No big words. Below is what we do to protect your family's data, and also what we do not promise.
What we do
Only the people you invite see your group
Who can see what is enforced in the database itself, per group. You only get data from a group you are a member of, even if something were to go wrong in the app. Per person you set what they can view and change.
Encrypted connection and encrypted storage
All traffic between the app, this website and our servers runs over an encrypted connection. The data is stored in the EU (Ireland) with our hosting provider Supabase, which encrypts the storage.
We cannot read your password
Passwords are stored hashed. You can also sign in with Apple or Google.
Receipts, photos and attachments are locked away
Files are kept in private storage. The app fetches them through a temporary link that is only valid for a short time.
Messages in Discussions stay as they are
A sent message cannot be edited or deleted, not even by the sender. The tone tip you can get before sending works on your own device; your message does not go anywhere for it.
No ads, no tracking
Harmoneaz earns from subscriptions, not from your data. There is no advertising or tracking code in the app.
On your phone
To read quickly and without a connection, the app keeps a copy of your data on your device. It falls under your device's protection and is erased as soon as you sign out.
Managed by a small team
Only the partners of MJoy-IT, the company behind Harmoneaz, have access to the admin environment. Test and production data are kept separate.
You stay in control
You can export your data and delete your account yourself, right in the app. An account that has not been used for a year is deleted automatically, after a warning.
What we do not promise
- No system is watertight, and neither is ours. So we do not promise 100% security; we promise that we take it seriously and are open when something goes wrong.
- Your data is not end-to-end encrypted. The server has to be able to read it to show it to the other parent and to send you a reminder on time.
- The app does not have its own two-step verification yet; it is coming in a later version. If you sign in with Apple or Google, theirs applies.
- A push notification about a new message may contain the beginning of that message. It travels via Apple or Google and, depending on your settings, may show on your lock screen.
- Our hosting provider and our email service are American companies. Which ones, and what agreements apply, is in the privacy policy.
- Harmoneaz has not been tested or certified by an external party.
Found a vulnerability?
Then email us, preferably with enough detail to reproduce it and without sharing your own data or that of others. We read everything ourselves and usually reply within two working days.
