Vi is an app for planning family life together. This page explains what the app stores, why, and what you can do about it.
Who is responsible
Vi is made and run by Lasse Rolstad as a private person in Norway. He is the data controller. You can reach him at Lasse.rolstad@outlook.com.
What we store
- Your account: name, email address, and whether you signed in with Apple, Google or Microsoft. We never get your password.
- Your family: the family name, who is a member, and their role and color.
- Kids: the name and color of kid profiles that a parent adds, and who the kid is connected to (for example a parent or grandparent).
- What you add: calendar events with title, time, place, notes, repetition and who they are for.
- Invites: invite codes and who made them. Codes expire.
- Consent: which version of the terms you accepted, and when.
- Access log: changes to who has access, with IDs only. See How long.
- Photos: profile photos of members and kids that someone adds.
- Notifications: a device token, so the server can tell the phone that something changed. It is removed when you sign out or delete your account, and otherwise deleted after 270 days without use.
- Crash and error reports: see the section below.
- Feedback from testers: see the section below.
Why
We use the data only to give you the service: sign you in, show your family's calendar and share it with the people you choose. The legal basis is our agreement with you when you use the app (GDPR Article 6(1)(b)). We keep the consent record, the error reports, the backup and the access log because we have a legitimate interest in showing what you accepted, in fixing errors, in being able to restore data after errors and in documenting who gave access and consent (Article 6(1)(f)).
We don't sell data, show ads or use analytics tools to track you.
Who can see it
What you add is seen only by the people in your family. Events marked "household only" are seen only by your household. A kid who lives in more than one home is shared with the adults connected to that kid, but they don't see the rest of your family.
Who processes data for us
- Microsoft (Azure), Sweden (EU): database, server and photos.
- Auth0, EU region: sign-in.
- Google Firebase Cloud Messaging (FCM): a device token and a signal that something changed, without content.
- Google Firebase: sign-in and the database (EU, europe-west) until the move to our own server is complete.
- Microsoft (Azure): these web pages, served from Microsoft's global network. Your IP address is processed when you open a page, and we store nothing there.
- Apple, Google and Microsoft when you sign in with your account there. They see that you sign in to Vi.
- Sentry (EU region, Frankfurt) for crash and error reports and feedback from testers.
- Apple (Apple Push Notification service, APNs): the same limited data as FCM, for iPhone.
Some of these may process data outside the EEA, for example in the US. This then happens under a data processing agreement and the EU standard contractual clauses (SCCs). Everything is encrypted in transit and at rest.
Crash and error reports
When the app crashes or hits an unexpected error, it sends a report to Sentry, which processes it on our behalf. The report contains a stack trace, the app version, the phone model, the version of the phone's operating system (Android or iOS), a hashed user ID and an installation ID. It does not contain names, email addresses, family or calendar content. Reports are stored in the EU (Frankfurt) and deleted after 30 days. Sentry stores our organization's account details in the US, under a data processing agreement and standard contractual clauses (SCCs). We use the reports only to find and fix errors.
Feedback from testers
Selected testers can send us feedback from the app, by shaking the phone or from Settings. It is sent only when the tester chooses to send it. The feedback contains what the tester writes, a screenshot of the screen the tester was on (it may show what was on screen, and the tester can leave it out each time) and technical details: the app version, the phone model, the version of the phone's operating system (Android or iOS), the language, the theme, the text size, which screen it concerns, the number of families, the last steps in the app and a hashed user ID. The tester's name and email are included only when they tick Include my name and email, so we can reply; it is unticked by default. It is sent to Sentry, stored in the EU (Frankfurt) and deleted after 30 days. We use the feedback only to fix problems and improve the app.
Your phone's calendar
If you turn it on, Vi puts a copy of the events you see in Vi, with notes and the names of the people they are for, in a separate calendar. On Android the calendar is on the phone, and the copy is not sent to us. On iPhone the calendar is called Vi and is in your own iCloud, so it shows on your other Apple devices. iCloud is your own service, and it is not a processor for Vi. Birthdays are not copied. The copy is removed only where Vi runs: when you turn it off, sign out or delete the account on a device with Vi.
Vi reads your phone's other calendars only when you open Import from phone in the settings. Only when you tap Import are the events from the calendars you chose stored in Vi and shared with your family, like any other event. Vi never changes your phone's calendars.
Kids
Kid profiles are made by a parent or guardian, who is responsible for what is added about the kid. You must be at least 13 to have your own account.
How long
We keep the data for as long as you have an account. When you delete an event or a kid, it is deleted. You can delete your account yourself in the app, or ask us by email; see Delete account. Your account and what belongs only to you are then deleted. A kid or an event that also belongs to another home stays with them.
- Account deletion: completed within 30 days.
- Backup: the database keeps a continuous backup for 7 days, so deleted data disappears from the backup after at most 7 days. The legal basis is our legitimate interest in being able to restore data after errors (GDPR Article 6(1)(f)).
- Photos: a deleted photo can be recovered for 7 days (soft delete) before it is gone for good. The legal basis is our legitimate interest in recovering from mistakes and errors (Article 6(1)(f)).
- Access log: changes to who has access (membership, guardianship, invites created or used, consent) are logged with IDs only, without names, email addresses or content. The log is kept for 2 years, also after the account is deleted. The legal basis is our legitimate interest in security and in documenting who gave access and consent (Article 6(1)(f)).
Your rights
You can ask to see, correct or delete your data, and to get it in a common format. You can also object to what we do based on legitimate interest. Send an email and we'll reply within 30 days. If you disagree with how we handle your data, you can complain to Datatilsynet, the Norwegian Data Protection Authority.
Changes
When we change this text, we update the date at the top. For important changes, the app asks you to accept the new version before you continue.
Contact
Questions about privacy? Write to Lasse.rolstad@outlook.com, or use Contact us under About Vi in the app.