Privacy Policy
Coloc helps people who live together organise their shared home: a shopping list, shared expenses and bills, tasks, chores, a calendar, a notes board and a group chat. This policy explains what data the app processes, why, and the choices you have. The controller of your data is Massimo Belmonte, France, contact: belmontemassimax@gmail.com.
What we collect
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Email address and password (stored hashed) | To create and secure your account. We do not send you emails. | Contract |
| Display name and avatar colour | So flatmates know who did what | Contract |
| Content you create: flat name, shopping items, tasks, chores, events, RSVPs, notes, the dates you mark yourself away (with an optional note), house rules, heads-ups and who read them, polls and votes, the flat's inventory (who owns what), chore swap requests, guests you announce (their first name and dates), meter readings, and when you are in quiet mode (notifications are held on our server until it ends) | To provide the app's features to you and your flatmates | Contract |
| Shared expenses: amounts, items, who paid and who owes, monthly bills you set up (amount, day, who pays and shares), and settle-up records | To split shared costs and show who owes whom. Coloc only tracks amounts; it never handles payments or bank details. | Contract |
| Chat messages, reactions and photos you send to your flat | So flatmates can talk to each other. Visible to the members of your flat only; photos are stored privately and resized on your phone before upload (location data is removed). | Contract |
| Receipt photos you choose to attach | Kept as proof of a shared expense, visible to your flatmates only. The text on the receipt is read on your phone (Apple Vision on iPhone, Google ML Kit on Android); the photo is never sent to a text-recognition service. | Contract |
| Reports you make and people you block | To keep the chat safe: a report (with a copy of the reported message) goes to the Coloc team only; blocks hide someone's messages from you and are never shown to them | Legitimate interest |
| Push notification token and device platform (if you allow notifications) | To notify you about assigned tasks, new plans, notes and chore reminders | Consent (you can turn notifications off at any time in your phone's settings) |
| Technical logs (IP address, timestamps, error logs) kept by our hosting provider | Security, abuse prevention and debugging | Legitimate interest |
We do not use advertising, tracking, analytics SDKs, or sell your data. We do not access your contacts or location. The camera and photo library are used only when you tap to scan or attach a receipt, and only the photo you pick is uploaded.
Who can see your data
Content you add to a flat is visible to the members of that flat only. Your name and avatar are visible to people you share a flat with. Anyone with your flat's invite code can join it, so only share the code with your flatmates; an admin can reset the code at any time in Settings.
Service providers
- Supabase (database, authentication, file storage for receipt photos, hosting), servers in the European Union (Ireland).
- Expo / Apple Push Notification service / Firebase Cloud Messaging to deliver push notifications (only the notification text and your device token are shared).
Where providers process data outside the EEA, transfers rely on the European Commission's Standard Contractual Clauses.
How long we keep data
We keep your data while your account exists. Ticked shopping items are hidden from the list after 7 days and completed tasks after 14 days; they remain stored with the flat until a member deletes them or the flat is deleted. When you leave a flat, your tasks are unassigned, you are removed from chore rotations and your absences are deleted. When the last member leaves, the flat and all its content, including receipt and chat photos, are deleted. You can delete your own messages at any time. Deleting an expense deletes its receipt photo.
Deleting your account
You can delete your account at any time in Settings → Delete account. This immediately and permanently deletes your account, profile and device tokens, and removes you from every flat. Content you created in a shared flat (for example a note) is deleted with the flat when its last member leaves; you can delete your own notes and items before leaving.
Your rights
You can access, correct, export or delete your data, object to or restrict processing, and withdraw consent. Contact us at belmontemassimax@gmail.com. You may also complain to your data protection authority (in France, the CNIL).
Children
Coloc is intended for people aged 16 and over.
Security
Data is encrypted in transit (HTTPS). Access to each flat's data is enforced by the database itself (row-level security), not just by the app.
Changes
We will update this page and the date above if this policy changes, and tell you in the app if the changes are significant.