Privacy Policy

Dehay Family ("we", "us", "the app") respects your privacy. This policy applies to the Dehay Family mobile app on iOS and Android.

Dehay Family is published by a private individual, who is the data controller. There is no company. Contact: [email protected]

Account data: email, full name, date of birth, gender, country, and a record of when you accepted the Terms and Privacy Policy (version and timestamp). Profile (optional): profile picture, bio, phone, address, relationship status, social links. Content: posts, photos, videos, comments, reactions, messages, events, and D-hay videos. Family tree: relationships and members you create, including people without their own account. Usage data: sign-in times, session/presence heartbeats, post and D-hay video view events, and views/clicks on information or sponsor posts (for adults, age band starts at 18+; under-18 viewers are not placed in a minor age band for sponsor demographics). For users 18+: technical advertising data via Google AdMob as described in section 9. Notifications: push tokens for devices where you enable notifications. Security and diagnostics: moderation reports, client error logs (message, screen, app version, device info), and optional crash reports via Sentry when enabled. Optional profile fields are only processed if you choose to provide them.

To deliver and operate the app (contract, GDPR art. 6(1)(b)). To secure your account and prevent abuse (legitimate interest, art. 6(1)(f)). To improve the app through aggregated statistics (legitimate interest). To send push notifications you opt in to (consent, art. 6(1)(a)). To show labelled ads to users aged 13 or over and, where the law requires it, to obtain consent for personalised advertising for users aged 18 or over (consent, art. 6(1)(a); see section 9). To measure reach of information/sponsor posts for admins and (where applicable) sponsors in aggregated form without exposing private family content (legitimate interest). To comply with legal obligations (art. 6(1)(c)). Error and crash logs are used only for debugging and security.

Content you publish is visible only to members of the family groups you share with, according to visibility settings. We never sell family content or customer lists. Posts, photos, videos, chat and the family tree are not sent to Google as an advertising audience. Technical providers process data on our behalf under data processing agreements (GDPR art. 28): Supabase (authentication and database), Cloudflare (media storage and delivery), and Sentry (optional crash diagnostics, configured without sending default PII). Google AdMob is described in section 9.

In the family tree you may add information about people who do not have a Dehay Family account. You are expected to only add information you have the right to share. Anyone added may request removal by contacting us or the person who added them.

Data is stored while your account is active. When you delete your account there is a 30-day grace period, after which personal data and content are permanently removed from production systems. Backups are overwritten on a rolling basis. Client error logs: up to 90 days. Information/sponsor view and click rows: up to 12 months. Closed moderation reports: up to 24 months for documentation. Retention cleanup is applied via scheduled database maintenance.

Depending on your location you may have rights to access, correct, delete, export, restrict, or object to processing of your data, and to withdraw consent (for example push notifications in device settings, or advertising consent via the Google prompt in the app). In the app you can download a copy of your data from Settings, or contact [email protected] — we normally respond within 30 days. You may also lodge a complaint with your local data protection authority (in Norway: Datatilsynet).

Dehay Family is free for families. Labelled ads for users aged 18 or over help cover running costs (servers, storage and store fees). Google ads are not shown to users under 13. Users aged 13 to 17 only see non-personalised ads.

For users aged 13 or over, Dehay Family may show labelled native ads (marked "Ad") in the family feed and in D-hay, at regular intervals. Personalised ads are only requested from age 18. Gallery, chat, family tree, calendar and comments do not include Google ads. Users under 13, and accounts without a date of birth, do not see these ads. Users aged 13 to 17 only see non-personalised ads.

Ads are provided by Google AdMob (Google LLC). We do not send posts, photos, videos, names, likes, comments or the family tree to Google. Google may still process technical data related to the ad slot, such as IP address, device and advertising IDs, coarse location, and whether an ad was shown or tapped. If you consent to personalised ads, Google may use such data in its advertising systems. Without consent we request non-personalised ads where possible. In the EU/EEA a consent prompt (Google UMP) is shown before this processing. You can withdraw consent via the prompt or your device settings. Google's privacy policy: https://policies.google.com/privacy.

We do not sell family content or customer lists. Dehay-run information and sponsor posts are separate from Google ads.

The app uses secure on-device storage (for example iOS Keychain, Android Keystore, and encrypted app storage) to keep you signed in and cache data for performance. The Google AdMob SDK is loaded only for adults as described in section 9, and only after consent where the law requires it. We do not use advertising tracking in gallery, chat or the family tree.

We use encryption in transit (HTTPS/TLS), row-level security in the database, and authentication via Supabase Auth. Passwords are never stored in plain text. Access to production data is restricted to authorised personnel.

We do not make automated decisions with legal effects on you. Content may be automatically hidden after repeated reports, but manual review takes place before permanent action.

The service is not intended for children under 13. Registration is blocked if the date of birth indicates an age under 13. If we learn that an account was created in breach of age requirements, we may suspend or delete it. We do not assign under-18 users to a minor age band in sponsor demographics. Google AdMob is not shown to users under 13. Users aged 13 to 17 only see non-personalised ads.

Dehay Family is available internationally. If you use the app outside Norway, your data may be processed in the EU/EEA or other regions where our providers operate. We apply appropriate safeguards required by applicable law.

If this policy changes in a material way, we will notify you in the app at least 14 days before the change takes effect.

Privacy questions: [email protected]