JULIE’S HUB
Privacy policy
Last updated: 15 October 2026
This page is an English translation of the French version. In case of discrepancy, the French version prevails.
Julie’s Hub is a family organiser app. It works entirely without an account: creating an account only serves to back up your data and share it with the people close to you. No data is sold, rented or used for advertising. The only exception to “without an account” is Hub+: if you join a Hub+ event as a guest, your first name and what you enter are saved for that event (section 7).
1. Who is responsible
The app is published by Ludovic Lartigau, sole trader (trading as Oxycode Studio, SIREN: 131 139 446, SIRET: 131 139 446 00010), 6 chemin d’en Naubiau, 31480 Cadours, France, the data controller within the meaning of the GDPR. For any question about your data, you can write to contact@julieshub.com.
2. The data the app processes
Depending on what you choose to use:
•
Account: your email address and, depending on the method chosen, your Google identifier or a password — only if you create an account. The password is handled by Firebase Authentication: the app neither sees nor keeps it.
•
Profile: first name, last name, date of birth, photo — all optional, entered by you. For the photo, the app only accesses the image you select, and never reads the rest of your gallery.
•
Your content: tasks, folders, notes, shopping lists, recipes, menus, timetables, budget, wishes, hub notebook (Wi-Fi, codes, useful numbers).
•
Mood tracking and menstrual tracking (optional): the mood you note day by day, and your cycle tracking (dates, flow, pain, symptoms, notes), if you turn those modules on. This is health data, of a particularly sensitive nature.
•
Contacts: read on your phone only when you invite someone from your contacts. Only the numbers you pick are used, to prepare a text message sent from your phone. They are neither copied nor sent anywhere else.
•
Approximate location: to show the weather for your city. It is rounded to about one kilometre before anything is sent: your exact position never leaves your device.
•
Notifications: a technical device identifier, in order to notify you. The publisher may also send an announcement (news, seasonal themes) to all devices.
•
App version: the version number, the type of device (Android, iPhone or web), the phone model and its system version or, on the web, the browser, attached to your account, to know which versions are still in use and fix faults. No content, no location.
•
Julia, the AI assistant (optional): only if you turn it on by entering your own Google Gemini key. The messages you write to it, the photos you have it read (a recipe, a text) and the items needed for your request (tasks, lists, notes, recipes, calendar) are sent to Google Gemini while it generates the answer; depending on the plan tied to your key, Google may keep or use them under its own terms. Mood tracking, menstrual tracking and the budget are never sent to it.
•
Google Calendar and Google Tasks (optional): only if you import from or export to Google, and with your permission, requested on first use. The app reads your events and birthdays to import them, writes there the tasks, events and birthdays you choose to export, and deletes what it exported itself when you ask it to. Nothing else is read.
•
Hub+ (optional): for the organiser, the name, dates, place and note of an event, and what participants enter in it (what to bring or organise, expenses and amounts, schedule, practical info). For a guest, a first name and an anonymous technical identifier. See section 7.
Data received from Google APIs. Julie’s Hub’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. This data only serves the import and export functions you trigger: it is neither sold, nor used for advertising, nor read by any person. You can withdraw this access at any time at myaccount.google.com, under “Security › Third-party apps”.
3. On what legal basis
Each processing rests on a specific basis, and you can change your choices:
•
Your account and the backup: performance of the service you asked for. Without an account, the app works entirely offline.
•
Sharing with your hub: your consent, given item by item, and withdrawable at any time by stopping the share.
•
Hub+: for the organiser, performance of the service requested; for a guest, their consent, given by opening the invitation link and entering a first name, and withdrawn by leaving the event.
•
Notifications, location, Julia (the AI assistant), mood tracking and menstrual tracking: your consent, requested separately for each. Refusing them does not prevent you from using the rest. For mood tracking and menstrual tracking, which are health data, it is an explicit consent (Article 9(2)(a) GDPR), which you can withdraw at any time: by turning the module off or, for menstrual tracking, with “Withdraw consent, erase the history or the whole record”.
•
Billing (if you take a paid subscription): performance of the contract for the payment itself, and compliance with a legal obligation for keeping accounting records.
No data is mandatory, except the account’s email address when you create one: it is what identifies you to the service.
4. Where your data is kept
Everything is first saved on your device. If you sign in and turn the backup on, a copy is sent to Google Firebase (Firestore), hosted in the European Union. Without an account, nothing leaves your phone — unless you join a Hub+ event (section 7).
5. Encryption
In transit, everything that leaves your device goes over an encrypted connection (HTTPS/TLS): the backup, shared items, the weather, notifications and Julia. The app opens no unencrypted connection.
Cycle tracking, mood and your personal budget are encrypted on your device before being sent (AES-256), as are the bin and the archives. Your other content — tasks, notes, lists, recipes — is not encrypted this way: it is protected by the service’s access rules, which reserve reading it to your account and to the people you share it with.
