Privacy Policy

Last updated: May 2026

ChoreQuest is a family-focused app designed to help parents and children build daily habits through gamified chore tracking. We take the privacy of your family — especially your children — seriously. This policy explains what data we collect, how we use it, and what rights you have over it.

1. What data we collect

Parent account

Name and email address (from Google sign-in)
Profile photo (from Google, if provided)
Account creation timestamp

Child profiles

Name (entered by the parent)
Email address (used only to invite the child to the app)
Age bracket (used to suggest appropriate chores during setup)
Chore completion history, points, streaks, and badges

Usage data

Timestamps of actions (completing a chore, redeeming a reward, etc.)
Basic server logs retained by our hosting provider (Vercel)

2. How we use your data

To operate the app — showing chores, streaks, badges, and rewards to the right family
To calculate progress metrics (streaks, XP, levels) that keep children motivated
To allow parents to monitor and manage their children's chore activity
To send in-app and browser notifications you have explicitly enabled

We do not use your data for advertising, profiling, or any purpose beyond operating ChoreQuest for your family.

3. Data sharing

We do not sell, rent, or share your data with any third parties for commercial purposes. Your family's data is shared only with the infrastructure services required to run the app:

Supabase — database and authentication hosting (SOC 2 Type II certified, data encrypted at rest)
Vercel — app hosting and edge delivery
Google — OAuth sign-in provider only; we receive only your name, email, and profile photo

No analytics platforms, advertising networks, or data brokers have access to your data.

4. Children's privacy (COPPA)

ChoreQuest is designed for use by parents on behalf of children. We comply with the Children's Online Privacy Protection Act (COPPA):

A parent or guardian must create the family account and invite children
We obtain your explicit consent before any child data is stored
Child accounts cannot be created independently — only a verified parent can add a child
Parents can delete any child's data at any time (see Section 6)

5. Security

All data is encrypted at rest and in transit (TLS)
Row-level security ensures your family's data is only accessible to your family
No passwords are stored — authentication is handled entirely by Google OAuth
Database access is strictly controlled and not accessible to unauthorised parties

6. Your rights — data deletion

As a parent, you are in full control of your family's data:

Remove a child: go to Family settings → remove the child. This permanently deletes all their data from our database.
Delete your account: contact the developer directly and we will delete all data associated with your family within 30 days.

7. Data retention

Data is retained for as long as your family account is active. Deleted child profiles and removed chore histories are permanently purged from our database immediately. Server logs are retained by Vercel for up to 30 days.

8. Changes to this policy

If we make material changes to how we handle your data, we will notify you via the email address on your account before the changes take effect. Continued use of the app after that notification constitutes acceptance of the updated policy.

9. Contact

Questions about this policy? Reach out to the developer directly.