Privacy policy

Last updated: November 4, 2026

This Privacy Policy explains how Fizzy Minds AB ("Heedy", "we", "us" or "our") collects, uses, stores, shares and protects personal information when you use:

• the Heedy mobile application on iOS or Android;
• Heedy on a compatible tablet;
• our website at heedy.app;
• the Heedy webshop; or
• related Heedy support and services.

Together, these are referred to in this Privacy Policy as the "Services."

Fizzy Minds AB is the data controller responsible for the processing described in this Privacy Policy, except where another provider acts as an independent controller as described below.

Heedy is operated by Fizzy Minds AB. The Heedy Android application is published on Google Play through the Walletmatch AB developer account. Fizzy Minds AB is responsible for the processing of personal information described in this Privacy Policy.

Scope of this policy. References to the Heedy mobile app describe processing related to the Android and iOS applications. References to the Heedy website or webshop describe additional processing associated with browsing heedy.app or purchasing through our Shopify storefront. Webshop-specific information, such as shipping addresses and webshop order records, is not collected by the mobile app solely because a person uses Heedy. Some providers support multiple Services; the processing described depends on which Service and feature you use.

By using the Services, you acknowledge that you have read this Privacy Policy and understand how your information is handled.

1. Personal Information We Collect

The personal information we collect depends on how you interact with Heedy and which Services you use.

Account and profile information

When you create or use a Heedy account, we may collect:

• your email address;
• your phone number, including for one-time-password (OTP) authentication;
• an optional profile photo;
• account preferences and settings;
• information about your Heedy family connections and connected devices; and
• authentication and account identifiers.

If you use Sign in with Apple, Apple may provide us with your email address or a private relay email address, depending on the choices you make with Apple.

We do not require your date of birth to create a Heedy account.

Family communication and content

When you use Heedy to communicate and share with connected family members, we may process:

• photos;
• videos;
• messages;
• family connections and invitations;
• information necessary to establish and manage calls; and
• information necessary to deliver content to connected family members.

Photos, videos and messages shared through Heedy may be stored using our cloud infrastructure so that they can be delivered and made available to the intended family members.

Family administrators may manage family-group membership and connected devices. Depending on their role and the features enabled, members of a Heedy family may access information and content shared within that family group. Access is limited according to the permissions and functionality provided by the Services.

Video and audio calls

Heedy processes audio, video and technical connection information as necessary to provide video and audio calling.

Heedy does not record or store the audio or video content of calls. Audio and video streams are processed by our communications provider, Stream (GetStream), to establish and deliver calls. Technical call information may be processed for operation, reliability, security and troubleshooting.

Technical information relating to the operation, reliability or security of calls may nevertheless be processed where necessary to operate, troubleshoot, secure or improve the service.

Camera and microphone

With your device permission, Heedy may access your:

• camera, for video calling, profile photos and features that require taking or sharing images or video; and
• microphone, for video and audio communication.

You can manage these permissions through your device settings.

Photos and media

With your permission, Heedy may access photos or other media that you choose to share through the app.

Heedy does not require access to your device contacts.

Approximate location

With your permission, Heedy may process your approximate location to provide location-dependent functionality such as local weather information.

We do not use your location for advertising purposes.

You can manage location permission through your device settings. If location access is disabled, certain location-dependent functionality may not work.

Notifications and device information

We may process information such as:

• push notification tokens;
• device type;
• operating system and app version;
• device and application identifiers;
• IP address;
• language and regional settings;
• network and connection information; and
• other technical information necessary to operate, secure and troubleshoot Heedy.

We use this information to provide the Services, deliver notifications, maintain security, diagnose technical problems and improve the reliability of Heedy.

Analytics and diagnostics

We use analytics and diagnostic services to understand how Heedy and our website are used and to identify crashes, errors and technical problems.

These services may process information such as:

• app or website usage and interactions;
• device and application information;
• technical identifiers;
• crash logs;
• diagnostic information; and
• performance information.

Our analytics and diagnostic services include Firebase Analytics, Firebase Crashlytics and Google Analytics.

Purchases and payment information

Heedy offers free services and optional paid subscriptions. Eligible new accounts receive an automatic 14-day introductory period without providing a payment card. The introductory period does not, by itself, create a paid subscription or authorise a payment.

If you actively purchase a paid subscription, we may process information necessary to activate, administer and support it, including account identifiers, subscription status, billing period, transaction identifiers, billing details and payment confirmations.

Payments for applicable Heedy subscriptions or services are handled by third-party payment service providers. These providers may collect and process payment card information and other billing details directly, including for payment processing, fraud prevention, recurring payments and refunds. We do not need to receive or store complete card numbers when the payment provider collects them directly.

