Privacy

The Tweens app is used by mentors, parents and tweens in the Tweens groups in Oslo-Follo to plan gatherings. This page explains what we store, who can see it, and for how long.

What we store

  • About adults: name, email, and which group and role you have. You sign in through Auth0, with email and password or with another account, such as Google.
  • About children: name, gender, place, date of birth, sweater size, a fun fact about the child and a photo – added by the parents or by the mentors. The parents answer the consents (photo, photos from gatherings, Telegram, birthday greeting) via their own link, and the answer is stored with name and time. If they say no to a photo, the photos are deleted.
  • About parents: name, mobile, email and Telegram username that they enter themselves, and optionally “anything we should know” (e.g. allergies). It is shown only to the mentors in the group and deleted when the season is over.
  • About the gatherings: plan, attendance, who has which tasks, and photos from the gatherings.
  • Answers to polls in Telegram about who is coming: the name in Telegram and the answer. Mentors are linked to their account. The answers are deleted no later than one month after the gathering.
  • If you submit expenses: account number, signature, the receipts and the amounts. They are used only for the “Expense reimbursement” form to the church's accounting, and are seen only by you and the group leader. Receipts and the form are deleted automatically after 18 months (the group admin can choose a shorter or longer period).
  • A log of changes to access and to information about children: who did what, and when. Children appear in the log only as a number, not by name.

Who sees what

  • Children, photos and attendance are only shown to signed-in members of the same group.
  • The share link for parents and tweens only shows date, time, place, theme and programme – never children or photos. It cannot be found through Google.
  • Messages sent to the Telegram groups never contain photos of children, and only one name: the first name in a birthday greeting, when a parent has ticked the box for it. The child's name is never sent to AI.
  • We do not sell information, and we only share it with the services listed below.

How long

  • Information about children, photos of children and photos from the gatherings are deleted automatically when the season is over.
  • The log is deleted after one year, and quiz answers after one day.
  • Your account is kept until you ask for it to be deleted.

Artificial intelligence (AI)

  • Some features use AI from Anthropic and OpenAI to suggest quiz questions, theme programmes, messages and illustrations, and to read the shop, amount and date from receipts for expenses. The AI never receives children's names, photos of children or lists of children, and a mentor reviews everything before it is used.

Services we use

  • Vercel (running the website and storing photos), Neon (the database, in Frankfurt), Auth0 (sign-in, in the EU) and Telegram (messages to the groups).
  • Vercel Speed Insights measures how fast pages load, without cookies and without tracking you.

Cookies

  • We only use necessary cookies: for sign-in, the chosen language and the chosen group. No advertising and no tracking.

Your rights

  • You can ask to see, correct or delete information about you and your child. Much of it you can change yourself on My page – otherwise, contact the mentors in your group.
  • If you believe we handle information incorrectly, you can complain to the Norwegian Data Protection Authority (Datatilsynet).

How this is secured in practice – measures in place and planned – is on its own page: Security and privacy in practice

Last updated 28 October 2026