To be honest about what this protects: this is not end-to-end encryption. The key is derived from your account identifier, which protects your data if the database leaks, but would not stop the host from accessing it. We prefer to say so rather than promise more.
Content you share (a shopping list, a joint budget, a timetable) cannot be encrypted: the people you share it with must be able to read it. Mood tracking and menstrual tracking, on the other hand, can never be shared — the app offers no way to do so.
6. Sharing
Nothing is shared automatically. Content only becomes visible to someone else when you explicitly share it, and you can withdraw that share at any time. The members of your hub see your member profile (first name, and whatever you choose to add) and the content you share — nothing else from your account.
To bring someone into your hub, you give them a single-use invitation code, valid for 24 hours. That code only lets them learn your hub’s name and join once.
In a shared budget, an expense can show who paid it and for whom: these details, along with the expense, are visible to the members of that budget.
7. Hub+: one-off events
Hub+ lets you organise an event — birthday, trip, party — with up to 30 people, some of whom have neither the app nor an account. It is the only feature where data leaves your phone without your having created an account.
•
The organiser must have an account. They record the event’s name, dates, place and a note; participants add what to bring or organise, expenses (label, amount, people concerned), a schedule and practical info (address, access codes…). Do not put anything sensitive in it.
•
A guest has no account: they enter a first name, and the app creates an anonymous technical identifier for their device (Firebase Authentication, anonymous mode) — no email address, no password, no phone number. This identifier cannot identify them on its own.
•
Who sees what: the participants of an event — and only them — see the first names and everything entered in it. The invitation link and QR let in anyone who receives them, as long as places remain and the event is not over; the organiser can remove a participant and renew the link (the old one then stops working).
•
The accounts (who owes whom) are an indicative calculation made on your device from the amounts entered: the app neither receives nor transfers any money.
•
Your rights: a participant can leave the event at any time, and the organiser can delete it for everyone. To have an anonymous identifier erased, write to the contact address above.
8. Third-party services
•
Google Firebase — account, backup, sharing and Hub+.
•
Expo Notifications — delivery of notifications. The text of a notification (for example “Julie added milk”) passes through this service.
•
MET Norway (Norwegian meteorological institute) — weather. Receives an approximate position (to about 1 km), with no identifier. On the web version, the request goes through our Cloudflare hosting.
•
Photon (komoot, OpenStreetMap data) — city search, and your city’s name on the web version. Receives the name searched for or the same approximate position, with no identifier.
•
Google Calendar and Google Tasks — import and export, only if you use them (see section 2).
•
Cloudflare — hosting of the web version of the app.
•
Google Play or Stripe — payment of the subscription, when offered. The app never sees your bank details.
•
Google Gemini — Julia (AI assistant), off by default. It only works with a key you provide, and mood tracking, menstrual tracking and budget data are excluded.
No advertising, tracking or audience-measurement tool is built in.
9. Transfers outside the European Union
Your content and backups are kept in France (Google Cloud Firestore, Paris region). Accounts (email address, identifier), managed by Firebase Authentication, are on the other hand processed by Google, including in the United States. Other providers are US companies, which may access data from the United States for the technical operation of the service: Google, Cloudflare (hosting of the web version), Expo (notifications) and, when the subscription is paid by card, Stripe.
These transfers are covered by the European Commission’s standard contractual clauses, and by these companies’ participation in the EU–US data protection framework.
10. Retention
Your data is kept for as long as your account exists. When you delete it, the backup, the profile, your place in hubs, sharing requests, the directory and the notification identifier are erased. Data left on your device disappears when you uninstall the app.
Hub+: the content of an event (lines, expenses, participants) and its invitation links are erased automatically 30 days after the event ends. An anonymous identifier left unused for twelve months is deleted.
Billing: if you take a paid subscription, your payment data is processed by Stripe or Google Play; we keep invoices and accounting records for ten years, as required by French law, even if the account is deleted.
11. Your rights
Under the GDPR, you have the following rights — the first three can be exercised directly in the app:
•
Access and portability: Settings › My data › Export data (JSON).
•
Rectification: all your data can be edited in the app.
•
Erasure: from the app or the web version (Settings › Delete my account) or, if you have already uninstalled the app, by writing to the address above from your account’s email address (answer within one month) — the page julieshub.com/suppression-compte describes both ways. The app tells you if any part could not be erased.
•
Objection and restriction: by writing to the address above.
You may also lodge a complaint with the CNIL (www.cnil.fr) or with the supervisory authority of your country of residence.
12. Children
The app is designed for family use. An account is reserved for people over 15; below that age, use must be under a parent’s responsibility. In Hub+, a guest has no account: the organiser makes sure the minors they invite take part with a parent’s agreement.
13. Changes
Any change to this policy will be published on this page, with an update date. A change affecting how your data is used will be flagged to you in the app.
Julie’s Hub · 15 October 2026 · Contact: contact@julieshub.com