Privacy policy

Last updated: 6 November 2026 (version 4)

This policy explains how the MyFaWo app and service (myfawo.com, Android and iPhone apps) process personal data. We comply with the EU General Data Protection Regulation (GDPR) and Finnish data protection law. Suomeksi.

1. Controller

LumiBro Oy (Business ID 2415894-5), Finland
Email: info@myfawo.com

2. What MyFaWo is

MyFaWo is a family organiser: chores and rewards, points and shared family rewards, children's wallets and savings goals, a family calendar, and school (Wilma) and hobby (MyClub) information. A parent creates the family and the children's accounts. Data is visible only to members of the same family, according to permissions set by the parent.

3. Data we process

• Account data: parent's name, email and password (stored only as a hash); child's name or nickname, username and password created by the parent; family roles.
• Family content: chores, turns, completions and approvals; points, rewards, allowances, wallet entries and savings goals (MyFaWo does not move real money); calendar entries and reminders.
• Receipts: receipts and receipt photos attached to the wallet, and a note of how the amount was paid (for example MobilePay, bank transfer or cash).
• School data (Wilma), if enabled: timetable, homework and exams, and photos attached to homework. Wilma credentials are stored only on the user's own phone in the device's secure storage and are never sent to our server. The phone fetches data from Wilma and sends only the timetable, homework and exams to our server so they appear on the family's other devices. School data is visible only to the child and the parents by default.
• Hobby data (MyClub), if enabled: the family's own MyClub calendar link and the events read from it.
• Technical data: push notification token; server logs (e.g. time, IP address) for security and troubleshooting; usage information to improve the service. No advertising or ad tracking.
• The website counts anonymous page views and daily visitor totals without cookies. It does not identify individual visitors or store IP addresses for this count.
• Tester sign-up: email, chosen phone (Android or iPhone), municipality and number of children, consent to be contacted about the test, and a release notice only when a separate consent was given.
• Feedback and support messages sent through the app.
• Access level: the family's access type and validity (e.g. free trial). There are no paid subscriptions yet; when introduced, payments will be handled by Google Play or the Apple App Store and we will never receive card details.

4. Purposes and legal bases

Providing the service (contract, Art. 6(1)(b)); Wilma and MyClub connections chosen by the user (contract; can be removed at any time); security and troubleshooting, and improving the service (legitimate interest, Art. 6(1)(f)); subscriptions and accounting (legal obligation, Art. 6(1)(c)); contact about the test and a release notice only when a separate consent was given (consent, Art. 6(1)(a)).

5. Children

MyFaWo is a family app always managed by a parent. The parent creates the child's account, decides what the child can see and can delete the account. Children's data is never used for marketing, profiling or advertising and is never shown outside the family.

6. Sharing

We do not sell data. We use these processors on our behalf: Contabo GmbH (Germany, servers and database within the EU); Google Firebase Cloud Messaging (push notifications; may involve transfers outside the EU under the EU–US Data Privacy Framework and standard contractual clauses); Google Play and Apple App Store (distribution, and later payments). Data is only read from Wilma and MyClub; no MyFaWo data is sent to them. We may disclose data to authorities where required by law.

7. Retention

Account data is kept while the account is active and deleted within 30 days after account deletion; backups are kept for up to 30 days, so data is removed from backups within 60 days of account deletion. Wilma and MyClub data are deleted when the connection or account is removed. Server logs are kept for up to 30 days. Accounting data is kept as required by law. Tester sign-up data is deleted when the release notice has been sent or on request, and at the latest 12 months after sign-up.

8. Security

All connections use HTTPS encryption, passwords are stored as hashes, and access is restricted per family.

9. Your rights

You have the right to access, correct and delete your data, to object to or restrict processing, and to data portability. A parent may exercise these rights on behalf of a child. Contact info@myfawo.com; we respond within one month. You may also lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

10. Deleting your account

In the app: Settings → Account → Delete account. A parent can also delete a child's account or the whole family. Deletion can be cancelled for 30 days by signing in; after that the data is permanently deleted. You can also request deletion by email at info@myfawo.com. More: myfawo.com/poista-tili.

11. Changes

We update this policy when the service changes and will announce significant changes in the app.