split between the parents.
• Journal & handover entries — mood, notes and checklists saved at handovers.
• Calendar sync — when you enable iCal export, we provide a signed ICS URL that contains only the calendar data you created in Elterntakt itself.
• Device tokens — for push notifications (optional, only with your consent).
• Server logs — IP address, user agent, timestamp and accessed endpoints for abuse detection and error analysis, retained for a maximum of 30 days.

§ 03Legal basis for processing

We process your personal data on the following legal bases under Art. 6 GDPR:

• Consent (Art. 6(1)(a)) — for push notifications and optional calendar synchronisation. You may withdraw consent at any time.
• Contract performance (Art. 6(1)(b)) — to provide the Elterntakt service, manage your account and bill paid subscriptions.
• Legitimate interest (Art. 6(1)(f)) — for server‑side logs, abuse detection and security analysis.

§ 04How we use your data

Your data is used exclusively to provide and improve Elterntakt:

• Shared calendar, custody rhythm and handovers between parents
• Digital records with per‑document permissions
• Ledger balancing with automatic monthly statements
• Journal and handover logs
• Notifications about handovers, swap requests and calendar changes
• Optional: court export — court‑ready reports on your explicit request

We never sell your personal data. Elterntakt is funded entirely by the Family subscription. No ads, no profiling, no sharing with data brokers.

§ 05Processors & third parties

We use the following service providers to operate Elterntakt. Data processing agreements under Art. 28 GDPR are in place with each of them:

• Hetzner Online GmbH (Falkenstein/Nuremberg, Germany) — hosting of the application and the PostgreSQL database. Processing exclusively in German data centres, no third‑country transfer.
• Resend, Inc. (USA) — delivery of transactional emails (invitations, account emails, invoices). Data processing under Standard Contractual Clauses (SCCs) and the EU‑US Data Privacy Framework.
• Apple Inc. (USA) — Apple Push Notification Service (push notifications on iOS) and Apple Sign‑In (OAuth authentication). With Sign‑In we receive only your name and email address; no password is transmitted to us. Apple Privacy Policy
• Google LLC (USA) — Firebase Cloud Messaging (push notifications on Android). Google Privacy Policy

Once we introduce paid plans, a payment processor will be added. We will update this policy in good time before launch.

§ 06Tone check & receipt capture

Elterntakt does not currently use artificial intelligence. Two features process content automatically:

• Tone check — before a message to the co‑parent is sent, it checks the text against fixed rules for escalating phrasing and offers a pre‑written, more neutral alternative. Whether you use it is up to you.
• Receipt capture — stores the uploaded receipt photo with the expense. You enter amount, date and category yourself; no automatic text recognition takes place at present.

Both features run exclusively on our servers at Hetzner Online GmbH in Germany (see § 05). No content is sent to external services or AI providers for this, and none is used to train AI models.

Should we use AI models in the future, we will update this policy beforehand and let you know in the app.

§ 07Cookies and tracking

This marketing website sets no tracking cookies. The Elterntakt app uses only technically necessary cookies for authentication (session cookie of our auth system better‑auth). We do not use advertising cookies, no Google Analytics, no Facebook Pixel and no third‑party trackers. No consent banner is required for technically necessary cookies under § 25 (2) TTDSG.

§ 08Data retention

We retain your personal data only as long as necessary for the respective purpose:

• Account data is retained for the duration of your account plus 30 days after deletion.
• Record documents remain stored as long as the child is part of the family — and are removed irrevocably 30 days after account deletion.
• Ledger and journal entries are kept until account deletion; on request you can export and remove specific periods earlier.
• Push tokens are deleted when you disable notifications or close your account.
• Server logs are deleted automatically after 30 days.
• Tax‑ and accounting‑relevant data (e.g. invoices for paid subscriptions) are retained for 10 years pursuant to § 147 AO (German Tax Code).

§ 09Your rights

Under the GDPR you have the following rights regarding your personal data:

You also have the right to withdraw any consent given at any time, without affecting the lawfulness of processing prior to withdrawal.

A shorter overview is available on our GDPR page.

§ 10Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for us is:

§ 11Data security

We use industry‑standard security measures to protect your data: encryption in transit (TLS 1.2+) and at rest, access controls restricted to authorised personnel, regular security reviews and automated daily backups.

§ 12Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the app. The current version is always available at this URL.

§ 13Contact

For privacy‑related inquiries, please contact: