Privacy policy

Who is responsible for the data

Lanibo is a family app for tasks, notes and points. The data controller is Nikolay Dimitrov (support@lanibo.com). Write to this address with questions or requests about your data.

Policy version: 2026-10-20.

What we store

Account: display name, username (children) or email (adults), password (only in hashed form), role in the family (parent or child), chosen language, profile photo (if you add one).

The family's content: tasks and recurring tasks (title, description, deadline, time, assignee, status, points, picture, steps), notes and their history, categories, points, bonuses, rewards, reward ideas and requests for them, goals, the wheel of fortune, members' colours, family settings (name, time zone, town for the weather, morning summary, quiet hours, children's bedtimes).

Family life: events, birthdays and anniversaries (with gift ideas — the person they're for sees only their own), reactions, the daily mood (optional), shopping lists, recipes, pets and their vaccines, packing lists, school timetables, the family wall (messages and photos), important information and sizes, wish lists, cars (deadlines and fuel) and documents (only the kind, whose it is and the expiry date — no numbers).

Photos and files: only those you upload yourself — to the wall, as a profile photo, or attached to a task, event, note or other item (photos and PDFs, such as tickets). They are kept in private storage that only the family can access (an attached file, only those who can see its item). Before upload a photo is made smaller and data such as where it was taken is removed. The phone keeps a copy of the coming events' files so they open without internet.

Technical data: the phone's notification identifier; a secret calendar link, if you use one; the secret address of your own outside calendar (Google etc.), if you bring it in — only its owner can see it; an access key to your Google Calendar, if you connect it, and a key for Alexa, if you link the skill; a log of when reminders were sent; feedback you write to us (the text, the app's version, the kind of phone).

Anonymous statistics — only if you agree: how often parts of the app are used per day and how many people were active (as a one-way hash). No names, no content. You can switch it off in your Profile.

Error reports: when the app crashes, a technical report (the error and where in the code it happened) is sent with the user's internal number. No names, emails, IP addresses or screen recordings.

Apart from the optional location features below, we do not use your phone's location; for the weather, the town you choose is stored with the family. We collect no contacts or advertising identifiers and use no ads. Adding by voice uses your phone's speech recognition (Google on Android, Apple on iPhone) — it is processed under their terms, and the app only receives the text.

On iPhone: the titles of open tasks, notes (not private ones) and recipes, and the names in the family, are added to the phone's own search (Spotlight, Siri) — on the device only, not sent to Apple. Logging out removes them.

To run and support the service, the app's operator sees a few service details per family: how many members of each role, when the family was created and was last active (the day only), how many tasks and other items it did or added in the last 30 days (counts only, never what is in them) and which phones it uses (iPhone or Android). Nothing from the content, and nothing from the anonymous statistics.

Why, and on what basis

To run the app for your family: everything listed above is the service itself (performance of a contract, GDPR art. 6(1)(b)).

Children's accounts: created only by a parent, who consents to the processing of the child's data (GDPR art. 8; in Bulgaria parental consent is required under 14). The consent is recorded — who, when, and for which version of this policy.

Anonymous statistics: only with your consent (art. 6(1)(a)); you can withdraw it at any time.

Error reports and feedback: to find and fix problems and improve the app (legitimate interest, art. 6(1)(f)).

Service details for the operator: to run, support and protect the service (legitimate interest, art. 6(1)(f)).

Children

Children have no email in the app — they log in with a username and password given by a parent. Parents see and manage their accounts and can delete them at any time.

Children don't see the parents' notes, documents or parents-only information. The points ranking is visible only within the family. There are no ads and no in-app purchases, and data is never sold or used for profiling.

Who else receives the data

Supabase — database, files (photos) and login; servers in the EU (Frankfurt, Germany).

Expo (650 Industries, USA) — app updates, the web version, and sending notifications. A notification's title and text and the phone's identifier pass through them.

Google Firebase Cloud Messaging — delivering notifications to Android phones. Apple Push Notification service — to iPhones.

Sentry — error reports and feedback; stored in the EU (Germany).

Open-Meteo (Switzerland) — the weather forecast; it only receives the coordinates of the chosen town, nothing about people.

Cloudflare (USA) — the lanibo.com website and the web app's address app.lanibo.com go through them; they also forward e-mails to support@lanibo.com. On sign-up in the browser, their Turnstile check makes sure you're not a robot — it sees technical data about the browser, not account data.

