Privacy Policy
Last updated: February 2026
Barefoot Hearts ("we", "our") respects your privacy and complies with the EU General Data Protection Regulation (GDPR). This policy describes how we collect, use, and protect your personal data.
Data controller
The data controller is Barefoot Hearts, an educational project in Turís, Valencia, Spain. For privacy requests or questions, contact us at barefoot-hearts@refarmd.com.
Data we collect
We collect: account and profile data (name, email, phone, address, profile picture); authentication data (OAuth provider, session); usage data (landing page visits, with your consent—including approximate location and referral information); chat and app usage (messages, tool use) to provide the service; payment-related data processed by Stripe; push notification tokens when you enable notifications; and career applications (CV, message) when you apply for a position.
Purposes and legal basis
We process your data to provide the educational and family app (contract), to improve our services and analyse usage where you have given consent (consent), to comply with legal obligations (legal obligation), and where necessary for our legitimate interests (e.g. security, fraud prevention). Analytics and optional activity logging are based on your consent.
Retention
We retain your data for as long as your account is active and as required for legal, accounting, or security purposes. Activity logs may be retained for a limited period. You may request erasure at any time.
Your rights (GDPR)
You have the right to access, rectify, erase, restrict processing, data portability, object, and withdraw consent where applicable. You may lodge a complaint with a supervisory authority in your country.
How to exercise your rights
Use "Request my data" and "Delete my account" in the app Settings, or email barefoot-hearts@refarmd.com. We will respond within one month.