Purchases through the Heedy website or webshop may be processed using Shopify, Shopify Payments, Klarna or other payment services made available at checkout.

For webshop purchases, we may also process:

• name;
• email address;
• phone number;
• billing and shipping address;
• products ordered;
• transaction information;
• shipping and fulfilment information; and
• information relating to returns, support, complaints and warranties.

Communications with us

If you contact Heedy, we may process the information contained in your communication, including your name, email address, support request and any other information you choose to provide.

Website information and cookies

When you visit heedy.app, we may automatically collect information about your browser, device, IP address and interaction with the website.

Our website may use cookies and similar technologies for functionality, security, analytics, preferences and, where applicable and permitted, marketing.

Where required by law, non-essential cookies and similar technologies are used subject to your choices or consent.

2. How We Use Personal Information

Depending on how you use the Services, we may use personal information to:

• create, authenticate and manage Heedy accounts;
• connect family members and devices;
• provide video and audio calling;
• deliver photos, videos and messages;
• provide weather and other location-dependent information;
• deliver push notifications;
• maintain account preferences and settings;
• provide subscriptions and process transactions;
• fulfil webshop orders;
• administer returns, complaints and warranties;
• provide customer support;
• diagnose crashes, errors and performance problems;
• analyse and improve the functionality, usability and reliability of Heedy;
• prevent fraud, abuse and unauthorised access;
• maintain the security of our Services;
• communicate with you about your account, transactions and the Services;
• comply with legal and regulatory obligations; and
• establish, exercise or defend legal claims.

Where required by applicable law, we process personal information on an appropriate legal basis. Depending on the processing, this may include performance of a contract with you, compliance with a legal obligation, our legitimate interests, or your consent.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

3. App Permissions

Depending on your device and which features you use, Heedy may request permission to access certain device functionality.

Camera — for video calls and functionality involving taking or sharing images or video.

Microphone — for video and audio calls.

Photos and media — so that you can select and share photos, videos and other supported media.

Notifications — to notify you about calls, messages, family activity and other relevant Heedy events.

Approximate location — to provide local information such as weather.

Heedy does not require access to your device contacts or Bluetooth for its normal operation.

You can change these permissions through your iOS or Android device settings. Disabling a permission may prevent the corresponding Heedy feature from working.

4. How We Share Personal Information

We share personal information only where necessary to operate Heedy, provide services requested by you, work with service providers, comply with law, or for the other purposes described in this Privacy Policy.

Connected Heedy users

Information and content you intentionally share through Heedy may be made available to family members or other users connected to the relevant Heedy family.

For example, a photo, video or message that you send through Heedy must be transmitted and made available to the intended recipient in order to provide the service.

Heedy family administrators may manage family-group membership and connected devices. Family members and administrators can access shared information according to the features, roles and permissions available to them. Using these functions requires processing the relevant account, connection and device information.

Service providers

We use third-party service providers to operate and support Heedy and the website. Depending on the service, these providers may process personal information on our behalf or act as independent controllers for certain processing.

These providers are used to deliver essential functionality or supporting operations, including cloud storage and app infrastructure, audio/video calls, notifications, security, diagnostics, analytics and payment processing when applicable. Information is transmitted to the relevant provider only according to the Service or feature used and its applicable processing role. Use of a service provider does not necessarily mean that the provider may use personal information for its own purposes.

Our providers include:

Google Firebase and Google Cloud — application infrastructure, cloud services and related technical functionality.

Stream (GetStream) — real-time audio and video calling infrastructure, including processing of call-related identifiers, connection data and audio/video streams necessary to deliver calls.

Firebase Analytics — analytics used to understand use of Heedy and improve the service.

Firebase Crashlytics — crash reporting and technical diagnostics.

Firebase Cloud Messaging — delivery of push notifications to supported devices.

Apple Push Notification Service (APNs) — delivery of push notifications to Apple devices.

Google notification services — delivery of notifications to supported Android devices.

Google Analytics — analytics relating to our website and Services.

Stripe — processing applicable payments and subscriptions.

Shopify and Shopify Payments — operation of the Heedy webshop, website transactions and related ecommerce functionality.

These providers may process information in accordance with their contractual roles and their applicable privacy terms.

Legal and safety reasons

We may disclose information where reasonably necessary to:

• comply with applicable law, regulation or valid legal process;
• respond to lawful requests from public authorities;
• investigate fraud, security incidents or abuse;
• protect the rights, safety and property of Heedy, our users or others;
• enforce applicable terms and policies; or
• establish, exercise or defend legal claims.