Resend (USA) — sends the app's e-mails (confirming the e-mail address, a new password); it receives the e-mail address and the e-mail's text.

Google Calendar — only if a parent connects theirs: family events they take part in go to their Google Calendar, and changes made there come back; Google processes them under its terms. "Disconnect" stops it.

Lanibo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. Google Calendar data is used only to keep the family's events in sync with the parent's own calendar: it is not used for ads, not sold, not shared with anyone else, not used to train AI models, and no person reads it unless you ask us for help with it or the law requires it.

Amazon Alexa — only if you link the Lanibo skill: Alexa receives what you ask it and the answer (e.g. the shopping items, today's tasks). Disable the skill in the Alexa app to turn it off.

When you bring in a recipe from a link or an outside calendar, our server reads that page or address; they only see the server's request, no data about you.

Where a provider is outside the EU, transfers rely on the safeguards it offers (EU standard contractual clauses or the EU–US Data Privacy Framework).

Calendar: if you turn on writing to the phone's calendar, tasks are stored on your phone and wherever it syncs that calendar (e.g. iCloud). If you use the subscription link, the calendar app reading it (e.g. Google Calendar) receives the tasks. Anyone with the link sees the tasks — keep it like a password. The same goes for a shopping list link you share (e.g. with grandma): whoever has it sees and changes only that list, until you turn it off.

Activity from Health (optional)

If you allow it on the phone, the app reads from Apple Health (iPhone) or Health Connect (Android) only four numbers for today: steps, movement minutes, walking or running distance and cycling distance. It doesn't read heart rate, weight, sleep, food, cycle or anything else, and writes nothing to Health.

These numbers are shown on your phone only and sent nowhere. When a task has a goal (e.g. "8000 steps"), the phone tells the server that task's number so it can tick the task once the goal is reached.

The number is kept on the server only if a parent has turned on "Progress from Health" for that person (themselves or their child) — then the family's parents see today's number on tasks with a goal. Only the latest number is kept and it is deleted after 2 days; turning it off deletes it at once. Basis: consent given by the parent, which can be withdrawn at any time.

Health data is not used for advertising, not sold, and never reaches the AI assistant.

Location (optional)

The app uses the phone’s location only while you use it (“while using the app”), never in the background on its own. There are four uses:

“Share my location” (Profile): the phone finds where you are and puts it in a map link that you send through an app you choose. The location doesn’t pass through our servers and isn’t kept.

“Last seen”: if a parent has turned it on for that person (themselves or their child), while Lanibo is open on that phone it sends where the phone is, and the family sees the point and how long ago. Only the latest point is kept, never a history, and it is deleted 24 hours after the last update; turning it off deletes it at once. Basis: consent given by the parent, which can be withdrawn at any time.

“On my way”: a person shares where they are live for the time they choose (up to 4 hours), also with the phone locked; the phone shows that it is sharing. The point is deleted when the sharing ends (or after 24 hours with “Last seen” on). Basis: your consent, given by starting it. A child can start it only after a parent has turned on “Last seen” for them; for a child the basis is that parent’s consent.

“Where are you?”: a family member asks another where they are. The person asked gets a notification and decides: “Share” sends where their phone is once (the latest point the phone knows, or a new one), and “Ignore” sends nothing. The shared point is deleted after an hour (or under the “Last seen” rules if it is on). We keep who asked whom for 1 day, to limit requests to one every 5 minutes. Basis: the consent of the person asked, given with “Share”, including a child.

Only members of your family see the location. It is not used for advertising, not sold, and never reaches the AI assistant.

Finances (optional)

If your family uses Finances, we keep what you enter: amounts, categories, notes, dates, the accounts you name (cash, a card…) with a starting balance, budgets and recurring entries. A paid bill and a car’s fuel are also written down as expenses. We never ask for or keep card numbers, bank logins or account numbers, and Lanibo does not connect to any bank.

A bank statement (CSV) you import is read on your device; only the rows you import are saved, as entries. The file itself is not uploaded.

The family’s parents see all of it; a child sees and adds only their own expenses and income. It is kept until you delete it, or the family. Basis: providing the service you use.

Your entries are not used for advertising, not sold, and not sent to the AI assistant. Only a receipt photo you choose to read with the assistant goes to it, as described below.

