1. Who We Are

AllWeDo ("we", "us", "our") is a family organizer application. Our website is allwedo.online. You can contact us at allwedo-support@allmobile.app.

2. Our Core Privacy Principle

AllWeDo is built on an offline-first architecture. This means:

• Your data is stored locally on your device in an encrypted SQLite database
• The app works fully offline -- no internet connection is required
• Our server acts only as a sync relay to pass changesets between family devices over TLS 1.3 (full end-to-end encryption between devices is planned for a future release)
• No family data is permanently stored on our servers

3. Data We Collect

3.1 Account Data

• Name -- the display name you choose when creating your family space (stored locally on device)
• Device ID -- a randomly generated identifier used for sync routing (not linked to your identity)

3.2 Data Stored Locally on Your Device

All of the following data is stored only on your device and never uploaded to our servers:

• Calendar events, tasks, shopping lists
• Journal entries, habits, chores
• Chat messages within your family space
• File attachments and photos
• Family member profiles

3.3 Server Data

Our sync relay server processes the following temporarily:

• Sync changesets -- data packets relayed between your family's devices. Protected by TLS 1.3 in transit; processed in cleartext on the relay only long enough to fan out to online peers, then discarded. Not permanently stored.
• Push notification tokens -- device tokens used to deliver notifications. Stored only while your device is registered.
• Family space ID -- a cryptographic identifier used for sync routing. Not linked to your real identity.

3.4 Telemetry (Crash Reports)

If you opt in, we collect crash reports to improve app stability. Reports do not include your contacts, location, or message contents, but they may include the following technical context:

• Error type, stack trace, app version, and OS version
• Recent navigation breadcrumbs (which screens you visited just before the crash; some breadcrumbs may include a family member's display name, e.g. when the crash occurred during the "add member" flow)
• Device type (e.g., "iPhone" or "Android")

Telemetry is entirely optional and can be disabled in Settings.

3.5 Data We Never Collect

• Location data
• Contacts or address book
• Browsing history
• Email addresses or phone numbers
• Payment information (handled entirely by Apple/Google)

4. Third-Party Services

Service	Purpose	Privacy Policy
Adapty	Subscription management	adapty.io/privacy-policy
AI assistant (Personal AI)	Runs on-device, or through an API key you provide (BYOK) directly to the provider you choose. AllWeDo operates no AI server; prompts never pass through our infrastructure	The policy of the provider you choose applies
Apple APNs	Push notifications (iOS)	apple.com/privacy
Firebase FCM	Push notifications — Google Play builds only	firebase.google.com/support/privacy
UnifiedPush (ntfy, self-hosted)	Push notifications for the APK downloaded from allwedo.online	Self-hosted on our server; no third party

No advertising in the app. AllWeDo does not display ads and will never do so. We do not sell, share, or trade your personal data with advertisers or data brokers.

5. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR) and similar laws, you have the following rights:

• Right to Access -- you can export all your data via Settings → Backup → Export
• Right to Rectification -- you can edit your name and profile in Settings at any time
• Right to Deletion -- you can delete all your data by using "Reset App" in Settings, or online at allwedo.online/delete-account
• Right to Portability -- your data can be exported as a JSON file at any time
• Right to Object -- you can disable telemetry in Settings

6. Data Security

• All data is stored locally in an encrypted SQLite database
• Sync connections use HMAC-SHA256 authentication
• All server communication uses HTTPS (TLS 1.3)
• Push notifications are delivered through Apple APNs (iOS) and Google FCM (Android). They carry your family space ID and, for chat or call notifications, the message title/body or caller display name -- Apple and Google process these en route per their privacy policies (linked above)
• PIN lock and seed phrase recovery protect your family space

7. Children's Privacy

AllWeDo requires users to be at least 13 years of age (COPPA / Apple App Store Families Policy / Google Play Families Policy). Children under 13 should only use the app under parental supervision with a "child" role account managed by a parent or guardian. AllWeDo is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child under 13 has registered an account directly, please contact allwedo-support@allmobile.app and we will delete the account and any associated data.

8. Data Retention

• Local data: Retained until you delete it or reset the app
• Sync relay data: Not permanently stored; relayed in real-time
• Push tokens: Removed when you uninstall the app or revoke your device
• Crash reports: Retained for 90 days, then automatically deleted

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via an in-app notice. The "Last updated" date at the top reflects the most recent revision.