Privacy policy

Last updated: 2 October 2026

1. Who is responsible

Dundo is made by adviceAim GCV, which is the controller of your personal data under the EU General Data Protection Regulation (GDPR).

For anything about your personal data, email privacy@getdundo.com.

2. What data we process

Parent accounts

• Your name, email address and password. The password is stored only in encrypted (hashed) form; we can't read it.
• The name of your family.
• If you set one: the Parent PIN, stored only in hashed form.

Children

• The name you enter for each child. A first name or nickname is enough; we recommend not using full names.
• Whether the child earns euros or stars.
• The chores you create (name, amount and schedule), which chores were done and when, weekly totals, and whether a week was marked as paid.
• If your child uses Dundo on their own device: the name, email address and password of their own account. A child can only join your family with a join code that you generate; the code is stored in hashed form and expires after 24 hours.

Devices and notifications

• If you allow notifications, a push token: a technical address for your device so we can tell you when your child has finished a chore. The notification itself contains your child's name and the chore name.

Feedback

• If you send feedback from the app: your message, and the app version, phone system (iOS or Android) and system version. Nothing else is attached: no screenshots, chores or children's data.

Security and technical data

• Counters of failed attempts to enter a Parent PIN or join code, used to block guessing.
• Technical logs kept by our hosting provider, such as IP addresses and request times, used to keep the service secure and working.

The website

This website uses no cookies, no analytics and no trackers. Our hosting provider processes your IP address to deliver the pages and protect them against attacks.

3. Why we use it, and on what legal basis

We don't use your data for advertising profiles or automated decision-making, and we don't sell it.

4. Children

Dundo is a family app, set up and managed by a parent or guardian. Children use it under their parent's supervision:

• Only a parent can create a family, add children and create chores.
• A child can only join a family with a join code from their parent. Children under 13 (the age of digital consent in Belgium) may only create an account with their parent's permission.
• Children's screens never show advertising or purchase offers.
• A parent can remove a child from the family at any time, and deleting the family's last parent account deletes all of the family's data, including the children's accounts.

If you believe a child has created an account without permission, contact us and we'll delete it.

5. Who processes data for us

We use the following service providers. They process data only on our instructions, under a data processing agreement.

Transfers outside the EU. Where a provider processes data outside the European Economic Area, the transfer is protected by the EU–US Data Privacy Framework (for certified companies) and/or the European Commission's Standard Contractual Clauses.

6. How long we keep data

• Account and family data: as long as your account exists. When you delete your account in the app, it's removed from our database immediately. Copies in backups are overwritten within 30 days.
• Inactive families: if a family hasn't used Dundo for 24 months, we email the parent and delete the family if there's no reaction within 30 days.
• Push tokens: until you sign out, delete your account, or the token is replaced.
• Feedback: as long as needed to handle it, and at most 24 months. It's deleted earlier if your family is deleted.
• Failed-attempt counters: a few minutes to hours; they reset after a successful attempt.
• Technical logs at our hosting provider: a limited number of days, according to the provider's retention settings.

7. Your rights

Under the GDPR you have the right to:

• access the data we hold about you, and get a copy;
• have incorrect data corrected (most of it you can change in the app yourself);
• have your data deleted: in the app via Settings → Delete account, or by emailing us;
• restrict processing, or object to processing based on our legitimate interest;
• receive your data in a structured, machine-readable format (data portability).

Parents can exercise these rights on behalf of their children. Email privacy@getdundo.com; we answer within one month. We may ask you to confirm your identity first, for example by writing from the email address of your account.

You can also file a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels, www.dataprotectionauthority.be. We'd appreciate the chance to resolve your concern first.

8. Security

• All connections are encrypted (HTTPS).
• Passwords, Parent PINs and join codes are stored only in hashed form.
• Database rules ensure each family can only see its own data, and children only see their own chores.
• Repeated wrong PIN or join-code attempts are blocked for a while.

9. Advertising and subscriptions

Dundo currently shows no advertising and has no paid features. If we introduce advertising in parent screens or an optional subscription later, we'll update this policy before that happens, explain what changes, and ask for your consent where the law requires it. Children's screens will always remain ad-free.

10. Changes to this policy

When we change this policy, we update the date at the top. For important changes, we'll also let you know in the app or by email before they take effect.