AI assistant (optional)

The assistant is off by default. A parent switches it on and off, for the whole family (Settings → Family). We keep who switched it on and when. Basis: your consent, which you can withdraw at any time by switching it off.

We count how many requests the family uses — only who and when, never what was asked — for the request limit; the app's admin sees only the counts per family.

Only parents use it. Children's voice adding works without it, on the phone only.

When you use it, we send the AI provider only what you give it — the sentence, the text or the photo — and the family members' first names, so it can tell who a task is for. We don't send other tasks, notes, history, e-mails or phone numbers.

The answer is a suggestion: you see it, and nothing is saved until you confirm. The photo isn't kept by us. We only use a provider that is contractually bound not to train its models on this data.

Provider: Anthropic (Claude API). It receives the data as a processor, under its commercial API terms — it does not use it to train its models. Its servers may be outside the EU; the transfer relies on the EU standard contractual clauses.

Google Calendar (optional)

Only if a parent connects their Google Calendar (Profile → Calendars). Lanibo then reads and writes events in that person's main Google calendar: the title, start and end, all-day flag and place of events from 7 days back to about 2 months ahead, plus the Google account's e-mail address (to show which account is connected). Other calendars are not touched.

Use: family events the parent takes part in are written to their Google calendar and kept up to date; changes and new events made in Google come back — family events are updated, and the parent's own events are shown to the family as "busy" (with their titles only if the parent turns that on). Nothing else is done with this data: no ads, no profiling, no AI (it is never sent to an AI service), not sold and not shared with anyone else.

Protection: the access key Google gives us is kept only on our server (Supabase, EU), never on phones or in the app; all traffic is encrypted (HTTPS) and the database is encrypted at rest; only the family's members see the family's events, and a person at Lanibo reads them only if you ask for help or the law requires it.

Keeping and deleting: the data is kept while the connection is on. "Disconnect" deletes the access key, the links between events and the parent's imported Google events at once (events in Google stay as they are). Deleting the account does the same. Backups are deleted within 90 days. You can also remove Lanibo's access at myaccount.google.com/permissions.

How long

As long as the account exists. When an account is deleted, the person's login, name, points and profile photo are deleted at once; tasks, notes and posts stay with the family, no longer linked to them. When the last member is deleted, the whole family is deleted.

Shorter: the mood — 30 days; the weather forecast — 14 days; cleared shopping items — 90 days; anonymous statistics — up to 400 days, only as daily counts; the log of sent reminders — up to 60 days.

Nightly database backups are kept up to 90 days, then deleted automatically. Error reports — for a limited time according to Sentry's settings.

Cookies and browser storage

lanibo.com and the web app (app.lanibo.com) set no cookies: none for ads, tracking or analytics. That is why there is no cookie banner.

The web app keeps your login and a few settings (language, look) in your browser's own storage, because it can't work without them; logging out removes the login. The website only remembers that you closed the language bar.

If you arrive through a link that says where it came from (for example a friend's recommendation, "?src=invite"), the web app keeps that one word until you sign up and saves it with the new family, so we can see how families find Lanibo. Nothing else about you is attached to it.

Your rights

You can ask for access to your data, correction, deletion, restriction of processing, object, or withdraw consent. Parents can download all of the family's data from Settings → Family → "Download the family's data".

You may complain to the Bulgarian Commission for Personal Data Protection (www.cpdp.bg) or the authority in your country.

How to delete an account: see the "Delete your account" page.

Deleting your account

Deleting a Lanibo account

An adult deletes their own account: Profile → "Delete my account". The last parent of a family with children cannot leave while there are children — remove them first (see below).

A child's account is deleted by a parent: Settings → Family → "Remove" next to the child's name.

If you can't use the app, write to support@lanibo.com from the account's email (for a child, from the parent's email) and we will delete the account within 30 days.

What is deleted and what stays

Deleted at once: the person's login, name, role, points, notification identifiers and calendar link.

Stays with the family, no longer linked to the person: tasks and notes they wrote or did (they belong to the family). If the person is the last one in the family, everything of the family is deleted.

Database backups are deleted automatically within 90 days.

Deleting data without deleting the account

Everything in the app can be deleted on its own, and the account stays: a task, event, note, shopping item, recipe, photo, document or wall post — open it and tap the bin.

To delete more at once — for example all photos or the family's whole history — a parent writes to support@lanibo.com from the account's email and says what to delete. We do it within 30 days; the family's accounts stay.