Privacy Policy

Last updated: September 23, 2026

This Privacy Policy explains how Fizzy Minds AB ("Heedy", "we", "us" or "our") collects, uses, stores, shares and protects personal information when you use:

• the Heedy mobile application on iOS or Android;
• Heedy on a compatible tablet;
• our website at heedy.app;
• the Heedy webshop; or
• related Heedy support and services.

Together, these are referred to in this Privacy Policy as the "Services."

Fizzy Minds AB is the data controller responsible for the processing described in this Privacy Policy, except where another provider acts as an independent controller as described below.

By using the Services, you acknowledge that you have read this Privacy Policy and understand how your information is handled.

1. Personal Information We Collect

The personal information we collect depends on how you interact with Heedy and which Services you use.

Account and profile information

When you create or use a Heedy account, we may collect:

• your email address;
• your phone number, including for one-time-password (OTP) authentication;
• an optional profile photo;
• account preferences and settings;
• information about your Heedy family connections and connected devices; and
• authentication and account identifiers.

If you use Sign in with Apple, Apple may provide us with your email address or a private relay email address, depending on the choices you make with Apple.

We do not require your date of birth to create a Heedy account.

Family communication and content

When you use Heedy to communicate and share with connected family members, we may process:

• photos;
• videos;
• messages;
• family connections and invitations;
• information necessary to establish and manage calls; and
• information necessary to deliver content to connected family members.

Photos, videos and messages shared through Heedy may be stored using our cloud infrastructure so that they can be delivered and made available to the intended family members.

Video and audio calls

Heedy processes audio, video and technical connection information as necessary to provide video and audio calling.

Heedy does not record or store the content of your video or audio calls.

Technical information relating to the operation, reliability or security of calls may nevertheless be processed where necessary to operate, troubleshoot, secure or improve the service.

Camera and microphone

With your device permission, Heedy may access your:

• camera, for video calling, profile photos and features that require taking or sharing images or video; and
• microphone, for video and audio communication.

You can manage these permissions through your device settings.

Photos and media

With your permission, Heedy may access photos or other media that you choose to share through the app.

Heedy does not require access to your device contacts.

Approximate location

With your permission, Heedy may process your approximate location to provide location-dependent functionality such as local weather information.

We do not use your location for advertising purposes.

You can manage location permission through your device settings. If location access is disabled, certain location-dependent functionality may not work.

Notifications and device information

We may process information such as:

• push notification tokens;
• device type;
• operating system and app version;
• device and application identifiers;
• IP address;
• language and regional settings;
• network and connection information; and
• other technical information necessary to operate, secure and troubleshoot Heedy.

We use this information to provide the Services, deliver notifications, maintain security, diagnose technical problems and improve the reliability of Heedy.

Analytics and diagnostics

We use analytics and diagnostic services to understand how Heedy and our website are used and to identify crashes, errors and technical problems.

These services may process information such as:

• app or website usage and interactions;
• device and application information;
• technical identifiers;
• crash logs;
• diagnostic information; and
• performance information.

Our analytics and diagnostic services include Firebase Analytics, Firebase Crashlytics and Google Analytics.

Purchases and payment information

If you purchase a Heedy subscription, product or other service, information relating to the transaction may be processed by us and our payment providers.

Payments for subscriptions or services made through Heedy may be processed using Stripe.

Purchases made through the Heedy website or webshop may be processed using Shopify and Shopify Payments.

Our payment providers may collect payment card details and other financial information directly. Heedy does not necessarily receive or store complete payment card details.

For webshop purchases, we may also process:

• name;
• email address;
• phone number;
• billing and shipping address;
• products ordered;
• transaction information;
• shipping and fulfilment information; and
• information relating to returns, support, complaints and warranties.

Communications with us

If you contact Heedy, we may process the information contained in your communication, including your name, email address, support request and any other information you choose to provide.

Website information and cookies

When you visit heedy.app, we may automatically collect information about your browser, device, IP address and interaction with the website.

Our website may use cookies and similar technologies for functionality, security, analytics, preferences and, where applicable and permitted, marketing.

Where required by law, non-essential cookies and similar technologies are used subject to your choices or consent.

2. How We Use Personal Information

Depending on how you use the Services, we may use personal information to:

• create, authenticate and manage Heedy accounts;
• connect family members and devices;
• provide video and audio calling;
• deliver photos, videos and messages;
• provide weather and other location-dependent information;
• deliver push notifications;
• maintain account preferences and settings;
• provide subscriptions and process transactions;
• fulfil webshop orders;
• administer returns, complaints and warranties;
• provide customer support;
• diagnose crashes, errors and performance problems;
• analyse and improve the functionality, usability and reliability of Heedy;
• prevent fraud, abuse and unauthorised access;
• maintain the security of our Services;
• communicate with you about your account, transactions and the Services;
• comply with legal and regulatory obligations; and
• establish, exercise or defend legal claims.

