Privacy policy

Last updated: 2 May 2026

Data controller

  • Company name: COMFITY HOME SERVICES, S.L. ("Comfity")
  • Tax ID (NIF): B75256412
  • Registered office: Avenida Santa Ana, 4, Puerta C, Planta 5. 48940, Leioa (Bizkaia), Spain
  • Privacy contact: contact@comfityapp.com

Information we collect

Comfity collects personal data that the User provides directly when registering and using the Platform, as well as data derived from technical use of the Platform:

  • Registration data: first name, surnames, email, phone number, date of birth and, in the case of Professionals, profile photo, description of the services offered and, where applicable, identification document number.
  • Address and geolocation data: the address where services are provided and, with the User's consent, real-time geolocation of the mobile device to display nearby Professionals.
  • Service data: booking details, in-app chat messages, ratings and reviews.
  • Payment data: payment processing is handled by an external provider (see "Disclosures to third parties"). Comfity does not store card data or payment credentials.
  • Technical device data: IP address, browser type and version, operating system, device identifiers and Platform activity logs.

Purposes of processing

  1. Manage account creation and maintenance on the Platform.
  2. Enable the intermediation service: display available Professionals, manage bookings, facilitate communication between family and Professional, process payments through the external provider and manage ratings.
  3. Handle queries, incidents and complaints from the User.
  4. Ensure Platform security, prevent fraud and comply with legal obligations.
  5. Send operational communications related to the contracted services.
  6. If the User expressly consents, send commercial communications about Comfity, news and promotions.
  7. Carry out statistical analysis to improve the Platform, always using aggregated or pseudonymised data.

Legal basis

  • For purposes 1, 2 and 3: performance of a contract to which the data subject is party (art. 6.1.b GDPR).
  • For purposes 4 and 5: compliance with legal obligations (art. 6.1.c GDPR) and Comfity's legitimate interest in security and proper Platform operation (art. 6.1.f GDPR).
  • For purpose 6: data subject's consent (art. 6.1.a GDPR), revocable at any time.
  • For purpose 7: legitimate interest (art. 6.1.f GDPR).

Retention periods

Personal data will be retained for as long as the User keeps an active account on the Platform. After deletion, data will be retained for the periods legally required to fulfil tax, commercial and fraud-prevention obligations (generally up to six years under the Spanish Commercial Code). Data linked to commercial consent is kept until the data subject withdraws consent.

Disclosures to third parties

To provide the service, Comfity shares personal data with the following third parties:

  • Payment service provider: Comfity uses an external payment service provider to process collections and payouts arising from use of the Platform. The provider accesses only the data strictly necessary for the payment operation and processes it as a controller or processor under its own privacy policy. The specific provider's identity will be detailed in this Policy and is available upon request via contact@comfityapp.com.
  • Cloud infrastructure provider: the Platform is hosted on Google Cloud Platform (Firebase service, owned by Google Ireland Limited), with primary data storage in data centres located in the European Union. Google acts as data processor under the contractual and security guarantees required by the GDPR.
  • Counterparties of each booking: data strictly necessary for service delivery is shared between the family and the Professional involved in each booking (e.g., name, service address, contact through the in-app chat).
  • Competent authorities: when required by law or judicial order.

Comfity does not transfer personal data outside the European Economic Area unless required by a provider that offers the appropriate guarantees set out in the GDPR (Standard Contractual Clauses or adequacy decisions).

Data subject rights

The User can exercise the following rights at any time: access, rectification, erasure, restriction of processing, objection, portability and the right not to be subject to automated decisions. To exercise them, send a request to contact@comfityapp.com indicating the right being exercised and including a copy of an ID document. Account and data deletion can also be requested through our deletion request form.

The User also has the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if they believe that the processing of their data does not comply with applicable law.

Security

Comfity has adopted reasonable technical and organisational measures to protect personal data against unauthorised access, loss or alteration, taking into account the state of the art, the nature of the data processed and the associated risks.

Modifications

Comfity may update this Privacy Policy to reflect regulatory or operational changes. The version in force will always be the one published on the Website.