Privacy policy

Last updated: November 1, 2026

This policy covers the Dransein app for iPhone and Android and the website dransein.app. It explains which data we process, why, on which legal basis, and what rights you have. This is a translation; if the two versions differ, the German version applies.

In short:

• You do not need an account. We know neither your name nor your email address, unless you write to us.
• What you add to a household (tasks, notes, completions) is visible to all members of that household. Nobody else.
• No ads, no advertising tracking, no selling of data.
• Usage analytics in the app (including session replay and error reporting) use a random ID and never include task titles, nicknames or household names. You can turn them off.
• Our server is hosted by Hetzner in Germany, in the EU.
• The website sets no cookies and loads nothing from third party servers.

1. Controller

Johannes Müller
Simone-Veil-Strasse 30
53121 Bonn
Germany
Email: [email protected]

For any privacy question, contact us at this address.

2. Identity without an account

When you first open the app, the server creates a random ID and a random access token. The token stays in your device's protected storage. On the server we only keep a hash of the token and a hash of a random installation ID, never the values themselves.

We also store: platform (iOS or Android), language, your quiet hours, your preferred reminder time and when your ID was created.

Recovery code: Under "Me" you can create a recovery code to move Dransein to a new device. We only store a hash of the code. Anyone who knows the code can take over your access, so keep it safe.

Legal basis: Art. 6(1)(b) GDPR (providing the app you want to use).

3. Household data

A household is a closed group of up to 12 people. Only people who receive the invite link or code can join.

• Household: name, time zone, invite code, whether and when it was unlocked.
• Members: nickname, color, role (creator or member), when they joined and left. Please do not use your full real name if you do not want to.
• Rooms and tasks: title, icon, room, note, effort, schedule, assignment (whose turn it is, order), reminder profile.
• Completions: which task, who did it, whose turn it actually was, when, whether on time, points, and who is next. The app calculates the stats from this (counts, fairness, punctuality, streaks, monthly recap).
• Snoozes and nudges: who snoozed which task until when, and who nudged whom and when.

All active members of a household can see this data. As the operator we technically have access, but we only look at it if you ask us to or if a malfunction requires it.

Legal basis: Art. 6(1)(b) GDPR.

4. Invite links and link previews

Invite links look like dransein.app/h/CODE. Anyone who opens the link sees, on our website, the household name, the nickname of the person who created the household and the number of members. Messengers also show a preview image with the household name. Tasks, completions and other nicknames never appear there. Only share the link with people you want to invite. Creating a new code makes the old link invalid immediately.

5. Push notifications

If you allow notifications, we store your device's push token. Notifications are sent through Expo's push service (650 Industries, Inc., USA) and from there through the Apple Push Notification service or Google's Firebase Cloud Messaging. A notification contains the title of the due task and sometimes a nickname, for example "Anna nudged you: Clean the bathroom". To avoid reminding you too often, we store which kind of notification we sent for which task and when.

You can withdraw permission at any time in your device settings. Quiet hours and reminder profiles are set in the app.

Legal basis: Art. 6(1)(b) GDPR and your permission in the operating system.

6. "Unlock household" purchase

Dransein is free. With a one-time purchase, one person unlocks the whole household. You buy through Apple's App Store or Google Play. Apple and Google handle the payment under their own responsibility. We never see card or bank details.

To verify and assign the purchase receipt we use RevenueCat (RevenueCat, Inc., USA) as a processor. RevenueCat receives the store receipt, your random ID and technical details (for example operating system, app version, store country), but no tasks, household names or nicknames.

For each purchase our server stores: household, buyer (random ID), store, transaction number, product, status (paid or refunded) and time.

Legal basis: Art. 6(1)(b) GDPR (contract) and Art. 6(1)(c) GDPR (retention under tax and commercial law).

7. Usage analytics with PostHog

To understand which features are used and where people get stuck, the app uses PostHog (PostHog Inc., USA) with storage in the EU (eu.i.posthog.com). PostHog is our processor.

• What is collected: screens viewed, buttons tapped without their labels, events such as "household created", "joined", "task completed" or "purchase completed" with counts, technical details (device type, operating system, app version, language, approximate region derived from the IP address, which PostHog does not store), error messages and your random ID.
• What is never collected: task titles, notes, room names, nicknames, household names and invite codes.
• Session replay: to find usability problems, the app records the flow of a session (screen layout, taps). Inputs, images and areas showing names or tasks are masked.
• Error reporting: if the app crashes or hits an unhandled error, it sends an error report with a technical trace (stack trace), app version and device type to PostHog so we can fix it. No content from your household is included.
• Turning it off: in the app under Me with the "Usage analytics" switch. After that the app sends no analytics, no session replay and no error reports.
• Retention: session replays 30 days, events at most 24 months.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a working and improving app). You can object at any time (Art. 21 GDPR), most easily with the switch.

The website dransein.app uses no analytics, sets no cookies and loads fonts and images only from our own server.

8. Server, hosting and security

• Hosting: our server runs at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in data centers in Germany. The database and all household data are stored there.
• Protection and delivery: requests to dransein.app pass through Cloudflare (Cloudflare, Inc., USA) for protection against attacks and fast delivery. Cloudflare technically sees your IP address and the requested address.
• Backups: encrypted database backups are stored in Cloudflare R2 with storage location in the EU. They are overwritten after 30 days at most.
• IP addresses: our server only keeps your IP address briefly in memory to limit excessive requests. We do not write it to logs.
• Other measures: encrypted transport (TLS), hashed tokens and codes, server access only for the operator.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation).

9. Contact by email

If you write to us at [email protected], we process your email address and the content of your message to handle your request. Messages arrive in our mailbox at Google (Gmail). We delete the message once your request is resolved, at the latest after 2 years, unless a legal retention obligation applies.

Legal basis: Art. 6(1)(b) or (f) GDPR.

10. Recipients and processors

We have a contract under Art. 28 GDPR with all processors. Apple and Google act under their own responsibility for store purchases. We only disclose data to authorities where we are legally required to.

11. Transfers to third countries

Some providers are based in the USA or may transfer data there (Cloudflare, Expo, Apple, Google, RevenueCat, PostHog). The basis is the European Commission's adequacy decision for the EU-US Data Privacy Framework where the provider is certified, and otherwise the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR).

12. Retention and deletion

Completions you recorded in a household stay in the other members' stats after you leave, without your nickname. How to delete your data is explained at dransein.app/en/delete-data.

13. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20, directly via "Export data" in the app), to object to processing based on legitimate interests (Art. 21) and to lodge a complaint with a data protection authority (Art. 77). Our competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestrasse 2 to 4, 40213 Düsseldorf, Germany. You can also contact the authority where you live.

Because we only recognise you by your device, most of this is easiest directly in the app. By email we need proof that the data belongs to you, for example your recovery code. Please only send it if we ask for it.

14. Children

Dransein is made for households, including families. Children under 16 should only use the app with their parents' consent. We do not ask for age and collect no data beyond the household list.

15. Changes

We update this policy when the app or the law changes. The current version is always at dransein.app/en/privacy.