Privacy policy
Last updated: September 2, 2026
This policy explains what information midom collects, what it uses it for, and the choices we make to protect children’s data in particular. It’s written to be read by a parent, not a lawyer.
midom is operated by Laura Garza, an individual with registered business activity (persona física con actividad empresarial), based in Monterrey, Nuevo León, Mexico. For any privacy matter, write to hola@midom.mx.
First: midom is not a bank
midom does not process, hold or transfer real money. Parents remain the actual holders of the money. Every balance you see in the app is a calculation over a history of entries (what came in minus what went out) — not an account with funds. We don’t ask for or store card details: subscription payments are processed by Apple or Google.
Children have no account
This is a design decision, not a detail:
- A child in midom has no email, no password, and no login of their own.
- Each child’s profile is a record managed by a parent from their own session.
- Switching the device into a child’s mode is protected by a PIN. That PIN stops a sibling from entering another’s profile; it is not a security barrier against a technical person — the real security is server-side, where every query is limited to your family’s data.
What we NEVER collect about a child
- No full legal name. Only the name or nickname you type.
- No email or phone number.
- No exact date of birth. At most the year, and only to adjust age-appropriate defaults (for example, whether a task needs your approval).
- No location. At no point in the product.
- No photo. The avatar is an illustration chosen from a list, not an uploaded image.
What we collect, and why
From parents (account holder)
| Data | Purpose | Basis |
|---|---|---|
| Email address | Create your account, sign in, reset password, important notices | Needed for the service |
| Password (hashed) | Authentication | Needed for the service |
| Family and children names (whatever you type) | Making the app work | Needed for the service |
| Device push token | Send you push notices (task completed, approval pending) | Needed for the feature; removed on sign-out |
From app usage
- Tasks, money and points entries, savings goals, rewards and redemptions that you and your kids record. This is the heart of the product: a history of what each child did, earned and spent.
- Subscription status (free plan or midom Familia), reported to us by Apple/Google through RevenueCat. We never see your payment method.
Product analytics
We measure how the app is used, not who uses it:
- No names, no amounts, no entry descriptions.
- Family and child identifiers travel as random codes, not personal data.
- The IP address is discarded.
- We don’t cross-reference these events with your identity.
- We only begin measuring after you accept during onboarding.
- The analytics provider (PostHog) processes this data in European Union data centers.
Who we share data with (processors)
We don’t sell data or share it with advertisers. We use providers that process data on our instructions so the service works:
| Provider | Purpose |
|---|---|
| Supabase | Database and authentication (where your account and history live) |
| Expo (EAS) | Building the app and delivering push notifications (together with Apple and Google) |
| Apple, Google | App distribution and subscription billing |
| RevenueCat | Tells us whether your subscription is active |
| PostHog (EU) | Anonymous product analytics |
| Cloudflare | Hosting for this website and DNS |
| Google Workspace | Our email (hola@midom.mx) |
We may also disclose information if the law requires it, or to protect the safety of users.
How long we keep data
- While your account exists, we keep your family, tasks and history so the app works. The entry history isn’t “erased” piece by piece because the balance is calculated from it.
- If you delete your account, we delete all your family’s data within a reasonable window. How to do it is on the Delete your account page.
- Push tokens are removed on sign-out.
Your rights
You can ask us to access, correct or delete your data, or to take it with you. Write to hola@midom.mx and we’ll respond. You can also delete everything directly from the app.
Minors
midom is designed to be managed by an adult. A child’s data is collected from the parent, not from the child, and we minimize it as described above. If you believe a minor provided us data directly without an adult’s involvement, write to us and we’ll delete it.
Changes
If we change this policy in a material way, we’ll give notice in the app or by email before it takes effect. The “last updated” date above always reflects the current version.
Questions?
Write to us at hola@midom.mx