Privacy Policy

Last updated: 2026-08-10

co·Life is a household organizer for events, expenses, notes, and the everyday logistics of your household's members — kids and pets included. This policy explains, in plain language, what data the app stores and why. The short version: your household's data is yours, it's stored in the EU, we run no advertising and sell nothing to anyone.

Who we are

The data controller for co·Life is RMATAKOV, vl. Robert Mataković (OIB 16585545644), Borongaj aerodrom 5, 10000 Zagreb, Croatia. For anything related to your data, write to privacy@co-life.online.

What data we store

We store only what you (or a member of your household) enter into the app:

Account and profile — your name, email address, password (stored as a hash by our authentication provider), interface language, theme, notification preferences, and, if you enable two-factor authentication, your enrolled factors.
Household — household name, timezone, and optionally an address.
Events — titles, dates, times, locations, notes, categories, and who they're assigned to.
Expenses — amounts, dates, categories, who paid, and optional notes; budgets and recurring templates.
Notes — their content, tags, checklists, due dates, and assignees.
Members (kids and pets) — names, colors, birthdates, and, for kids only, optionally an OIB (see the next section). Members do not have accounts. You can also add your own free-text detail rows to a member's card (for example allergies, a vet's name, or a school) — these are entirely optional and may contain health information if you choose to record it.
Google Calendar sync — only if you connect it: your Google account identifier, calendar tokens, and the synced events.
Push notifications — only if you enable them: a per-device subscription token.
Receipt scanning — if you photograph a receipt, the image is sent for one-time text extraction and immediately discarded; we never store the photo.

Children's data and OIB

Members in co·Life — kids and pets — are entries created and controlled by a parent; they cannot register or sign in themselves. Pets are not people, so nothing here about a pet's entry is personal data about anyone. Everything about a child is entered voluntarily by you, and the OIB (Croatian personal identification number) is entirely optional and never collected for pets. We treat OIBs with national-ID-level care: they are never written to logs, never included in search, and excluded from data exports by default. Any free-text detail row you add to a member's card is also entirely optional, is never included in search, and may contain health information (for example an allergy or a doctor's or vet's name) only if you choose to record it there. You can remove a child's OIB, edit or delete any detail row, or remove the whole member entry, at any time in Settings.

Why we process your data

To provide the service (contract) — everything in "What data we store" exists solely so your household can use the app.
To improve the product (legitimate interest) — we record a small number of usage events (for example "an event was created"). These events are not linked to your account: they carry no names, titles, amounts, or identifiers — only counts and true/false flags — and are processed on our servers without any tracking cookies. You can turn this off at any time in Settings → Profile.
With your consent — optional integrations you explicitly connect, such as Google Calendar sync and push notifications. Disconnecting them stops the processing.

Who processes data for us

We use a small number of service providers (processors) to run co·Life:

Supabase — database and authentication; all data is stored in the EU (Frankfurt, Germany).
Vercel — application hosting and serving.
Cloudflare — domain/DNS and the sign-in captcha (Turnstile).
Resend — sends transactional email (confirmation links, invitations, reminders).
Google — only if you connect Google sign-in or Calendar sync; receives/returns your calendar events.
Anthropic — only when you use receipt scanning; receives the receipt photo for one-time text extraction. Not used for AI training.
PostHog (EU) — product analytics as described above; hosted in the EU.

We do not sell data, run no advertising, and share data with no one beyond this list.

Google Drive documents

If you connect Google Drive, member documents are stored in your own Google Drive account, not on our servers. co·Life stores only a reference to the folder you chose, a reference to each member's subfolder, and the Google address you granted access with.

Document content is never received, stored, or transmitted by co·Life — files travel directly between your browser and Google.

We request the narrowest available permission (`drive.file`), which limits our access to files created through co·Life or explicitly selected by you.

Deleting your co·Life household, or disconnecting Google Drive, removes these references. It does not delete any files from your Google Drive — those remain yours and are governed by your agreement with Google.

International transfers

Your household's data is stored in the EU. A few of our providers are based in, or process limited data in, the United States: Anthropic receives only the receipt photo you choose to scan, and Vercel, Resend, and Cloudflare are US-headquartered companies. Where personal data leaves the European Economic Area, it is protected by the safeguards the GDPR requires — Standard Contractual Clauses and/or the EU–US Data Privacy Framework.

Cookies

co·Life uses only strictly necessary cookies: your sign-in session and your timezone. There are no advertising, analytics, or cross-site tracking cookies — which is why you don't see a cookie banner.

How long we keep your data

Your data lives as long as your household exists. Deleting your household (Settings → Household → Delete household) permanently erases all of its data — events, expenses, notes, members, profiles, and accounts — immediately. Provider backups age out automatically within roughly a week.

Your rights

Under the GDPR you can ask us, at any time, to access, correct, export, or erase your personal data, or to object to processing. Most of this you can do directly in the app: editing and deletion are self-service, and you can download a full copy of your household's data at any time via Settings → Household → Download my data. For anything else, email privacy@co-life.online. You also have the right to lodge a complaint with the Croatian data protection authority (AZOP, azop.hr) or your local supervisory authority.

Changes to this policy

If we materially change this policy, we'll announce it in the app or by email before the change takes effect, and update the date at the top. Continued use after the change means the new version applies.