Business transfers

If Fizzy Minds AB is involved in a merger, acquisition, restructuring, financing, sale of assets, insolvency or similar business transaction, personal information may be transferred as part of that transaction, subject to applicable law.

5. Relationship with Shopify

Our website and webshop use Shopify.

This section primarily applies when you browse heedy.app or use the Heedy webshop. It does not mean that a Heedy Android or iOS app user automatically provides webshop billing or shipping details. Mobile app account and communication data are processed as described in the app-related sections of this policy.

When you visit or purchase through the Heedy webshop, Shopify may process personal information necessary to operate the store, process transactions, maintain security and provide Shopify's services.

Information submitted through the webshop may therefore be transmitted to Shopify and relevant ecommerce service providers.

Shopify may process certain information on our behalf and may also act independently in relation to certain processing performed for its own purposes.

For more information about Shopify's processing, please review Shopify's applicable privacy notices.

6. Push Notifications

Heedy uses push notification services including Firebase Cloud Messaging, Apple Push Notification Service (APNs) and relevant Google notification services.

These services may process device identifiers or notification tokens and related technical information necessary to deliver notifications to your device.

You can control notification permissions through your device settings.

7. Security

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration and disclosure.

We also require or expect service providers handling personal information on our behalf to implement appropriate safeguards for the services they provide.

We protect personal information transmitted between the Heedy application and our backend services using encrypted connections, including HTTPS/TLS where applicable. We use access controls and other technical and organisational safeguards designed to limit unauthorised access to personal information.

However, no internet-based service, transmission method or storage system can be guaranteed to be completely secure.

Users are responsible for appropriately protecting access to their devices and Heedy accounts.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to provide the Services, maintain security, comply with legal obligations, resolve disputes and establish or defend legal claims.

Retention periods therefore depend on the type of information and the reason for processing it.

In determining retention periods, we consider whether the information is needed to maintain an active account or provide a feature, the user’s deletion request, the purposes for which the information was collected, applicable legal recordkeeping requirements, the periods needed for security and incident investigation, and whether the information can be deleted or anonymised.

Account and profile information. We generally retain account and profile data while an account is active. Following verified account deletion, we delete or anonymise information that is no longer needed, subject to the specific legal and operational exceptions explained below.

Family content and communications. Shared photos, videos, messages, family relationships and device associations are retained while needed to deliver the relevant Heedy features. When an account is deleted, related information is deleted or anonymised where practicable and legally required. Some shared content may remain associated with another connected user’s account where that user has an independent lawful basis to retain it; where this applies, we assess the relevant rights and deletion request.

Call information. We do not record or store the audio or video content of calls. Technical call and connection information is kept only as needed to provide the service, maintain security and reliability, or investigate technical incidents, subject to provider retention settings and applicable law.

Analytics, diagnostics and security logs. Retention depends on the relevant provider settings, the nature of the information and the operational purpose. We periodically review retention and seek to delete or anonymise information when it is no longer necessary. We do not claim that all analytics or security logs are erased immediately upon account deletion, because some records may not identify an account or may need to be retained for limited security, legal or technical reasons.

Backup copies. Information deleted from active systems may remain temporarily in secured backups until those backups are overwritten or expire in accordance with the applicable backup schedule. Backup information is restricted to recovery and security purposes and is not restored into active use except when necessary for those purposes; where applicable, deletion is reapplied following restoration.

Purchases, subscriptions and accounting records. We retain transaction and accounting information for periods required by law. Under Swedish accounting legislation, accounting records generally must be retained until the end of the seventh year after the calendar year in which the financial year ended. Other records may be retained for as long as needed to comply with tax, consumer-protection and warranty obligations, or to establish, exercise or defend legal claims. These requirements do not justify keeping unrelated app messages, photos or other information indefinitely.

If you request deletion, we will assess the information associated with your account and applicable exceptions and complete deletion without undue delay, taking account of verification, technical processing and legal requirements. Where information must be retained, we limit its use to the relevant permitted purpose. You may contact us for more information about a specific retention period.

When a Heedy account is deleted, personal information and user-generated content associated with that account are deleted or anonymised, except where particular information must or may lawfully be retained for purposes such as:

• compliance with legal or regulatory obligations;
• accounting and tax requirements;
• fraud prevention and security;
• resolving disputes;
• enforcing agreements;
• establishing, exercising or defending legal claims; or
• administering product purchases and applicable warranty rights.

Information relating to purchases made through the Heedy webshop may therefore be retained separately from a deleted Heedy app account where necessary to comply with accounting, tax, consumer-protection, warranty or other applicable legal obligations.

