Estel Privacy Information and Terms of Use

Controller and contact

Lluís Bigordà · lluis@bigorda.com.

Purpose

Personal data is used only to create and manage accounts, families, children, tasks, star movements, notifications, reports, security, support and authorized devices for the Estel service.

Data processed

Name, email address, account preferences, family information entered by adults, optional child photographs, application activity, installation identifiers, notification or access tokens, device model and platform, application version, and technical security data such as IP address, browser and session information.

Estel TV and Smart TV

When a television is linked, Estel generates or receives a random device identifier together with the TV platform, model and app version. Pairing uses a short-lived code and, after approval by an adult, a revocable access token stored on the TV; the server stores only the representation needed to authenticate that token. Last access time and IP address are also recorded for security. An adult chooses which children each TV may display and whether the euro equivalent is shown. Estel TV is read-only and may display the authorized child’s visible name, star balance, tasks, progress, rewards and movement history. Estel does not use the Samsung DUID as its TV identifier and does not access the TV camera or microphone.

Legal basis

• 📄 Performance of the service and Terms of Use: to create the account, manage the family and provide requested features.
• ✅ Consent: for optional data that an adult chooses to add, such as a child photograph, which can be withdrawn by deleting it.
• 🛡️ Legitimate interests and security obligations: to protect accounts, prevent abuse, record access and resolve incidents.

The registration checkbox confirms that this information has been read and that the Terms of Use are accepted; it does not turn every processing activity into generic consent.

Children

The family administrator states that they are authorized to enter and manage the personal data of children linked to their family. Child and television access is intended for consultation and should be supervised by the responsible adults.

Recipients and service providers

Personal data is not sold and is not used for advertising. It is not disclosed to third parties except technical service providers required to host and protect the service, send email or deliver push notifications, including Google Firebase, under their applicable service terms and data-protection safeguards.

Push notifications and Firebase

When the Android application is used, Estel records a device identifier, Firebase Cloud Messaging token, phone model and its link to the account and family. Google Firebase processes the installation identifier, token and technical data such as app version to deliver notifications. These data are not used by Estel for advertising or third-party analytics. Logging out disables notifications associated with that device.

Retention and deletion

Data is retained while the family uses Estel. Any adult user can request deletion of their account from the app or from the public account-deletion page. The request can be cancelled for 5 days; after that, personal account data is deleted or anonymised while shared data belonging to other family members is preserved. If deletion of a shared family is also requested, all responsible adults must consent; without unanimous consent only the requesting account is deleted. A family administrator can revoke a linked TV at any time, which invalidates its access. A family administrator may also request deletion of the family space: it is disabled immediately and purge is scheduled after 5 days, during which it may be reactivated. Purge removes data from the active database and photographs managed by Estel. External server backups may remain temporarily until their normal rotation period expires.

Your rights

You may request access, rectification, deletion, restriction or portability by contacting lluis@bigorda.com. Requests will be answered within the applicable legal time limit. You may also lodge a complaint with the competent data-protection authority.

Basic Terms of Use

• 👨‍👩‍👧 The family administrator is responsible for managing authorized people and devices and reviewing the information entered for the family.
• 🔑 Each person must protect their credentials and must not share their password.
• ⭐ Estel is a family organization and incentive tool; financial and educational decisions remain the responsibility of the adults.
• 📺 Linked televisions are read-only consultation terminals and can be revoked from Settings → TVs.
• 📦 Before final deletion, downloading an Excel copy and a restorable family backup is recommended.

Security

Estel uses family-level data separation, role-based access control, hashed passwords, protected sessions, revocable tokens, audit logging and restricted access. No system is infallible; users should use unique passwords and keep their devices up to date.