SameSide Privacy Policy

Who is responsible

SameSide is published by DT Nova Tmi, a sole trader registered in Finland, trading as The Dolce Way. For the purposes of the EU General Data Protection Regulation, DT Nova Tmi is the data controller.

What SameSide stores

Everything below is data you or another member of your child's space chose to put in. We collect nothing behind your back.

• Account. You sign in with Sign in with Apple. We receive the email address (or Apple's private relay address, if you choose to hide yours) and the name you share, plus a user ID we create for your account.
• Child profile. What you enter in the child info hub: name, birth date, sizes, allergies, medications, doctor, school and teacher contacts, routines.
• Messages. The messages in the space, with their timestamps and read receipts. They cannot be edited or deleted after sending; that permanence is the product's core feature.
• Photos. The photos you add to the shared feed and receipt photos attached to expenses.
• Calendar, expenses, journal. Custody calendar entries and swap requests, expense entries with amounts and splits, and journal entries.
• Safety reports. If you report someone or a message, we store what was reported, the reason you picked, anything you wrote and who filed it, so we can look into it and reply to you. A report never alters the message record.
• Subscription state. Whether a child's space has SameSide Plus, from Apple's purchase receipt. We never see your payment details; Apple processes all payments.
• Technical logs. Short-lived server logs (such as IP address and request time) that every web service produces, kept briefly for security and debugging, then deleted.

We do not collect location data, contacts, browsing history, device fingerprints, advertising identifiers, usage analytics or anything else not listed here.

Why, and on what legal basis

• To run the service — syncing the space between its members, keeping the message record intact, generating your exports, honoring the subscription. Legal basis: performance of a contract, Article 6(1)(b) GDPR.
• To keep the service secure — the short-lived technical logs. Legal basis: legitimate interest, Article 6(1)(f) GDPR.
• To answer you — if you email us, we process your message to reply. Legal basis: legitimate interest, Article 6(1)(f) GDPR.

Children's data in SameSide is entered and controlled by the parents and guardians in the space. The app is made for adults; children do not have accounts. We apply data minimization: we ask for nothing about your child beyond what you choose to record.

Where your data lives

SameSide runs on Cloudflare's infrastructure: our own database, storage and code on Cloudflare's developer platform, operated by DT Nova Tmi. Cloudflare processes the data on our behalf as a processor under a data processing agreement, and transfers outside the EEA are covered by EU standard contractual clauses. Data is encrypted in transit.

No one else hosts or receives your data. There is no analytics company, no ad network, no data broker and no third-party SDK in the app receiving anything.

Who can see your data

• The members of the child's space. That is the product: what you add to a space is visible to the people invited to it. Check who is a member under Members before you share.
• Cloudflare, as our hosting processor, above.
• Apple, for sign-in and purchases, under Apple's Privacy Policy.
• Authorities, only if the law compels us. If we receive a legally binding order, we comply with what it strictly requires and nothing more.

We never sell personal data, never share it for advertising and never use it to train AI models.

How long we keep it

As long as the child's space is in use. Because the space is shared between two parents, one member deleting their account does not erase the shared record the other members rely on:

• Deleting your account (Settings > Account > Delete Account) removes your profile, your email and your access immediately. Messages you sent remain in the space, attributed to a former member, because they are part of the other members' shared record; the legal basis for keeping them is the legitimate interest of the remaining members in an intact record, Article 6(1)(f) GDPR.
• When a space has no members left, the space and everything in it — messages, photos, calendar, expenses, journal, child profile — is permanently deleted after a 30-day grace period against accidents.
• Technical logs are deleted within 30 days.
• Backups expire on a rolling basis within 30 days of deletion.

Your rights, built into the app

The two rights people actually use are one tap away, no email required:

• Export. Settings > Export My Data gives you your data in a portable format (Article 20 GDPR).
• Delete. Settings > Account > Delete Account erases your account as described above (Article 17 GDPR).

Under the GDPR you also have the right to:

• Ask what we hold about you and get a copy (Article 15)
• Have inaccurate data corrected (Article 16) — most fields you can edit yourself
• Restrict how we use your data (Article 18)
• Object to processing based on legitimate interest (Article 21)

Write to info@thedolceway.com and we will answer within one month. You also have the right to complain to the Finnish Data Protection Ombudsman, Tietosuojavaltuutetun toimisto, at tietosuoja.fi, or to the supervisory authority in the EU country where you live.

The App Store privacy label

SameSide's App Store label lists Contact Info (name, email), User Content (messages, photos, other content) and Identifiers (user ID) as data linked to you, used only for app functionality. Nothing is used for tracking, so the app never shows Apple's tracking permission prompt — it has nothing to ask for.

Changes to this policy

If we ever change what SameSide stores or who processes it, this page will be updated before that version ships, the App Store privacy label will be updated to match, and we will tell you in the app. The date at the top shows when it last changed.

Contact

Questions about this policy or about your data:

info@thedolceway.com

DT Nova Tmi, business ID 3595452-5, Finland.