Privacy Policy

Last updated: 23 September 2026

This Privacy Policy explains how RUFFEH3 Oy (“RUFFEH3”, “we”, “us”) processes personal data when you use the RUFFEH3 mobile application and related services.

1. Controller

RUFFEH3 Oy
Business ID 3655855-9
c/o Previser Oy
PL 26
04251 Kerava
Finland
Privacy contact: support@ruffeh3.com

2. What RUFFEH3 is

RUFFEH3 is a private task and activity management service for families, friends and other small groups. Users can create groups, assign activities and jobs, confirm completed work, record rewards, track goals and keep a history of completed activities.

RUFFEH3 is not a payment service and does not hold, transfer or process money between participants.

3. Data we process

Depending on how you use RUFFEH3, we may process:

• account and technical identifiers required to provide the service;
• the display name chosen for use in RUFFEH3;
• group membership and user role;
• activities, jobs, goals and free-text information entered by users;
• task status, completion and confirmation information;
• stars, monetary amounts, balances and payout records entered by users;
• history of confirmed activities and jobs;
• invitation and connection information required to join a private group;
• technical information required for authentication, synchronisation, security and operation of the service; and
• information you voluntarily provide when contacting support.

RUFFEH3 does not require users to provide a date of birth, home address, payment card details or other information that is not necessary for the service.

4. User-created information

Users decide what names, task descriptions, goals and other free-text information they enter into RUFFEH3. Please do not enter unnecessary sensitive personal information into task names, descriptions, goals or other free-text fields.

5. Why we process data

We process data where necessary to provide and operate RUFFEH3, keep group information synchronised, manage access and roles, maintain activities, jobs, balances, goals and history, authenticate users, protect the service, provide support and comply with applicable legal obligations.

Where the GDPR applies, processing necessary to provide RUFFEH3 is generally based on performance of the service requested by the user. Security and service-protection activities may also be based on our legitimate interests. Where required by law, processing may be based on a legal obligation or consent.

6. Private groups and minors

RUFFEH3 is designed for private groups. The Primary admin controls group membership and decides who may participate. RUFFEH3 does not require participants to provide their age.

Where a participant is a minor, the responsible adult should ensure that use of the service is appropriate and permitted under applicable law.

RUFFEH3 does not provide public profiles, public social networking, public messaging, photo sharing or video sharing.

7. Rewards and monetary amounts

Stars and monetary amounts displayed in RUFFEH3 are records created by users for tracking arrangements within their group. RUFFEH3 does not process payments, and these records do not represent money held by RUFFEH3.

If participants choose to make a real payment, it takes place outside RUFFEH3.

8. Service providers

RUFFEH3 uses service providers necessary to operate the application and its infrastructure. This includes Supabase, which provides backend, database and authentication infrastructure.

Apple and Google may separately process information when users download the app, use their platform services or make an in-app purchase. Their processing is governed by their own terms and privacy policies.

We do not sell personal data.

9. International processing

Some service providers may process data in countries other than the user's country. Where personal data is transferred outside the European Economic Area, appropriate safeguards required by applicable data protection law are used.

10. Cookies and tracking

The RUFFEH3 website does not use analytics cookies, advertising cookies, tracking pixels or similar tracking technologies.

11. Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure or loss. Data transmitted between the application and its backend services is protected using encrypted connections.

No online service can guarantee absolute security. Never send RUFFEH3 Support your password, sign-in code or other access credentials. We will never ask you for them.

12. Retention and deletion

We keep personal data only for as long as necessary to provide RUFFEH3, maintain security, comply with applicable law and resolve legitimate disputes.

Account deletion. Users can initiate deletion of their RUFFEH3 account in the app. Account deletion cannot be undone. If the account belongs to a Primary admin, deleting the account also permanently deletes the group created by that Primary admin and its data, including participants added to the group and data associated with them. The deleted account, group, participants and associated deleted data cannot be restored. Associated personal data is deleted unless specific information must be retained for a legitimate legal, security or regulatory reason. If you cannot access the app, you can request deletion through the RUFFEH3 Support page.

Group deletion. A Primary admin can delete a RUFFEH3 group. A group scheduled for deletion can be restored for 30 days. The Primary admin may also choose immediate permanent deletion. After permanent deletion, the group and associated group data cannot be restored.

Temporary technical backups may remain for a limited period before being automatically overwritten or deleted.

Deleting a RUFFEH3 account or group does not automatically cancel an Apple App Store or Google Play subscription. Store subscriptions must be managed through the relevant store.

13. Your rights

Depending on applicable law, you may have the right to access personal data concerning you, correct inaccurate information, request deletion, request restriction of processing, object to certain processing, receive certain data in a portable format, withdraw consent where processing is based on consent, and lodge a complaint with the competent data protection supervisory authority.

Requests can be sent to support@ruffeh3.com.

14. Changes to this Privacy Policy

We may update this Privacy Policy when RUFFEH3, applicable law or our service providers change. The current version will be available at ruffeh3.com/privacy.html.

15. Contact

RUFFEH3 Oy
Business ID 3655855-9
Kerava, Finland
support@ruffeh3.com