Template — it has to be completed and checked by a lawyer before launch.

Replace every {{PLACEHOLDER}} below and have the result reviewed by a lawyer for the jurisdiction you operate in. This is a structural starting point, not legal advice. Translating it changes none of that — the text has not been through a legal review yet.

Privacy Policy

Effective from: 2026-09-02

1. Introduction

Welcome to Domilo. We care about your privacy and about your personal data being handled securely and responsibly. This document describes what data we collect, how we use it, where we store it and how we protect it when you use our web application for sharing chores among everyone in the household.

2. Data collection and use

What data we collect and why:

  • Registration data:
    • Data collected: name, email address and profile picture URL (when signing in with Google).
    • Purpose: creating and managing your account.
    • Legal basis: performance of a contract.
  • Payment data:
    • Data collected: processed directly by Stripe and/or Paddle (depending on the region); we do not store it.
    • Purpose: processing payments.
    • Legal basis: performance of a contract.
  • Cookies and tracking technologies:
    • Data collected: cookies and similar technologies.
    • Purpose: signing users in and analysing traffic with Google Analytics.
    • Legal basis: legitimate interest for essential cookies and consent for the others.
  • Account emails:
    • Data collected: your email address, name and the interface language you last used (English, Czech or Slovak), so the emails are written in it.
    • Purpose: emails needed to run your account — confirming your address, resetting your password, a welcome email after you confirm your address, and a notice shortly before your trial ends. They are sent regardless of the choices below.
    • Legal basis: performance of a contract.
  • Optional emails (tips and news):
    • Data collected: your email address, name and language; whether you agreed, when and where (on the sign-up form, in the one-time question in the app, in your account settings or through a link in an email); and which of these emails we have sent you, so none is sent twice.
    • Purpose: "Tips for getting started" — a few emails while your household gets going, such as a reminder if it has not been set up a few days after sign-up; and "News" — occasional news about new features, a few times a year at most. We send them only if you tick them; both are off by default.
    • Legal basis: consent, which you can withdraw at any time (see section 10).

Data sharing:

  • We share your email address with Stripe and/or Paddle (depending on the region) for the purpose of processing payments. Other payment details are entered by the user directly into Stripe or Paddle.
  • We do not provide your personal data to any other third parties, except where required by law or to protect our rights.

3. Cookies and tracking technologies

We use cookies to sign users in and to analyse traffic with Google Analytics. Cookies are small text files stored on your device that help us provide a better service.

Which cookies we use:

  • Sign-in cookies: essential for the site to work and for managing sessions.
    • __Host-authjs.csrf-token: protects against CSRF attacks. Lasts for the session.
    • __Secure-authjs.callback-url: redirects the user during sign-in. Lasts for the session.
    • __Secure-authjs.session-token: keeps the session across pages. Lasts one month.
  • Google Analytics cookies: help us understand anonymously how the site is used.
    • _ga: distinguishes individual visitors using a randomly assigned identifier. Lasts 2 years.
    • _ga_<container-id>: keeps the session state and counts page views. Lasts 2 years.

Our own usage statistics (no cookies):

  • Besides Google Analytics, we count page and app-screen views ourselves so we can see which parts of the service are used. This uses no cookies and stores no IP address: a visit is recognised by a one-way hash of the IP address and browser that is salted afresh each day and never kept, together with the page address (without query parameters), language, country, device type and the website that referred you.
  • For signed-in accounts we also record a few product events (signing up, signing in, one visit a day), and we compute aggregate figures from the household data itself (households set up, chores completed and confirmed, meetings held). Only aggregates are shown, and groups too small to be anonymous are merged.
  • If you turn analytics off in the cookie settings, or your browser sends Do Not Track or Global Privacy Control, page views from your browser are not counted.
  • Signed in, you can switch usage analytics off under Account → Privacy, or on the profile screen in the app. Switching it off deletes the events recorded for your account and leaves your account out of all statistics from then on.
  • Page views and events are deleted after 400 days.

Cookie consent:

  • On your first visit, you will see a banner that informs you about the use of cookies and links to this document. You can accept all cookies or choose which ones to allow.
  • You can change your choice at any time in the cookie settings.

4. Data storage and security

Storage:

  • User data is stored in cloud storage within the EU.

Retention period:

  • Registration data: we keep it for as long as needed to provide the services and for the purposes stated in this document. If you delete your account, we permanently remove your personal data within 30 days, except where we are required to keep it for legal, regulatory or security reasons.
  • Cookies: see the section on cookies and tracking technologies.

Security measures:

  • Communication with our server is encrypted.
  • Access to data is controlled so that only authorised persons can reach it.

5. User rights

Under the GDPR, you have the following rights:

  • Right to be informed: you have the right to know what data we collect about you and why.
  • Right of access: you can request a copy of the personal data we hold about you.
  • Right to rectification: you can ask us to correct inaccurate data.
  • Right to erasure ("right to be forgotten"): you can ask us to erase your personal data.
  • Right to restriction of processing: you can ask us to restrict the processing of your data.
  • Right to data portability: you can request your data in a commonly used format.
  • Right to object: in certain circumstances, you can object to the processing of your data.
  • Right not to be subject to automated decision-making: you have the right not to be subject to a decision based solely on automated processing, including profiling, where such a decision has legal effects on you or similarly significantly affects you.

To exercise any of these rights, write to us at support@mydomilo.com. We will reply within one month. This period may be extended by a further two months if the request is complex or if we receive a large number of them; we will tell you about any extension within one month of your request.

6. Children's privacy

Our application is not intended for children under 16, and we do not knowingly collect personal data from them. If we find that we have obtained personal data of a child under 16 without verified parental consent, we will take steps to delete it.

Note for the legal review: in the application, children's profiles are created by a parent, who also enters the child's data (name or nickname, age). Please add how this section applies to such profiles and to parental consent.

7. Transfers of data outside the EU

If we transfer your personal data outside the European Economic Area, we protect it with appropriate safeguards, such as the standard contractual clauses approved by the European Commission.

8. Data breach notification

In the event of a personal data breach, we will notify the affected users and the relevant supervisory authorities within 72 hours, as required by the GDPR. The notification will describe the nature of the breach, its likely consequences and the measures taken.

9. Changes to this document

We regularly review and update this privacy policy to keep it in line with legal requirements. Changes will be published on this page; we will notify you of significant changes by email or directly in the application.

Obtaining consent:

We obtain explicit consent for the use of cookies and for the processing of personal data for specific purposes.

Managing and withdrawing consent:

You can manage and withdraw your consent to cookies at any time in the cookie settings. You can turn the optional emails (tips and news) on or off at any time in your account's email settings, on the profile screen of the mobile app, or with the unsubscribe link at the bottom of every such email, which works without signing in; withdrawing takes effect straight away. You can withdraw your consent to the processing of personal data by emailing support@mydomilo.com. Withdrawing consent may limit our ability to provide the services in full. Withdrawal does not affect the lawfulness of processing carried out before it.

11. Contact

For any questions about privacy, contact support@mydomilo.com.

Product
About
© 2026, mydomilo.com. Read the terms and conditions and the privacy policy. Manage your cookie settings.