Privacy policy
This policy explains how the Ciurma mobile app (formerly called Teamergy) handles your personal data, under Regulation (EU) 2016/679 (GDPR). Since October 29, 2026 Teamergy is called Ciurma: the service and the controller do not change.
Who is responsible
The controller of your data is Antonio Abbattista, an independent developer based in Italy. For anything about your data, write to phoenix.tu.dev@gmail.com. No data protection officer has been appointed.
What data we handle, why and on what basis
You give us most of this data yourself, by signing in and using the app. We do not ask for anything else.
| Data | What for | Legal basis |
|---|---|---|
| Name and email of your Google account, and the account identifier | To create your account, sign you in and identify you in your crews | Contract (art. 6.1.b GDPR) |
| Your profile: display name and, if you add one, your picture | To show who you are to the other members of your crews | Contract |
| What you and your crew put in the app: crews, members and roles, expenses and balances, chores, shopping lists, pantry, events and replies, polls and votes, notes, crew pictures | To provide the service | Contract |
| Invitations: the email address you invite and the invite codes (valid for 7 days) | To let people join a crew | Contract |
| Notifications: the push token of your device, whether notifications are on, quiet hours, the modules you muted | To send notifications and shared reminders | Contract |
| Usage statistics collected by Google Analytics for Firebase, a library included in the app: automatic events (such as first open and sessions), an installation identifier and device information | To understand how the app is used and improve it | Legitimate interest (art. 6.1.f) |
| Error and performance reports collected by Sentry: crashes, technical details of the app and the device | To find and fix errors | Legitimate interest |
| A bug report you decide to send, with the text you write and the screenshot you choose to attach | To understand and fix the problem you describe | Consent (art. 6.1.a), given when you send it |
| Your plan and its expiry date. Payments are handled by Google Play: we never see your card | To give you the features of your plan (if and when paid plans are on) | Contract |
| Technical logs of our providers (such as the IP address of a connection) | To keep the service secure and working | Legitimate interest |
| A copy of your data and your preferences, kept on your phone | To let you browse your data offline. It stays on the phone | Contract |
Providing the data marked "contract" is needed to use the app. Without it we cannot run your account.
Who sees your data
The contents of a crew (names, roles, pictures, expenses, lists and everything else in it) are visible to the members of that crew. The captain and the admins of a crew can also invite people, see its invite code and remove members.
Someone you invite by email sees your name and the name of the crew. We do not sell your data and we do not use it for advertising or to take automated decisions about you.
Providers that process data for us
We use these providers, each under its own privacy policy:
- Supabase: database, sign-in and file storage. Our project runs in the European Union.
- Google: Google sign-in, Firebase Cloud Messaging (notifications), Google Analytics for Firebase and Google Play (distribution and payments).
- Sentry: error and performance reports, on servers in the European Union.
- Cloudflare: hosting of this website.
Advertising is not shown today. If it is ever turned on (with Google AdMob), it will only be with your consent and this policy will be updated first.
Transfers outside the EU
Some providers, Google in particular, may process data outside the European Economic Area, for example in the United States. In that case the transfer relies on the European Commission's standard contractual clauses or on an adequacy decision (such as the EU-US Data Privacy Framework), where applicable.
Camera, pictures and permissions
The camera is used only on your phone, to read the barcode of a loyalty card or the QR code of an invitation. Those images are not uploaded.
The app uploads a picture only if you choose it: your profile picture, a crew picture or the screenshot of a bug report.
The app asks for permission to show notifications and reminders. You can refuse or change it in the settings of your phone.
The app declares the advertising ID permission, which Google libraries require. Today the app does not show advertising and we do not use that identifier.
How long we keep your data
We keep your data while your account exists. Invite codes expire after 7 days.
You can delete your account at any time from the app: Settings, "Delete account". Your account, your profile and picture, and the data tied to you are then deleted. Because the balances of a crew depend on its expenses, expenses you took part in may change or disappear for the other members too.
If you leave a crew without deleting your account, what you entered stays in that crew.
Some technical copies follow the retention rules of our providers: backups of the database, Sentry reports and Google Analytics data. They are not used for anything else.
Your rights
You can ask us for access to your data, correction, deletion, restriction of processing, portability and you can object to processing based on legitimate interest. You can withdraw a consent at any time, without affecting what was done before.
In the app you can correct your name in your profile, export your data (Settings, "Export my data") and delete your account. For anything else write to phoenix.tu.dev@gmail.com. We answer within one month.
If you think your data is not handled correctly you can complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it) or to the authority of your country.
We do not sell or share personal data for targeted advertising, also within the meaning of the California CCPA/CPRA.
Minors
Ciurma is not meant for people under 14.
Security
Connections to the servers are encrypted. Access to the data is protected by sign-in and by access rules in the database. We never store a password: you sign in with Google. No system is completely secure; if a data breach affects you we will tell you as the law requires.
Changes
We may update this policy. The new version is published on this page with its date, and for important changes we will also tell you in the app. Previous versions are available on request.
Contact
For any question about your privacy write to: phoenix.tu.dev@gmail.com.
Previous versions are available on request: phoenix.tu.dev@gmail.com.