Pacelli (the "App", "we") is a household management app that helps families share tasks, plans, lists, a calendar, an inventory, a house manual, and an in-app AI assistant. Privacy is a core feature, not an afterthought — most content you create is end-to-end encrypted on your device before it ever leaves it.
This policy tells you exactly what we collect, why, where it lives, and how to delete it.
Juan Carlos Celis Pinto, sole developer of Pacelli, is the data controller under the GDPR. You can contact us at juancarlos.celis92@gmail.com.
We are based in Ireland and the App is offered worldwide.
During onboarding you choose where your data lives:
You can switch modes at any time and wipe your cloud data with one tap (see "Burn all data" below).
When you sign in we receive from your chosen identity provider:
Used to identify you across devices and to scope access to your household. Stored as long as your account exists.
Tasks, subtasks, checklists, plans, calendar entries, inventory items, house-manual entries, AI chat messages, attachments metadata, feedback text. All human-readable fields are AES-256-CBC encrypted on-device with your household key before they reach the server. Without that key the ciphertext is meaningless to us, to Google, and to anyone with database access.
If you submit feedback or if the app records a diagnostic event (an error or warning), the message text and any context are encrypted with your household key before being stored. We use this to improve the App; we cannot read it without your household key.
If you enable notifications we send a Firebase Cloud Messaging device token to Apple Push Notification service or to Google Firebase. We do not include sensitive content in notification payloads.
If you attach a photo or use the barcode scanner, the App accesses your camera or photo library. The image data is processed on-device. If you choose to back attachments to Google Drive, the file is uploaded to your own Google Drive account under a Pacelli folder; we never receive a copy.
If you connect a third-party AI provider (Anthropic Claude, Google Gemini, or OpenAI ChatGPT), your API key is stored in your device's secure keychain (iOS Keychain / Android Keystore) and only that provider receives your prompt. We do not proxy or log AI requests.
household_keys collection. Only members of your household can unwrap it; we cannot.flutter_secure_storage).| Sub-processor | Purpose | Region |
|---|---|---|
| Google Firebase | Authentication, Firestore database, Cloud Functions, Cloud Messaging | EU multi-region |
| Apple | Sign in with Apple, push notifications | Worldwide |
| Google Sign-In, optional Google Drive attachments | Worldwide | |
| Your chosen AI | In-app AI Assistant (only if you connect one) | Provider's region |
You have the right to: access, rectification, erasure, restriction, portability, and to object to processing. Use the in-app export and burn features for portability and erasure, or email us at juancarlos.celis92@gmail.com for any other request — we will respond within 30 days.
You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).
Pacelli is not directed at children under 13. If you believe a child has created an account, please contact us and we will delete it.
When we change this policy we will update the Effective date above and post the new version at the same URL. Material changes will also surface in-app on next launch.