Your rights under UK GDPR and EU GDPR — and how to exercise them.
Quick actions: You can export your family's data or request account deletion directly within the app at Settings → Data & Privacy. For other rights requests, email privacy@harthena.com. We respond within one calendar month.
Harthena is operated by Family Digital Solutions Ltd (Companies House: 17223355). We are the data controller responsible for your personal data under UK GDPR and the Data Protection Act 2018. Our registered address is: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, UNITED KINGDOM. Data protection enquiries: privacy@harthena.com.
Under UK GDPR (retained EU law under the European Union (Withdrawal) Act 2018, supplemented by the Data Protection Act 2018) and EU GDPR (Regulation 2016/679), you have eight core rights in relation to your personal data. These rights apply to all users — both UK and EU residents.
Obtain a copy of the personal data we hold about you and your family.
Ask us to correct inaccurate or incomplete personal data.
Request deletion of your data (subject to legal retention obligations).
Receive your data in a structured, machine-readable format to move to another service.
Ask us to pause processing of your data in certain circumstances.
Object to processing based on legitimate interests or direct marketing.
Withdraw consent for processing based on consent (e.g., marketing emails) at any time.
Not to be subject to significant decisions made solely by automated processing.
You have the right to ask us whether we process personal data about you and, if so, to receive a copy of that data along with supplementary information about:
You can export a copy of your family's data (in JSON format) directly in the app at Settings → Data & Privacy → Export my data. For a more formal Subject Access Request or to request data in a different format, email privacy@harthena.com.
We will respond within one calendar month. If the request is complex or we receive multiple requests, we may extend this by a further two months and will notify you of the extension within the first month.
There is no charge for a Subject Access Request. However, if requests are manifestly unfounded, excessive, or repetitive, we may charge a reasonable administrative fee or decline to respond, giving you reasons.
If the personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct it without undue delay. Most family data (names, allowance amounts, chore descriptions) can be corrected directly within the app. For data you cannot edit yourself, email privacy@harthena.com.
Where we have shared inaccurate data with a third party, we will notify them of the correction unless this is impossible or disproportionately difficult.
You have the right to ask us to erase your personal data where:
You can request deletion of your account and all associated data in the app at Settings → Data & Privacy → Delete my account and data. You can also email privacy@harthena.com.
Scheduling and cancellation: Account deletion requests enter a 14-day pending period. During this period, you can cancel the deletion request from within the app. After 14 days, deletion is permanent and irreversible.
The right to erasure does not apply where we are required to retain data to:
Where exceptions apply, we will erase all data not subject to the exception and will tell you which data we are retaining and why.
Where processing is based on your consent or on a contract with you, and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format (JSON), and to transmit that data to another controller.
Use the Export my data feature in Settings to download a JSON export of your family's data at any time. The export includes family account details, children's profiles, allowance configuration, transaction history, savings goals, chore assignments, shopping requests, meal plans, and calendar events.
Data held solely for legal compliance purposes (e.g., billing records retained for HMRC) is not included in portability exports but can be provided on request.
You have the right to request that we restrict the processing of your data in the following circumstances:
While restriction is in place, we will only process the restricted data with your consent, for legal claims, to protect the rights of another person, or for reasons of important public interest. We will notify you before lifting a restriction.
To request restriction, email privacy@harthena.com.
Where we process your data on the basis of legitimate interests (e.g., security monitoring), you have the right to object. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is for legal claims.
You have an absolute right to object to processing your personal data for direct marketing purposes, including profiling for marketing. We will stop immediately on receiving your objection. To stop marketing emails, use the unsubscribe link in any marketing email or email privacy@harthena.com.
Note: transactional emails (service notices, subscription receipts, security alerts) are not "direct marketing" and are sent on the basis of contract performance. These cannot be opted out of while you have an active account, but they can be reviewed on request.
Harthena does not use automated decision-making that produces legal effects or similarly significant effects on you or your children. We do not build behavioural profiles of users or use profiling for any commercial purpose.
The only automated processing we carry out is the calculation of allowance balances, savings totals, and similar in-app arithmetic, which are entirely transparent, user-controlled, and do not involve any form of profiling.
Data export and account deletion are available at Settings → Data & Privacy. These are the fastest way to exercise your rights.
For access requests, rectification, restriction, objection, or portability in a specific format, email privacy@harthena.com with "Data Rights Request" in the subject line and a description of your request.
We will verify your identity before acting on a rights request to protect your data. This will typically be done by confirming your registered email address and family code.
We will respond within one calendar month. If we cannot fulfil the request (e.g., due to a legal exception), we will explain why and inform you of your right to complain to the supervisory authority.
If you are not satisfied with our response to a data rights request or believe we are processing your data unlawfully, you have the right to lodge a complaint with the relevant data protection supervisory authority.
Information Commissioner's Office (ICO)
Website: ico.org.uk
Phone: 0303 123 1113
Live chat: available at ico.org.uk
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
EU residents may complain to the data protection authority in their EU member state. A full list of EU supervisory authorities is available at edpb.europa.eu.
We always recommend contacting us first at privacy@harthena.com as most issues can be resolved directly and quickly.
As your data controller, Family Digital Solutions Ltd (trading as Harthena) commits to:
For any data protection enquiries, contact us at privacy@harthena.com.