Feature · Privacy & security
Your data. Your household.
Whoever puts their household into an app puts a lot of personal life into it: who is home when, photos of the kids, the shape of the week. That is why collabDoo is built so this data stays with you – and with us in Germany.
Principles
What we promise
Servers in Germany
Application, database and files run on servers in Germany, operated by Code Piraten GmbH in Essen. Push notifications go through Apple’s APNs service.
No ads, no tracking
No ad SDKs, no third-party analytics in the app, no selling of data. The website sets only technically necessary cookies – which means none.
Files encrypted
Uploaded images and documents are stored on the server encrypted with AES-256-GCM. Images are re-encoded, location data (EXIF) removed.
Account protection
Passwords with bcrypt, check against leaked passwords, lock-out after failed attempts, revocable sessions, Sign in with Apple with signature verification.
Tenant isolation
Every request is bound to your own household. Other households’ data is technically unreachable – not even with a guessed ID.
Deleting is a button
Delete a member, delete the household, delete the account – right in the app, completely, including photos, completions and points.
Operations
How we work
Daily backups
Database and files backed up daily, kept for 14 days, restore tested.
Pinned safeguards
Every safeguard is pinned by an automated test – remove it by accident and the test fails.
Rate limits
Login, PIN entry and API are protected against brute forcing.
Open communication
Our external data protection officer answers privacy questions. Security reports are welcome – see contact.
To be honest
What is still missing
Two-factor login for parent accounts and a data export for self-service disclosure are in progress but not yet in the app. We would rather say what is missing than promise something that is not there.
collabDoo · All for one. Done by all.
Privacy is not a setting. It is how it is built.
Questions? We are happy to answer – in detail.
iPhone & iPad · iOS 17 or later · Android to follow
