Privacy
Privacy Policy
What data togedapp uses, what for, where it’s stored, and how you can view or delete it. No fine print.
Last updated: October 30, 2026
This is a translation of the Spanish original, provided for your convenience. If the two versions differ, the Spanish version prevails.
In short.
- togedapp doesn’t show ads, doesn’t sell or rent your data, and doesn’t use any analytics or tracking tools.
- The data you store is used to make the app work and so the members of your household can see it, according to the permissions set in it.
- Your household’s data is stored on servers in the European Union.
- Energy tips from Apple Intelligence are generated on your device and never leave it.
- You can delete your account from within the app whenever you want.
Who the data controller is
The controller of your data is Miguel Ángel Gondán Acevedo (Spain), the developer of togedapp. You can write to us at soporte@togedapp.com about any privacy matter.
This policy applies to the togedapp app for iPhone, iPad, and Apple Watch (including its App Clip for guests and its widgets) and to this website, togedapp.com.
What data we process and why
We only process the data needed for each feature. Many features are optional: if you don’t use them, their data doesn’t exist.
Your account
You sign in with Sign in with Apple. Apple gives us a user identifier and, if you choose to share them, your name and your email address. If you choose to hide your email, we receive an Apple relay address instead of your real one. With this, we create your account (through Firebase Authentication) and your profile, where we store your name, your email, the household you belong to, your notification preferences, and the date you signed up. We don’t use passwords.
Your household and its members
When you create or join a household, we store its name, its members, who created it, its invite code, the family units that are set up, and each member’s permissions (for example, whether they can see the devices or the energy data). If you request to join a household, the person who created it sees your name and your email so they can approve or decline the request. The other members see your name.
Lists and places
We store the lists you create, their items, their categories, who added each item, and when it was marked as done. If you link a list or a category to a place, we store that place’s name, address, and coordinates (for example, your supermarket). When you search for a place on the map, the search text and the map area are sent to Apple Maps to get the results.
Your location
Only if you give permission, and only for two things:
- Alerting you when you arrive at a place. iOS checks on your own device whether you enter the area (about 150 meters) around the places you’ve saved. togedapp doesn’t record your movements or send your position continuously. When you arrive at one of those places, it temporarily stores a presence record—which list and at what time, with no coordinates—so it can show and update the Live Activity with what’s still to do. It’s deleted when you leave the place and, at the latest, after 12 hours.
- Showing you the weather when the household doesn’t have a location set up in Home Assistant. In that case, the device’s location is used once to request the forecast (see “Weather”).
You can change or withdraw this permission at any time in Settings → Apps → togedapp → Location. Without it, the rest of the app works just the same.
Expenses
We store the expenses you record: description, amount, currency, category, date, who paid, who it’s split between and in what proportion, and, if you add them, notes, merchant, payment method, and tags. We also store settlements (who pays whom, how much, and when). An expense can only be seen by the people involved in it. togedapp doesn’t move money or store bank or card details.
Home Assistant and energy (optional)
If the person who created the household connects their Home Assistant server, we store the server address (and, if they provide it, the local address), its long-lived access token, and, if they use them, the Cloudflare Access credentials. Only the person who created the household and the members they’ve given permission to can read this data, and it’s used solely so that each person’s app can connect to that server. We also store a copy of the home’s structure (names of rooms, devices, and entities), the settings for what each member can see, the devices each member marks as favorites, and the electricity tariffs that are set up.
The state of your devices travels directly between your iPhone, iPad, or Apple Watch and your Home Assistant server; we don’t store it. The exception is the energy history: so you can look back at past days, we store daily totals and five-minute measurements of production, consumption, battery, and grid. To complete it, an automated process on our server connects to your Home Assistant once a day with the household’s token and copies the previous day’s data.
NFC tags and guests (optional)
If you create room tags, we store their settings: the room, the devices they include, what guests can use, and the action when someone holds their iPhone near the tag. To give guests access, the person who created the household links a Home Assistant user: its password isn’t stored; we only keep the access token that Home Assistant issues, in an area that only our server can access.
When a guest uses a tag, we record a session with their identifier, the tags they’ve tapped, the start, last use, and expiration dates, and, if they come in from the app with their account, their name, so the person who created the household can see it and end it. To prevent abuse, we also count how many sessions are opened per tag in the last hour. The App Clip can ask iOS to confirm that the guest is near the home: iOS answers yes or no, without giving us their location.
Notifications
To send you notifications (requests to join, expenses, payments, updates to your lists, and Live Activity updates), we store a notification identifier for each device you use the app on, the app version, and your notification preferences. When you sign out, that identifier is invalidated and deleted. You can turn off notifications in the app or in Settings → Notifications → togedapp.
Weather
To show the weather, the app sends WeatherKit, Apple’s weather service, the home’s coordinates set up in Home Assistant or, if there aren’t any, the device’s location. Apple uses that location to return the forecast.
Apple Intelligence
On compatible devices, the tip on the Energy tab is written by Apple’s language model running on your own device. The data it uses (energy flows and the forecast) doesn’t leave the device and isn’t sent to any server, whether ours or a third party’s.
Apple Watch (optional)
The watch app uses the togedapp account on your iPhone, with no need to sign in again. When you tap Connect, your iPhone asks our server for access for the watch in your name, which we don’t store, and passes it to the watch. From then on, the watch reads and writes your household’s data directly in our database, with the same permissions you have on your iPhone, and connects directly to your Home Assistant server. It doesn’t use your location: to open the list for wherever you are, it relies on the presence notice your iPhone stores (see “Your location”).
