Privacy Policy
1. Data Controller
The data controller for personal data processed in BraJobba is:
Brajobba AS
Solsikken 6
3086 Holmestrand
Norway
Company registration number: 916 581 947
Email: personvern@brajobba.no
2. Data We Collect
- Account: email address and encrypted password (for sign-in only).
- Family profile: family name and members (name/nickname, role — parent/child/pet, emoji, optional profile image).
- Content you enter: tasks, calendar events, shopping lists and items, wishlists, dinner suggestions, messages, allowance rates and pay history.
- Waste collection (optional): your address is stored if you enable the feature, to fetch the local pickup schedule.
- Location (optional): if you allow it, an approximate latitude/longitude is used once to fetch local weather. We do not store the location.
- AI chat (optional): messages you send to the family assistant are forwarded to Anthropic to generate a reply. We do not retain chat logs.
- Push notifications (optional): an anonymous device token is used to send you notifications.
- Technical: standard server logs from the hosting provider (IP address, browser string, timestamps) for a limited period.
3. Purposes and Legal Basis
- Providing the service (family organization) — performance of contract (GDPR art. 6(1)(b)).
- System emails (verification, password reset, invitations) — contract (art. 6(1)(b)).
- Operation, improvement and debugging — legitimate interest (art. 6(1)(f)).
- Location-based weather — consent given in the app (art. 6(1)(a)).
- AI chat — consent through voluntary use of the feature (art. 6(1)(a)).
- Push notifications — consent (art. 6(1)(a)).
4. Children's Personal Data
BraJobba is a family app. Parents manage accounts for their children under 16.
When a parent creates a family and invites their children, the parent consents to the processing of the child's personal data on the child's behalf, in accordance with GDPR art. 8.
We only collect what is necessary to deliver family organization: name (or nickname), role, and the content the child enters themselves. Parents can view, edit or delete the child's data at any time through family settings — or delete the whole family.
5. Sub-processors
We use the following sub-processors to deliver the service:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Storage of account and family data, authentication | EU (Frankfurt) |
| Vercel | App and API hosting | EU / Global edge |
| Resend | Transactional emails (verification, password reset, invitations) | EU / USA |
| Anthropic (Claude) | AI chat — processes only messages you send to the assistant | USA |
| MET Norway (yr.no) | Weather forecast — we only send approximate lat/long | Norway |
| Norkart / Komtek | Waste pickup schedule — address only | Norway |
| Domeneshop | Domain and DNS | Norway |
Transfers to the USA (Anthropic, Resend) take place under the EU–US Data Privacy Framework and/or the EU Standard Contractual Clauses.
6. Retention
Data is retained for as long as the family is active. When you delete your account from the app ("Settings → Delete account"):
- As the family owner, the entire family and all related data is deleted immediately and permanently.
- As another member, your personal data is deleted; the family continues for the others.
Server logs at hosting providers are typically retained for up to 30 days.
7. Your Rights
You have the right to:
- Access the data we hold about you.
- Have inaccurate information corrected.
- Delete your account at any time — directly in the app.
- Receive your data in a machine-readable format (data portability).
- Withdraw consent you have given.
- Lodge a complaint with the Norwegian Data Protection Authority (datatilsynet.no).
For questions about your rights, contact us at personvern@brajobba.no. We normally respond within 30 days.
8. Cookies and Local Storage
BraJobba does not use tracking cookies or analytics tools. We store a few technical values locally on your device (sign-in token and UI preferences) necessary for the app to function.
9. Payment
BraJobba is free of charge today. If paid features are introduced in the future, this policy will be updated and you will be informed before any payment is requested.
10. Support Access and Audit Log
Authorized Brajobba AS personnel may view family information through an internal admin tool when providing user support or troubleshooting. Such access requires sign-in with a dedicated administrator account, is limited to the stated purpose, and is recorded in a separate audit log capturing timestamp, the admin involved, and what was viewed.
11. Changes to This Policy
We may update this policy. Material changes will be communicated via email and/or inside the app. The date at the top reflects the last update.