Where required by applicable law, we process personal information on an appropriate legal basis. Depending on the processing, this may include performance of a contract with you, compliance with a legal obligation, our legitimate interests, or your consent.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

3. App Permissions

Depending on your device and which features you use, Heedy may request permission to access certain device functionality.

Camera — for video calls and functionality involving taking or sharing images or video.

Microphone — for video and audio calls.

Photos and media — so that you can select and share photos, videos and other supported media.

Notifications — to notify you about calls, messages, family activity and other relevant Heedy events.

Approximate location — to provide local information such as weather.

Heedy does not require access to your device contacts or Bluetooth for its normal operation.

You can change these permissions through your iOS or Android device settings. Disabling a permission may prevent the corresponding Heedy feature from working.

4. How We Share Personal Information

We share personal information only where necessary to operate Heedy, provide services requested by you, work with service providers, comply with law, or for the other purposes described in this Privacy Policy.

Connected Heedy users

Information and content you intentionally share through Heedy may be made available to family members or other users connected to the relevant Heedy family.

For example, a photo, video or message that you send through Heedy must be transmitted and made available to the intended recipient in order to provide the service.

Service providers

We use third-party service providers to operate and support Heedy and the website. Depending on the service, these providers may process personal information on our behalf or act as independent controllers for certain processing.

Our providers include:

Google Firebase and Google Cloud — application infrastructure, cloud services and related technical functionality.

Firebase Analytics — analytics used to understand use of Heedy and improve the service.

Firebase Crashlytics — crash reporting and technical diagnostics.

Firebase Cloud Messaging — delivery of push notifications to supported devices.

Apple Push Notification Service (APNs) — delivery of push notifications to Apple devices.

Google notification services — delivery of notifications to supported Android devices.

Google Analytics — analytics relating to our website and Services.

Stripe — processing applicable payments and subscriptions.

Shopify and Shopify Payments — operation of the Heedy webshop, website transactions and related ecommerce functionality.

These providers may process information in accordance with their contractual roles and their applicable privacy terms.

Legal and safety reasons

We may disclose information where reasonably necessary to:

• comply with applicable law, regulation or valid legal process;
• respond to lawful requests from public authorities;
• investigate fraud, security incidents or abuse;
• protect the rights, safety and property of Heedy, our users or others;
• enforce applicable terms and policies; or
• establish, exercise or defend legal claims.

Business transfers

If Fizzy Minds AB is involved in a merger, acquisition, restructuring, financing, sale of assets, insolvency or similar business transaction, personal information may be transferred as part of that transaction, subject to applicable law.

5. Relationship with Shopify

Our website and webshop use Shopify.

When you visit or purchase through the Heedy webshop, Shopify may process personal information necessary to operate the store, process transactions, maintain security and provide Shopify's services.

Information submitted through the webshop may therefore be transmitted to Shopify and relevant ecommerce service providers.

Shopify may process certain information on our behalf and may also act independently in relation to certain processing performed for its own purposes.

For more information about Shopify's processing, please review Shopify's applicable privacy notices.

6. Push Notifications

Heedy uses push notification services including Firebase Cloud Messaging, Apple Push Notification Service (APNs) and relevant Google notification services.

These services may process device identifiers or notification tokens and related technical information necessary to deliver notifications to your device.

You can control notification permissions through your device settings.

7. Security

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration and disclosure.

We also require or expect service providers handling personal information on our behalf to implement appropriate safeguards for the services they provide.

Personal and sensitive information transmitted between Heedy, your device and our services is protected using appropriate security measures.

However, no internet-based service, transmission method or storage system can be guaranteed to be completely secure.

Users are responsible for appropriately protecting access to their devices and Heedy accounts.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to provide the Services, maintain security, comply with legal obligations, resolve disputes and establish or defend legal claims.

Retention periods therefore depend on the type of information and the reason for processing it.

Account information is generally retained while your Heedy account remains active.

Photos, videos and messages shared through Heedy may be retained for as long as necessary to provide the Heedy service and make the content available to the intended family members.

Analytics, diagnostic, security and technical information may be retained for periods reasonably necessary to maintain, secure, troubleshoot and improve the Services.

When a Heedy account is deleted, personal information and user-generated content associated with that account are deleted or anonymised, except where particular information must or may lawfully be retained for purposes such as:

• compliance with legal or regulatory obligations;
• accounting and tax requirements;
• fraud prevention and security;
• resolving disputes;
• enforcing agreements;
• establishing, exercising or defending legal claims; or
• administering product purchases and applicable warranty rights.

