Privacy Policy — Hiy
Last updated: 2026-10-26
Hiy ("we") is a family app that plans meals, groceries, chores, workouts and daily words. This policy explains what data the Hiy app and website (do.wheatnd.com) collect, why, and the choices you have.
Data we collect
- Account: your name and email address when you sign in with Google, Apple or email (via Google Firebase Authentication). Family members added with a QR code or link have no email — we store only the name entered by the person who added them.
- Household content you enter: household name, number of adults and children, foods to avoid, pantry items, shopping list, chores and points, workout logs and word progress. Members of your household can see shared household content.
- Device data: notification token (to send household notifications), app language, time zone, and basic technical logs (IP address, request times) for security.
- Location (optional): only when you tap "Use my location" to find gyms or grocery stores nearby. The app rounds your position to about 100 m and sends it to our server just to search our place list — we do not store it, share it, or use it for ads. Location is never used on child profiles.
- Purchases: if you subscribe to "Remove ads", we receive the subscription status and transaction identifiers from the App Store or Google Play. We never receive your card or payment details.
- Advertising (mobile app only): Google AdMob may collect device advertising identifiers (IDFA on iOS with your permission, Advertising ID on Android), IP address and ad interactions to show and measure ads.
How we use data
- To run the service: suggest meals from your pantry, keep the shared shopping list and chores in sync, and track your workouts and words.
- To send notifications you turn on (for example, when someone adds an item or goes shopping).
- To show ads in the free version and to process "Remove ads" subscriptions.
- To keep the service secure, prevent abuse and fix problems.
Ads and consent
- Where required (for example in the EEA, UK and Switzerland) we ask for your consent through Google's consent message before personalized ads are shown. On iOS, personalized ads use your device identifier only if you allow tracking.
- You can change your choice at any time in your device settings (iOS: Settings → Privacy → Tracking; Android: Settings → Google → Ads). Ads are never shown during cooking, workouts or while shopping, and never to "Remove ads" households.
Sharing
- We do not sell your personal data. We share data only with service providers that run Hiy for us: Google Firebase (sign-in, notifications), Google AdMob (ads), Apple and Google (payments), and our hosting provider — each under its own privacy terms.
- Maps are loaded from OpenFreeMap, which receives your IP address and the map area on screen (not your exact position). Place information comes from OpenStreetMap (© OpenStreetMap contributors). Places marked "Ad" are local businesses that pay to be listed first — we never share your data with them.
Deleting your account and data
- In the app: Profile → Delete account. This permanently deletes your account, word progress, workout history and notification tokens. If you are the only member of a household, the household and its content are deleted too.
- You can also request deletion by email (address below). Backups are removed within 14 days.
- Subscriptions are managed by the App Store or Google Play — cancel them there to stop renewal.
Your rights
- Depending on where you live, you may have the right to access, correct, export or delete your data and to object to or restrict processing. Contact us to use these rights.
Children
- Hiy is for adults managing a household. We do not knowingly let children under 13 (16 in the EEA) create their own accounts.
- A parent or guardian can add a child to their household with a one-time QR code or link, without an email address. For a child we store only the first name the parent enters and the child's activity inside the household (for example chores done or words learned). Child profiles never see ads, no advertising identifiers are used for them, and they cannot make purchases.
- The household owner can remove a child at any time (Profile → Members), which permanently deletes the child's profile and data. Parents can also contact us to review or delete it.
Security and transfers
- Data is sent over HTTPS and stored on secured servers with access controls. Our providers may process data in other countries; where required, they use legal safeguards such as standard contractual clauses.
Changes
- We will update this page when our practices change and update the date above.
Questions or requests: support@wheatnd.com