Privacy policy
Last updated: 17 October 2026
HomeOdyssey is an app that helps families share out household chores through a game of missions, stars and rewards. This policy explains what data we keep, what we use it for and what rights you have. We’ve written it to be easy to understand; if anything isn’t clear, write to us.
1. Who is responsible
Data controller: Miguel López Tapia.
Contact for any privacy matter: privacy@homeodyssey.app.
2. What data we keep
About adults
- Email, name and password. The password is stored encrypted (with BCrypt): not even we can see it.
- The households you create or join, and their names.
About children
Children’s profiles are created by an adult in the household. Children do not have an account or an email address and cannot sign up on their own. For each child we keep:
- The name their parents give them (it can be a nickname) and their avatar (a drawing, not a photo).
- Their year of birth, only if the parents provide it, to suggest missions suited to their age.
- Whether they are a boy or a girl, only if the parents provide it, to show the game’s titles in the masculine or feminine form (for example, «Explorador» or «Exploradora» in Spanish). If it is not provided, neutral titles are used.
- An optional PIN, stored encrypted.
- What they do in the game: missions, stars, level, medals, rewards redeemed and proposals.
About the phone
- A device identifier so we can send it alerts (notifications). If you don’t grant notification permission, they are not shown.
- If you turn on “Lock on return”, the fingerprint or PIN is checked by the phone itself: HomeOdyssey neither receives nor stores your fingerprint.
We do not ask for photos, location, contacts, microphone or camera. There are no ads and no advertising tracking, and we do not sell or share data with anyone for marketing.
3. What we use it for
- To make the app work: your account, your household, the missions and the game.
- To send the app’s alerts (for example, that a child has finished a mission).
- To keep things secure (for example, limiting sign-in attempts).
The legal basis is the performance of the service you request when you create the account. Minors’ data is provided by their parents or guardians, who are the ones who create and manage their profiles.
4. Who helps us provide the service
- Railway: hosts the server and the database in the European Union (the Netherlands).
- Google Firebase Cloud Messaging: delivers notifications to the phone. The alert may include the child’s name and the mission title. Google may process this data outside the EU with GDPR safeguards (standard contractual clauses).
None of them may use the data for their own purposes.
5. How long we keep it
- For as long as you have the account. If you delete it, your data, your households and the children’s profiles in them are deleted immediately.
- The alert history is deleted automatically after 60 days.
- If an adult deletes a child’s profile, that child’s data is deleted, including from past rankings.
- Technical backups are kept for a few days so the service can be restored after a failure.
6. Your rights
You can access your data, correct it, delete it, object to or restrict its use, and ask for a copy. Write to us at privacy@homeodyssey.app. If you think we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos).
To delete the account and all its data: in the app, Profile › Delete my account, or follow these instructions.
7. Security
Communications are encrypted (HTTPS), passwords and PINs are stored encrypted, each family can only see its own data and we limit sign-in attempts.
8. Changes
If we make a significant change to this policy, we will let you know in the app before it takes effect.