Privacy policy

For the Domeleo app and the website domeleo.com · Last updated: November 2026

This is a translation. The German version (Datenschutzerklärung) is the binding one.

Domeleo is a private app for families. What matters to us: no ads, no tracking, no selling of data. What your family shares can only be seen by the people you invite. Below you'll find exactly which data we process, why, and what your rights are.

1. Who is responsible

2. This website

The website is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). When you open it, technically necessary data is processed (IP address, date and time, page, browser and device details) to deliver the page and protect it against misuse. Legal basis: our legitimate interest in running it securely (Art. 6(1)(f) GDPR). Transfers to the USA rely on the EU-US Data Privacy Framework or standard contractual clauses. The website sets no cookies, uses no analytics and loads no fonts or content from other providers.

3. The app

3.1 Account and sign-in

To sign in you only need your email address. We email you a sign-in code; there's no password. We store your email address, your app language (so emails come in your language) and technical sign-in data. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

3.2 What your family shares

For Domeleo to work, we store what you create in the app, for example:

• Profiles: names, birthdays, profile photo, optionally phone number, sizes, likes, where people come from
• Photos, videos, voice messages, messages, comments and stories
• Calendar entries, plans, trips, lists, recipes, wish lists, polls
• Expenses and the household budget
• Countries visited and places you'd like to go, for the world map (no location tracking)

This content is only visible to the members of the circle or group it belongs to (for example, the wider family sees nothing from the household, and secret groups stay hidden from the person they're about). Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

The data is stored with Supabase (Supabase Pte. Ltd., 970 Toa Payoh North #07-04, Singapore 318992) in a data centre in Frankfurt, Germany (EU), under a data processing agreement. Where Supabase may access data from outside the EU for maintenance and support, this is covered by standard contractual clauses. The app also keeps a copy on your device so it works without internet.

3.3 Data about other family members and children

In Domeleo you often enter details about other people, such as birthdays or photos of your children or parents. Please only share what those people (or, for children, their parents) are happy to share. Children can be added without an account of their own and are then managed by their parents.

3.4 Emails

Sign-in codes and the weekly family email are sent through Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France) as our processor. You can switch off the weekly email (Sundays: what's coming up and what's new) at any time in Settings or with the link in every email. Legal basis: Art. 6(1)(b) GDPR, and for the weekly email our legitimate interest in keeping you up to date with your family (Art. 6(1)(f) GDPR).

3.5 Notifications

If you allow notifications, we store a device token, your language and which notifications you want. They are delivered through Firebase Cloud Messaging (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland); data may be transferred to Google LLC in the USA (EU-US Data Privacy Framework). Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in the app or in your phone's settings.

3.6 Phone calendar link

If you ask for it, the app creates a private link that your phone's calendar subscribes to (birthdays, plans, trips, events). Anyone who has the link can see these dates. You can make a new link at any time; the old one then stops working.

3.7 Subscriptions and payments

Subscriptions (Domeleo Plus) are paid through Google Play or Apple's App Store; they process the payment and your payment details under their own responsibility. We manage the subscription status with RevenueCat (RevenueCat, Inc., 1032 E Brandon Blvd #3003, Brandon, FL 33511, USA) as our processor. RevenueCat only receives a random identifier of your circle and purchase details (product, term), no names or content. Transfers to the USA rely on standard contractual clauses. Legal basis: Art. 6(1)(b) GDPR.

3.8 Weather, exchange rates and holidays

For some features the app asks public services directly: Open-Meteo (weather for trip destinations, Switzerland), Frankfurter (exchange rates) and OpenHolidays API (school holidays, Germany). Only the place, currency or region is sent, no content and no names; for technical reasons these services see your device's IP address. Legal basis: Art. 6(1)(b) GDPR.

4. How long we keep data

We keep content as long as it exists in the app. What you delete is deleted; stories disappear automatically after 24 hours (unless kept in an album). Server backups are overwritten after at most 7 days. When an account is deleted, the sign-in data and the content of that person are removed immediately; their files are removed from storage within an hour (see section 5).

5. Deleting your account

You can delete your account at any time in the app: tap your picture at the top → Online & sign-in → Delete my account. This deletes your sign-in, your email address, your link to the family and your profile, together with the photos, videos, messages, stories, comments and wishes you added (also in shared albums). Things that belong to the whole family (shared plans, lists, recipes, expenses) stay for the others and show you as “Former member”. You can also ask us by email at privacy@domeleo.com. More: Delete your account.

6. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20 – in the app, “Your memories stay yours” lets you download everything) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time for the future. Just email privacy@domeleo.com.

You can also complain to a data protection authority, for example the one responsible for us: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.

7. Security

All connections are encrypted (TLS). On the server, access rules make sure each person can only read the content of their own circles and groups. Photos and videos are only delivered through time-limited links.

8. Changes

When the app changes, we update this policy. The current version is always at domeleo.com/privacy.

← domeleo.com · Legal notice · Deutsche Fassung