Privacy

Who we are

Tideday is run by Karo Urban Facility SRL (CUI 44352408, J2021001408057), Str. Caius Marcius Coriolan 5, et. 1, ap. 2, Sector 5, Bucharest, Romania. For anything about your data, write to birou.urbn@gmail.com and a person will answer.

A parent sets the account up

A parent or legal guardian creates the account and gives parental consent before a teen can be added. That consent is the basis on which we store the teen's data (GDPR Article 6(1)(a), and Article 8 where the teen is under the age your country sets).

A teen never gives us an email address or a password. They join with a short code their parent shows them, on their own device.

What we store, and nothing more

From the parent: an email address, the family's time zone, and the billing details Stripe needs (we never see a card number).

From the teen: the first name or nickname the parent types, the routine steps, homework and tests, and which of them are ticked off. If they switch reminders on, we also store the push subscription their browser gives us — an address for that one device, and the keys that encrypt a notification to it.

No postal address, no school, no phone number, no photographs, no date of birth.

To stop someone flooding the sign-in form or guessing a pairing code, we count recent attempts against the email address typed in and against the IP address they came from. Those counters are deleted automatically after 24 hours, and the ones that name an email address also go when the account is deleted. Sign-in links are deleted once they expire.

What the parent can see

A parent sees the routines, homework, tests and what has been ticked off, plus a weekly summary if they want one.

Anything a teen writes for themselves — the journal and how they feel, when those exist — is private to the teen and is never shown to the parent and never put in an email.

No advertising, no tracking

There is no advertising in Tideday, there are no analytics that follow a person, and there is no third-party script on any page. We do not sell or share personal data with anyone, for any purpose.

Who processes data for us

Neon (Postgres) stores the data, on servers in Frankfurt, European Union. Netlify serves the app, Resend sends the sign-in links and the weekly email: both act only on our instructions, under a data processing agreement, and both are companies in the United States, so data reaches them under the European Commission's standard contractual clauses.

Stripe handles the payment. For your billing details Stripe decides for itself what it must keep for payment, fraud and tax law — there it is not only acting on our instructions — and it too is covered by standard contractual clauses.

Push notifications go through the push service of the teen's own browser: Apple, Google, Mozilla or Microsoft, depending on the browser. The text of a reminder passes through it; we send no more than the title and one short line.

How long we keep it

While the family uses Tideday. If a trial ends without payment, the data is kept for 30 days, so nothing is lost if you come back, and then deleted automatically. A family who has paid keeps their data until they delete the account.

Deleting the account deletes the family at once: the parent, every teen, the routines, the homework, the ticks, the push subscriptions and the sign-in links. The anti-abuse counters described above go within 24 hours. Stripe keeps the invoices it is required by law to keep.

Your rights

You can ask for a copy of your family's data, ask us to correct it, ask us to delete it, ask for it in a portable form, or object to how we use it. You can also withdraw your consent at any time — deleting the account does exactly that, and stops everything from that moment. Write to birou.urbn@gmail.com; we answer within 30 days. You can also complain to your national data protection authority — in Romania, that is ANSPDCP.

Cookies

Tideday sets one cookie for the parent and one for the teen, so that each stays signed in on their own device. They carry nothing but a signed session. There are no advertising or analytics cookies, so there is no cookie banner to click away.

On the teen's phone the app also keeps the last Today screen and any ticks made without internet, so the screen works offline. Both stay on that device, are sent to us only as the ticks themselves, and are cleared when another teen is connected on the same phone.