YOUR DATA

Privacy
policy

Updated: 27 September 2026

1. What data Welimo needs

• Account and profile: email address, account identifier, email verification status, chosen sign-in method, display name, avatar settings and username, where supported by your app version. Sign in with Apple may use a hidden email address.
• Circles and tasks: circle names, members and roles, invitations, task content and comments, dates, recurrence, assignees and completion records. Only include information in shared tasks that you are willing to share with members.
• Notifications: installation identifier, delivery token, platform, language, time zone and reminder preferences. Push notifications may include a task or circle name.
• Technical information: IP address, client type, request time and result, errors and security events. This information supports service operation, troubleshooting and protection against abuse.
• Support: the sender's address, message and attachments you choose to send.

When you sign in with Google or Apple, Welimo does not receive your password for that provider. Email sign-in passwords are processed by Firebase Authentication; the app's own server does not store them in plain text.

2. How data is used

To create accounts, verify email and restore access; synchronise profiles, circles and tasks; manage invitations and access; send chosen notifications; answer support requests and protect the service. We do not sell personal data or use it for targeted advertising.

Necessary data is processed to provide the service features you request. A limited amount of technical data is used for security and diagnostics. You can revoke system notification permission in your device settings.

3. Who has access

Members of your circle can see shared tasks and available profile details. Your personal space does not become shared when you join a circle. The service owner's access is limited to support, operations and security needs.

• OVHcloud: the application server and databases. Core circle and task data is hosted on a VPS in Frankfurt, Germany.
• Google / Firebase: sign-in, account checks, email verification, access recovery, push delivery and account action pages. Firebase Authentication processes data in the United States; other Google services may use global infrastructure. Details: Firebase data processing.
• Apple: Sign in with Apple, Hide My Email and notification delivery on iOS. The following also applies: Apple privacy policy.
• Spaceship and Google's email service: domain registration and support email routing. Messages sent to support are forwarded to the owner's work mailbox.

Some data is therefore processed outside your country and outside the country hosting Welimo's database. Information may be disclosed to public authorities where required by applicable law.

4. Storage and deletion

Account and personal task data is kept while needed to operate the account. You can delete your account in the app: profile → account → delete account. You may need to sign in again to confirm. If you cannot access the app, send a request to support@welimo.app from the address associated with your account. We may ask you to confirm account ownership.

Deletion clears the profile, email and username on the app server, personal circles, device tokens and related invitations. The authentication account is deleted through Firebase. A minimal technical record of the closed account remains to prevent old tokens from restoring access. Shared circles and task history may remain with other members: your active role and assignments are removed, and administration passes to a remaining member.

Regular database backups rotate on a 14-day cycle. Separate backups made for migration or recovery are removed when that work is complete and are not part of automatic rotation. Providers may have different backup and service data deletion periods: Firebase states that authentication data may take up to 180 days to be deleted from its systems after a deletion request. Service logs and correspondence may be retained longer to resolve a request, investigate an incident or meet an obligation. Account deletion does not remove copies that another member has saved independently.

5. Your settings and requests

You can change your display name and avatar, manage circles and notification permissions, delete your account, request a copy of your data or ask about processing. Write to support@welimo.app. Depending on applicable law, you may also have rights to correction, restriction of processing, objection and a complaint to a competent authority.

Do not send support your password, one-time sign-in codes or complete password reset links.

6. Website and device data

The public website has no advertising pixels, registration forms, analytics scripts or third-party fonts. It does not set its own cookies. The server processes technical requests and access logs. Apple and Google's own policies apply when you visit their websites. Your chosen language is saved in browser local storage only to remember your preference.

The app stores appearance and language preferences, tour completion and necessary session and synchronisation information on your device. Signing out does not necessarily remove device settings; local copies can be removed by clearing app data or uninstalling the app.

7. Changes to this page

When features and data processing change, we update this page and its publication date. Significant changes requiring separate notice or consent will be communicated through an appropriate channel.