Privacy Policy
This policy explains what data ParentHabits collects, why, and what your rights are. It is written to be read — if anything is unclear, email support@sumaqworks.com and we will explain it.
Who we are
ParentHabits is operated by Sumaq Works, a sole-trader business owned by L Shaw (Ireland). For the purposes of the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018, Sumaq Works is the data controller for the personal data collected through the app.
Contact: support@sumaqworks.com
What we collect and why
When you create an account and use ParentHabits, we collect:
| Data | Why | Where |
|---|---|---|
| Email address | To sign you in and recover your account | Firebase Authentication |
| Password (hashed) | To sign you in securely. We never see your password in plain text. | Firebase Authentication |
| Name (optional) | To personalise the app | Firestore |
| Your selected parenting challenges and habits | To deliver the core feature of the app | Firestore |
| Habit completions and history | To track your progress and streaks | Firestore |
| Calm moments (when you tap "Timeout!") | To show patterns over time and your own reflections | Firestore |
| Daily check-in / reflection responses | To show patterns over time | Firestore |
| Anonymous usage events | To understand which parts of the app help and which don't | Firebase Analytics |
| Device info (approx. location from IP, device model, OS, language) | To debug crashes and understand basic usage | Firebase Analytics / Crashlytics |
We do not collect:
- Information about your children by name, date of birth, or any other identifying detail
- Audio, video, photos, contacts, calendar, or precise location
- Any payment data (the app is free)
Legal basis
We process your data on two bases under GDPR:
- Performance of a contract (Article 6(1)(b)) — to provide the app you signed up for.
- Legitimate interests (Article 6(1)(f)) — to understand how the app is used so we can improve it. Analytics events are anonymous and aggregated; they are not used to profile individuals.
Who we share data with
ParentHabits uses Google Firebase (provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4) as a sub-processor for authentication, database storage, and analytics. Firebase processes your data on our behalf under a Data Processing Addendum compliant with GDPR.
We do not sell your data, and we do not share it with advertisers or third parties beyond the Firebase services listed above.
Firebase may transfer data to servers outside the EEA. Google operates Standard Contractual Clauses to maintain GDPR-equivalent protection during these transfers.
How long we keep your data
We keep your account data for as long as your account is active. If you delete your account inside the app, we delete:
- Your Firebase Authentication record
- Your user profile and all associated habits, calm moments, and reflections in Firestore
Anonymous analytics events may be retained in aggregated form for up to 14 months as part of standard Firebase Analytics retention. These cannot be linked back to your individual account once the account is deleted.
If you cannot access the app to delete your account, email support@sumaqworks.com and we will delete your data within 30 days.
Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data ("right to erasure")
- Restrict how we process your data
- Object to our processing on legitimate-interest grounds
- Receive a copy of your data in a portable format
- Withdraw consent at any time, where we rely on consent
To exercise any of these rights, email support@sumaqworks.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Irish Data Protection Commission at dataprotection.ie if you are unhappy with how we handle your data.
Children
ParentHabits is designed for parents — adults aged 18 and over. The app is not directed at children under 16, and we do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete it.
Security
- Passwords are hashed and managed by Firebase Authentication; we cannot see them.
- Firestore data is protected by security rules that restrict access to your own user account only.
- Data is transmitted over HTTPS.
No system is perfectly secure. If we ever experience a breach affecting your data, we will notify you without undue delay and report to the Data Protection Commission as required by GDPR.
Changes to this policy
If we make material changes to this policy, we will update the "last updated" date at the top and notify users in-app the next time they open the app. Continued use of ParentHabits after a change means you accept the updated policy.
Contact
Sumaq Works (L Shaw, Ireland)
Email: support@sumaqworks.com
Website: sumaqworks.com