Privacy Policy

Dehay Family Moments ("we", "us", "the app") respects your privacy. This policy applies to the Dehay mobile app on iOS and Android.

The service is operated by the publisher of Dehay Family Moments. Until company registration is complete, the publisher is personally the data controller. Company details will be added here when available. Contact: privacy@dehay.app.

• Account data: email, full name, date of birth, gender, country.
• Profile (optional): profile picture, bio, phone, address, relationship status, social links.
• Content: posts, photos, videos, comments, reactions, messages, events, and D-hay videos.
• Family tree: relationships and members you create, including people without their own account.
• Usage data: sign-in times, sessions, aggregated activity statistics, views and clicks on information posts.
• Notifications: push tokens for devices where you enable notifications.
• Security and diagnostics: reports, error logs (message, screen, app version, device info).

Optional profile fields are only processed if you choose to provide them.

• To deliver and operate the app (contract, GDPR art. 6(1)(b)).
• To secure your account and prevent abuse (legitimate interest, art. 6(1)(f)).
• To improve the app through aggregated, anonymous statistics (legitimate interest).
• To send push notifications you opt in to (consent, art. 6(1)(a)).
• To comply with legal obligations (art. 6(1)(c)).

Error logs are used only for debugging and security.

Content you publish is visible only to members of the family groups you share with, according to visibility settings. We never sell your data and do not use it for third-party advertising profiling.

Technical providers (Supabase for authentication and database, Cloudflare for media storage and delivery) process data on our behalf under data processing agreements (GDPR art. 28).

In the family tree you may add information about people who do not have a Dehay account. You are expected to only add information you have the right to share. Anyone added may request removal by contacting us or the person who added them.

Data is stored while your account is active. When you delete your account there is a 30-day grace period, after which personal data and content are permanently removed from production systems. Backups are overwritten on a rolling basis.

• Error logs: up to 90 days.
• Aggregated analytics: up to 12 months.
• Submitted reports: up to 24 months for documentation.

Depending on your location you may have rights to access, correct, delete, export, restrict, or object to processing of your data, and to withdraw consent (for example push notifications in device settings). Contact privacy@dehay.app — we normally respond within 30 days. You may also lodge a complaint with your local data protection authority.

The app uses secure on-device storage (for example iOS Keychain, Android Keystore, and encrypted app storage) to keep you signed in and cache data for performance. We do not use third-party advertising trackers or cross-app tracking.

We use encryption in transit (HTTPS/TLS), row-level security in the database, and authentication via Supabase Auth. Passwords are never stored in plain text. Access to production data is restricted to authorised personnel.

We do not make automated decisions with legal effects on you. Content may be automatically hidden after repeated reports, but manual review takes place before permanent action.

The service is not intended for children under 13. If we learn that an account was created in breach of age requirements, we may suspend or delete it.

Dehay is available internationally. If you use the app outside Norway, your data may be processed in the EU/EEA or other regions where our providers operate. We apply appropriate safeguards required by applicable law.

If this policy changes in a material way, we will notify you in the app at least 14 days before the change takes effect.

Privacy questions: privacy@dehay.app.