We do not retain personal information merely because an account has been deleted where there is no continuing purpose or lawful basis for retaining it.

9. Account and Data Deletion

You may permanently delete your Heedy account directly from within the Heedy app.

You may also request deletion of your Heedy account and associated data through our online account-deletion service:

Heedy Account Deletion

If you cannot use the app or online service, you may contact us at contact@heedy.app.

Deleting a Heedy account is permanent.

Permanently deleting your Heedy account cancels the automatic renewal of any active Heedy subscription associated with that account. Uninstalling or removing the Heedy app from a device without deleting your account does not cancel subscription renewal. If you need help, contact us at contact@heedy.app.

When an account is deleted, we delete or anonymise personal information and user-generated content associated with that Heedy account, subject to information that we are required or permitted to retain for legitimate purposes described in the Data Retention section above.

Deleting a Heedy app account does not necessarily result in deletion of records relating to a separate webshop transaction where those records must be retained for accounting, tax, consumer-protection, warranty, fraud-prevention or other legal purposes.

10. Your Rights and Choices

Depending on where you live, you may have some or all of the following rights concerning your personal information:

• the right to request access to personal information we hold about you;
• the right to request correction of inaccurate personal information;
• the right to request deletion of personal information;
• the right to request restriction of certain processing;
• the right to object to certain processing;
• the right to receive certain personal information in a portable format;
• the right to withdraw consent where processing is based on consent; and
• the right to lodge a complaint with an applicable data-protection authority.

These rights are not absolute and may be subject to conditions, limitations or exceptions under applicable law.

We may need to verify your identity before completing certain requests.

To exercise your privacy rights, contact us at contact@heedy.app.

Marketing communications

If you receive promotional communications from us, you can opt out using the unsubscribe mechanism included in the communication.

Even if you opt out of marketing communications, we may continue to send non-promotional communications necessary for your account, transactions or use of Heedy.

Device permissions

Camera, microphone, photos/media, notifications and approximate-location permissions can generally be controlled through your device settings.

11. EEA and UK Privacy Rights and Legal Bases

If you are located in the European Economic Area or United Kingdom, applicable data-protection laws provide additional rights concerning your personal information.

Depending on the processing activity, our legal bases may include:

• Performance of a contract — where processing is necessary to provide Heedy, fulfil an order or provide another service requested by you.
• Legal obligations — where processing is necessary to comply with applicable law.
• Legitimate interests — where processing is necessary for our or another party's legitimate interests and those interests are not overridden by your rights and interests.
• Consent — where you have given us permission for particular processing.

Our legitimate interests may include operating and improving Heedy, maintaining security, preventing fraud, providing customer support and managing our business.

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing performed before withdrawal.

You may also have the right to lodge a complaint with the competent data-protection supervisory authority in your country.

12. International Data Transfers

Heedy and our service providers may process personal information in countries other than the country in which you live.

Where personal information is transferred from the European Economic Area or United Kingdom to a country that has not been recognised as providing an adequate level of data protection, we use an appropriate transfer mechanism where required.

Such mechanisms may include the European Commission's Standard Contractual Clauses, an applicable UK transfer mechanism, or another legally recognised safeguard.

13. Children's Privacy

Heedy is designed to help families stay connected, including with older loved ones, and is not directed to children.

We do not knowingly collect personal information from children in violation of applicable law.

If you believe that a child has provided personal information to Heedy contrary to applicable requirements, please contact us at contact@heedy.app so that we can investigate and take appropriate action.

14. Third-Party Websites and Services

Our Services may contain links to websites or services operated by third parties.

The privacy practices of those third parties are governed by their own privacy notices. We are not responsible for the privacy or security practices of third parties that we do not control.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to Heedy, our data practices, technology, service providers, legal requirements or other operational reasons.

When we make changes, we will update the Last updated date at the top of this Privacy Policy and provide additional notice where required by applicable law.

16. Complaints

If you have concerns or complaints about how we process your personal information, please contact us at contact@heedy.app.

Depending on where you live, you may also have the right to lodge a complaint with your local data-protection authority.

If you are in the EEA, you may contact the competent supervisory authority in your country.

17. Contact Us

For questions about this Privacy Policy, our privacy practices, your personal information, account deletion, or requests to exercise your privacy rights, contact:

Fizzy Minds AB
Org. no. 559278-4267
Kristiansandsvägen 13
461 73 Trollhättan
Sweden

Email: contact@heedy.app

Fizzy Minds AB is the data controller for the personal information described in this Privacy Policy, except where another organisation acts as an independent controller under applicable law.