What stays on your device
Some data is only stored on your iPhone, iPad, or Apple Watch and never reaches us: the Kiosk Mode settings, the list chosen for the Home tab, the copy used by widgets and Live Activities, the App Clip’s guest session, and, on the watch, its session (in the keychain) and the latest reading of your expenses, so it can show it right away. It’s deleted when you delete the app or, where applicable, when you sign out or delete your account; the watch’s session stops working when you delete your account.
When you write to us
If you contact us, we use your email and whatever you tell us to reply to you. If we need to look at something in your account to help you, we’ll ask you first.
This website
togedapp.com doesn’t use cookies, analytics, or third-party resources that could track you (embedded fonts, videos, or maps). For security and for a limited time, the hosting provider logs technical data about each visit, such as the IP address and the browser. More details in the cookie policy.
Why we can process your data
| Purpose | Legal basis (GDPR, Regulation (EU) 2016/679) |
|---|---|
| Creating your account and providing the service: household, lists, expenses, Home Assistant, energy, tags, the Apple Watch app, sync across devices | Performance of the contract you accept by using the app (Art. 6(1)(b)) |
| Alerts when you arrive at a place, location for the weather, and notifications | Your consent, which you give and withdraw through iOS permissions (Art. 6(1)(a)) |
| Security of the service and abuse prevention (for example, the limit on guest sessions) | Legitimate interest in protecting the service and its users (Art. 6(1)(f)) |
| Keeping shared expenses and settlements when someone deletes their account | The other members’ legitimate interest in their balances still adding up (Art. 6(1)(f)) |
| Answering your questions | Your request and, where applicable, performance of the contract (Art. 6(1)(b)) |
We don’t make automated decisions that produce legal effects on you, and we don’t build profiles.
Who your data is shared with
- The members of your household, by the very nature of the app and according to their permissions: they see your name, the shared lists, what you add to them, and the expenses they’re involved in.
- Google Ireland Limited (Firebase), as data processor, for authentication, the database, server functions, sending notifications, and hosting this website. The database and server functions are located in the European Union (Belgium and the Netherlands).
- Apple, for sign-in, notification delivery, weather (WeatherKit), maps, and App Clips, in accordance with its own privacy policy.
- Your own Home Assistant server (and, if you use it, Cloudflare), which are under your control or that of the person who created the household, not ours.
- Public authorities, only when a law requires us to.
We don’t sell, rent, or disclose your data to third parties for advertising or commercial purposes.
International transfers
Some Google and Apple services may process data outside the European Economic Area, for example authentication or notification delivery. In those cases, the transfers are covered by the EU-U.S. Data Privacy Framework and by the standard contractual clauses approved by the European Commission.
How long we keep your data
- Your account and your data, for as long as your account exists.
- Checked items on a list are deleted after 24 hours, unless you turn that option off for the list.
- Presence records at a place, until you leave it and for 12 hours at most.
- Notification identifiers, until you sign out or they stop being valid.
- The Home Assistant settings, the energy history, and the household’s permissions, for as long as the household has members. When the last member leaves it, they’re deleted.
- The questions you send us, for as long as needed to deal with them and to respond to any possible claims.
How to delete your account
In the app, tap your profile icon on the Home tab and, in the Account section, choose Delete Account. You confirm with Sign in with Apple and the deletion is immediate. The following are deleted:
- your profile and your preferences;
- your personal lists and the shared lists that no one else is left in, with all their content;
- the expenses that only you were involved in;
- your permissions and favorites in the household, your pending request to join, and your notification identifiers;
- and your Sign in with Apple authorization, which is revoked.
The household’s lists still exist for everyone else, without you. Shared expenses and settlements are kept, because they’re the record of money other people actually paid, and deleting them would change their balances. If you were the person who created the household and there are members left, management passes to the one who has been in it the longest; if you were the last one, the household is deleted along with you, including its connection to Home Assistant.
If you can’t access the app, write to us at soporte@togedapp.com from your account’s email address and we’ll do it for you. More details in Support.
Your rights
At any time and free of charge, you can exercise your rights of:
- access to your data;
- rectification of any data that is inaccurate;
- erasure;
- objection to and restriction of processing;
- portability, to receive your data in a structured format;
- and the right to withdraw your consent, without affecting processing carried out before.
Write to us at soporte@togedapp.com saying which right you want to exercise. We’ll reply within one month. If you believe we haven’t handled your request properly, you can file a complaint with the Spanish Data Protection Agency (AEPD, aepd.es).
Children
togedapp is designed for families, but the account of a child under 14 must be created or authorized by their parent or legal guardian, who gives consent on their behalf. If you believe a child has given us data without that authorization, write to us and we’ll delete it.
How we protect your data
Communications are encrypted. Data is stored encrypted on Google’s servers, and the database access rules prevent anyone outside your household—or without the corresponding permission within it—from reading it. The most sensitive secrets, such as guest access to Home Assistant, can only be read by our server. Even so, no system is infallible: if a security breach occurred, we would notify the supervisory authority as the GDPR requires and, if it posed a high risk to you, we would tell you directly.
Changes to this policy
If we change anything important, we’ll publish it here with the new date and, if it affects how we use your data, we’ll let you know before it takes effect through the means available to us, such as the app itself or email.
Contact
Miguel Ángel Gondán Acevedo · soporte@togedapp.com · Spain