Privacy policy
We collect only what the apps need to work. No ads, no tracking or analytics tools, and we never sell your data.
Who we are
Ekvilo makes the Android apps Namai, Scam Guard and Norai (Kornelijus Grigaitis, Lithuania). Questions and requests: info@ekvilo.lt.
Sign in with Google
You can create your Ekvilo account with Google. From Google we receive only your e-mail address and a Google account identifier; Google also shows us your name and profile picture, which we do not store. We use them only to sign you in and to recognise the same person on a new phone. We do not read your Gmail, contacts, files or anything else in your Google account, and we never share Google data with anyone.
What we collect
| Where | What |
|---|---|
| All apps | A random phone identifier and sign-in token, the app version and the last connection time. If the app crashes: the error description, phone model and Android version, with personal data (e-mails, numbers, account numbers, link paths) removed. |
| Account (Namai, Norai) | E-mail address. With Google sign-in also the Google account identifier. |
| Namai | Bills, payments, items, purchases and budget are encrypted on your phone. The server sees only record numbers, type, size and time — it cannot read the content. Receipt photos stay on the phone. |
| Scam Guard | No account needed. Calls and messages are checked on the parent's phone; their content is not sent to the server. Questions to the guardian, answers, alerts and the trusted-sites list travel between the paired phones encrypted; the server cannot read them. |
| Norai | Name, birthday (month and day), wish lists and wishes (title, note, links, price), photos (location and other metadata removed), family groups and who marked a wish as being bought. The server stores these unencrypted because it must check who may see a list. Only people you share a list with can see it. The list owner never sees who buys what. |
| Plans | Plan type, start and end, gift or discount codes used. Payments (when enabled) go through Google Play — we never see card details. |
Why
- To make the apps work the way you use them (performance of a contract).
- To protect the service from abuse and to fix errors (legitimate interest). IP addresses are used only briefly to limit repeated attempts and are not kept in logs.
Who else can see it
- Hostinger — the server provider; the server is in Lithuania.
- Google — if you sign in with Google.
- Brevo — sends e-mails with a sign-in code (only your e-mail address and the code).
Database backups are kept on our own server in Lithuania for 14 days. An additional copy elsewhere is encrypted, and only we hold the key.
How long we keep it
| Data | How long |
|---|---|
| Scam Guard messages | 30 days |
| Crash reports | 90 days |
| Sign-in codes | up to 1 day |
| A phone that never joined anything | 30 days after its last connection |
| Namai account with no phone | 90 days |
| Norai account and lists | 400 days without activity (occasions come once a year) |
| Namai household records | while the household is used; deleted on request |
| Backups | 14 days |
Your rights
You can get a copy of your data, correct it, delete it or restrict its use. In Namai you can export your data yourself (Household → “Eksportuoti duomenis”). In Norai you can delete your account in the app. For anything else write to info@ekvilo.lt — we answer within 30 days.
If you think your data is handled wrongly, you can complain to the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt).
Children
The apps are meant for adults. Children under 14 may use them only with a parent's consent.
Changes
If this policy changes, we update the date at the top and tell you about important changes in the apps.