Privacy Policy

Version 2, last updated: 13 November 2026

Who controls your data

The controller of your personal data is EnviHub Danilo Laković, ul. Gen. Józefa Longina Sowińskiego 46/1c, 40-018 Katowice, NIP 6772246431, REGON 369488406 ("we"). For anything about your personal data, write to us at privacy@capyweek.com.

CapyWeek is an app that helps parents who live apart agree on and follow a care calendar for their children. This policy explains what data we process, why, who we share it with, how long we keep it and what rights you have.

What data we process and why

We process the data you enter in the app and the technical data the app needs to work. For each purpose we state the legal basis under the GDPR.

• Account and profile (email address, first and last name, phone number, profile photo, chosen language): so you can sign in and so the other parent knows who they are arranging the calendar with. Basis: performance of a contract, Art. 6(1)(b) GDPR.
• Family and parents' places: who belongs to a family, which of the two parent places each parent holds, and the observer role. Basis: performance of a contract.
• Children's profiles (name, date of birth, photo): so the calendar, events and handoff lists refer to the right child. Basis: performance of a contract.
• Schedules and court-order rules (care rules, holidays, school breaks, handoff places with their addresses, pick-up times): to work out the care calendar. Basis: performance of a contract.
• Exceptions, change proposals, approvals and comments: so parents can agree on departures from the schedule. Basis: performance of a contract.
• Family events and handoff checklists: so you both see the same plans and the same lists of things to hand over. Basis: performance of a contract.
• Push notification token and notification settings: to send reminders about handoffs and changes. Basis: performance of a contract.
• Account emails (address confirmation, password reset, account deletion notices): to run the account. Basis: performance of a contract.
• Records of accepted documents and consents (document version and time): so we can show that the Terms of Service and the Privacy Policy were accepted, or that consent was given. Basis: our accountability duty, Art. 6(1)(c) and (f) GDPR.
• Crash reports (technical data about a crash; the user field is removed and the IP address is not stored): to find and fix bugs. Basis: legitimate interest, Art. 6(1)(f) GDPR.

Profile photos and children's photos are stored at an address that is hard to guess and that only family members are given. Anyone who knows the exact address of a photo can still open it without signing in, so do not pass that address on.

Children's health details

Allergies, medical notes and the name, phone and address of a child's doctor are data concerning health, which is special-category data. Providing them is optional. Before you save them for the first time we ask for your explicit consent as the child's parent (Art. 9(2)(a) GDPR).

• What we store: allergies, medical notes, and the doctor's name, phone and address.
• Who can see it: only this child's parents in CapyWeek. Family observers never see it.
• Why: so you both have the important details at hand at a handoff.
• Withdrawing consent: either parent can withdraw consent in the child's profile at any time. The health details are then deleted from CapyWeek immediately, for both parents. Withdrawing consent does not affect the lawfulness of processing before it was withdrawn.
• Removing a child: when a child is removed from the family, the child's health details are deleted from CapyWeek immediately, for both parents, and the consent given for them ends.

Data about the other parent and children that you enter

When you enter details about a child or about the other parent, you act for the family. The other parent, who joins the family through an invitation, sees the family's data to the extent their role allows and accepts this policy themselves when they create their account. Do not enter data of people who are not part of your family in CapyWeek.

Who processes data for us

We use providers who process data on our behalf. We do not sell data and we do not share it with anyone for their own purposes.

• Supabase: database, sign-in and file storage. We keep data in the European Union region.
• Google Firebase Cloud Messaging: delivery of push notifications to the phone.
• Google: signing in with a Google account. For your Google account itself, Google is a separate controller.
• Sentry (European data centre): crash reports, without the user field and without the IP address.
• Brevo: sending account emails.
• Cloudflare: serving the capyweek.com website.
• Google Play: distribution of the app to Android phones.

Transfers outside the European Economic Area

Some providers belong to groups outside the European Economic Area. When data leaves the EEA, we rely only on a mechanism the GDPR provides for: a European Commission adequacy decision (including the EU-US Data Privacy Framework) or standard contractual clauses.

Calendar sync

Calendar sync is off until you turn it on. Once it is on, CapyWeek writes your care days (including handoff times and handoff places with their addresses) and your family events (title, child's name, time, location and notes) into the one calendar on this phone that you choose. If that calendar belongs to a Google, iCloud or other account, the account provider stores and syncs those events under its own terms, and anyone with access to that calendar can read them. On an Android phone the events go into a Google calendar you choose, and anyone who can see that calendar sees them. On an iPhone you can also choose a dedicated CapyWeek calendar. CapyWeek creates no shareable link to your events. CapyWeek only changes or removes events it added itself. It removes all of them when you turn sync off, when you choose another calendar, when you sign out and when you delete your account. Events stay in your calendar if you uninstall the app, or if you delete your account on another device and never open CapyWeek on this phone again; you can then delete them in your calendar app.

How long we keep data

• We keep account and family data until you delete your account.
• After you request deletion, a 30-day grace period applies. During it the account is locked and you can cancel the deletion. After 30 days your account and profile data are deleted.
• Data the other parent still uses (agreed schedules, approved exceptions, events, places, handoff checklist items) stays, but without any reference to you as a person. A family in which no member has an active account any more is deleted entirely, together with the children's data.
• A child's photos are deleted when the child or the whole family is removed.
• A child's health details are deleted, and the consent for them ends, as soon as the child is removed.
• A data export archive can be downloaded for 15 minutes after it is generated, and its copy is deleted after about two days at the latest.
• We keep crash reports for a limited time, after which they are deleted automatically.
• Our provider keeps email delivery logs for a limited time.
• Records of accepted documents are kept as long as the account. The record of consent for a child's health details lasts as long as that data.

Your rights

You have the right to access your data, have it corrected, erased or restricted, receive it in a portable form, and object to processing based on legitimate interest. Where processing rests on consent, you can withdraw it at any time.

• Access and portability: you can export your data to an archive in the app.
• Erasure: you can delete your account in the app, and after the 30-day grace period we delete your data. The steps are also described at capyweek.com/en/delete-account.
• Other rights: write to privacy@capyweek.com.
• Complaint: you have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa).

What we do not do

We do not profile users and we make no automated decisions about anyone. We show no ads and we do not sell data. The app is intended for people aged 18 or older.

The capyweek.com website is a plain static site: it sets no cookies and runs no analytics.

Changes to this policy

When we change the policy in a material way, we publish a new version and ask you to accept it in the app before you keep using it. Minor editorial fixes only change the last updated date.