Privacy policy

Who processes your data

The operator and data controller is VERTISPACE s.r.o., company ID 21095566, VAT CZ21095566, Lidická 700/19, Veveří, 602 00 Brno, Czech Republic, registered in the Commercial Register kept by the Regional Court in Brno, section C, file 137480.

For any privacy question, write to ahoj@iskrik.sk.

Website iskrik.sk and iskrik.cz

• Technical logs: our hosting provider briefly processes your IP address and browser details to run the site and protect it from attacks.
• Google Analytics 4 runs only with your consent (cookie banner). It helps us see which parts of the site help parents: pages viewed, device type, approximate country. Advertising features and Google signals are off and data is kept for 14 months. You can change your choice anytime via “Cookie settings” in the footer.
• Without consent the site stores no analytics or advertising cookies.

The Iskrík app – what we process

• Parent account: name, e-mail, password (stored only as a hash). Signing in with Google is optional.
• Family: family name, settings (language, time zone, photo retention), invitations for a second parent.
• Kids: the profile is created by a parent – name, year of birth, gender, colour, avatar and dragon. If a parent creates a login for the child, also a username and password (hashed).
• Activity in the app: tasks, completions and approvals, XP, coins, jars, rewards, badges, school records and kudos within the family.
• Photo proof: photos of completed tasks. We strip the location (GPS) on upload, only family members can see them, and they are deleted automatically after the period the parent sets (7 to 365 days).
• Notifications: if you enable them, a technical device identifier used to deliver them.
• Security log: important changes in the family (who and when) so they can be traced.
• App usage statistics: anonymous and cookieless (Vercel Web Analytics), with identifiers removed from URLs. No Google Analytics or other tracking in the app.

Why and on what legal basis

• Providing the app under its terms of use – Art. 6(1)(b) GDPR.
• Kids' data is entered and managed by a parent as their legal guardian. Kids never see ads, buy nothing in the app and never see siblings' data.
• Security, abuse prevention and anonymous statistics – legitimate interest, Art. 6(1)(f) GDPR.
• Google Analytics on the website – your consent, Art. 6(1)(a) GDPR.

Who we share data with

We do not sell data or share it for advertising. Only providers that run the service for us (processors) handle it:

• Vercel Inc. – hosting of the website and app (servers in Frankfurt, US company), anonymous app statistics.
• Neon (Databricks) – database, AWS Frankfurt region.
• Cloudflare – photo storage located in the EU.
• Resend – sending e-mails (invitations, password reset).
• Google – optional Google sign-in and Google Analytics on the website (consent only).

Where data is transferred outside the EU (mainly to the USA), this is based on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep data

• Account and family data for as long as you use the account. You can delete the family and all its data anytime in the app's Settings.
• Photo proof per the family's setting (7 to 365 days), then deleted automatically.
• Deleted data disappears from backups as they are routinely overwritten.
• Google Analytics data for 14 months.

Your rights

• Access and portability – download an export of the whole family (ZIP) in the app's Settings.
• Rectification and erasure – edit data directly in the app or delete the family.
• Restriction and objection to processing based on legitimate interest.
• Withdrawing consent to Google Analytics – anytime via “Cookie settings”.
• A complaint to a supervisory authority: in Slovakia the Úrad na ochranu osobných údajov SR (dataprotection.gov.sk), in the Czech Republic the Úřad pro ochranu osobních údajů (uoou.gov.cz).

If you need anything, write to ahoj@iskrik.sk. We reply within one month at the latest.

Security

Traffic is encrypted (HTTPS), passwords are stored only as hashes and a family's data is visible only to its members. Kids cannot change passwords, approve their own tasks or see siblings' data.

Changes

If we change this policy, we will publish the updated version on this page and notify you in the app about significant changes.