Privacy policy

Who is responsible

Gulrót is provided by Ingvi Þór Guðmundsson, a sole trader based in Iceland, who is the controller of the personal data described here. Questions and requests: gulrot@gulrot.is.

Gulrót is used by families: a parent creates the family, adds children and invites other parents. Parents decide what information about their children goes into Gulrót.

What we collect

About parents and other adults in a family:

• name and email address, and a password stored only as a secure hash, or your Google account's name and email if you sign in with Google;
• the family you belong to, your role in it, which children you can see, and your language;
• what you do in the app: tasks and rewards you create, approvals, and your notification settings;
• the names and email addresses of people you invite.

About children, entered by a parent or by the child:

• name, and optionally a date of birth and a profile picture;
• tasks completed, photos taken as proof of a task, points, rewards, streaks and achievements;
• a daily mood (a choice of three faces), which the child's parents can see;
• if a child joins with the family code instead of being added by a parent, their email address and password (hashed).

Technical data:

• push notification tokens for the devices you allow notifications on;
• your IP address, used briefly to limit repeated sign-in attempts, and the country it comes from, used to show the site in the right language and to see which countries families sign up from;
• how the app is used and errors that occur, as described under Analytics.

Why we use it

• To run Gulrót for your family: accounts, tasks, rewards, notifications and emails you have switched on. The legal basis is our contract with you.
• To keep Gulrót secure and prevent abuse, and to understand how it is used and fix errors. The legal basis is our legitimate interest in a working, safe service.
• To send occasional news about Gulrót to parents. You can opt out in every such email or in Settings.
• To handle payments and refunds for lifetime access, together with Creem, and to meet accounting obligations.

We do not sell personal data, and we do not show ads.

Children

Gulrót is made for families, and parents are responsible for their children's use of it. A family is created by a parent; children are added by a parent or join an existing family with its code. Children do not receive notification or news emails from us. Parents can see and change their children's information, and can remove a child from the family.

Who processes data for us

We use these service providers, each under a contract that limits what they can do with the data:

• Vercel: hosting, image storage and privacy-friendly page analytics (servers in Frankfurt for the app);
• Neon: the database (Frankfurt);
• PostHog: product analytics and error reports (EU hosting);
• Resend: sending email;
• Upstash: short-lived rate limiting;
• Expo and the browser makers' push services: delivering push notifications;
• Google: sign-in, if you choose to sign in with Google;
• Creem: payments, receipts and refunds, as the Merchant of Record for lifetime access;
• Linear, where feedback you send from the app is tracked, and Anthropic, whose AI may process that feedback to help us act on it.

Some of these providers are based in the United States. Where data leaves the European Economic Area, we rely on the safeguards the providers offer for such transfers, such as the EU Standard Contractual Clauses.

Analytics

We use PostHog to see which parts of Gulrót are used and to catch errors. It runs without cookies or other storage in your browser. When you are signed in, events are linked to your account, including your name and email address, so that we can help when something goes wrong. Vercel's page analytics count visits without cookies and without identifying you.

Cookies and storage on your device

We only use what Gulrót needs to work:

• a sign-in cookie that keeps you signed in for up to 30 days, and the short-lived cookies used while signing in;
• your language choice (one year) and the language of the last page you opened (until you close the browser);
• short-lived cookies that carry an invitation through sign-in and protect against redirect loops;
• in the browser's own storage: your theme and whether the sidebar is collapsed;
• in the phone app: your sign-in and whether Face ID sign-in is on, kept in the phone's secure storage.

There are no advertising or tracking cookies, so there is nothing to consent to.

How long we keep data

We keep your data for as long as your account exists. You can delete your account at any time in Settings. That deletes your account and everything tied to it from our database. If you are the only parent, the whole family is deleted, including the children's accounts. Otherwise the family continues and another parent becomes its administrator.

Some copies take longer to disappear: uploaded photos can remain in storage for a period after deletion, and our providers keep logs, analytics events and sent-email records for their own retention periods. Creem keeps payment records for as long as the law requires. To have these removed sooner, write to gulrot@gulrot.is.

Your rights

You can ask for a copy of your data, have it corrected or deleted, restrict or object to how we use it, and receive it in a portable format. Parents can exercise these rights for their children. Write to gulrot@gulrot.is. If you think we handle your data wrongly, you can complain to the data protection authority where you live, or to Persónuvernd, the Icelandic Data Protection Authority.

Changes

If we change this policy in a way that matters, we will tell you in the app or by email. Our terms of service cover the rest of how Gulrót works.