Information relating to purchases made through the Heedy webshop may therefore be retained separately from a deleted Heedy app account where necessary to comply with accounting, tax, consumer-protection, warranty or other applicable legal obligations.

We do not retain personal information merely because an account has been deleted where there is no continuing purpose or lawful basis for retaining it.

9. Account and Data Deletion

You may permanently delete your Heedy account directly from within the Heedy app.

You may also request deletion of your Heedy account and associated data through our online account-deletion service:

Heedy Account Deletion

If you cannot use the app or online service, you may contact us at contact@heedy.app.

Deleting a Heedy account is permanent.

When an account is deleted, we delete or anonymise personal information and user-generated content associated with that Heedy account, subject to information that we are required or permitted to retain for legitimate purposes described in the Data Retention section above.

Deleting a Heedy app account does not necessarily result in deletion of records relating to a separate webshop transaction where those records must be retained for accounting, tax, consumer-protection, warranty, fraud-prevention or other legal purposes.

10. Your Rights and Choices

Depending on where you live, you may have some or all of the following rights concerning your personal information:

• the right to request access to personal information we hold about you;
• the right to request correction of inaccurate personal information;
• the right to request deletion of personal information;
• the right to request restriction of certain processing;
• the right to object to certain processing;
• the right to receive certain personal information in a portable format;
• the right to withdraw consent where processing is based on consent; and
• the right to lodge a complaint with an applicable data-protection authority.

These rights are not absolute and may be subject to conditions, limitations or exceptions under applicable law.

We may need to verify your identity before completing certain requests.

To exercise your privacy rights, contact us at contact@heedy.app.

Marketing communications

If you receive promotional communications from us, you can opt out using the unsubscribe mechanism included in the communication.

Even if you opt out of marketing communications, we may continue to send non-promotional communications necessary for your account, transactions or use of Heedy.

Device permissions

Camera, microphone, photos/media, notifications and approximate-location permissions can generally be controlled through your device settings.

11. EEA and UK Privacy Rights and Legal Bases

If you are located in the European Economic Area or United Kingdom, applicable data-protection laws provide additional rights concerning your personal information.

Depending on the processing activity, our legal bases may include:

• Performance of a contract — where processing is necessary to provide Heedy, fulfil an order or provide another service requested by you.
• Legal obligations — where processing is necessary to comply with applicable law.
• Legitimate interests — where processing is necessary for our or another party's legitimate interests and those interests are not overridden by your rights and interests.
• Consent — where you have given us permission for particular processing.

Our legitimate interests may include operating and improving Heedy, maintaining security, preventing fraud, providing customer support and managing our business.

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing performed before withdrawal.

You may also have the right to lodge a complaint with the competent data-protection supervisory authority in your country.

12. International Data Transfers

Heedy and our service providers may process personal information in countries other than the country in which you live.

Where personal information is transferred from the European Economic Area or United Kingdom to a country that has not been recognised as providing an adequate level of data protection, we use an appropriate transfer mechanism where required.

Such mechanisms may include the European Commission's Standard Contractual Clauses, an applicable UK transfer mechanism, or another legally recognised safeguard.

13. Children's Privacy

Heedy is designed to help families stay connected, including with older loved ones, and is not directed to children.

We do not knowingly collect personal information from children in violation of applicable law.

If you believe that a child has provided personal information to Heedy contrary to applicable requirements, please contact us at contact@heedy.app so that we can investigate and take appropriate action.

14. Third-Party Websites and Services

Our Services may contain links to websites or services operated by third parties.

The privacy practices of those third parties are governed by their own privacy notices. We are not responsible for the privacy or security practices of third parties that we do not control.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to Heedy, our data practices, technology, service providers, legal requirements or other operational reasons.

When we make changes, we will update the Last updated date at the top of this Privacy Policy and provide additional notice where required by applicable law.

16. Complaints

If you have concerns or complaints about how we process your personal information, please contact us at contact@heedy.app.

Depending on where you live, you may also have the right to lodge a complaint with your local data-protection authority.

If you are in the EEA, you may contact the competent supervisory authority in your country.

17. Contact Us

For questions about this Privacy Policy, our privacy practices, your personal information, account deletion, or requests to exercise your privacy rights, contact:

Fizzy Minds AB
Org. no. 559278-4267
Kristansandsvägen 13
461 73 Trollhättan
Sweden

Email: contact@heedy.app

Fizzy Minds AB is the data controller for the personal information described in this Privacy Policy, except where another organisation acts as an independent controller under applicable law.