# ChoreChamps — Privacy Policy **Effective Date:** August 14, 2026 **App Version:** 1.0 **Contact:** chores.ashbi.ca --- ## Overview ChoreChamps is a family chore management app where parents manage their household and kids earn points for completing tasks. This policy explains what data is collected, how it is used, and what rights you have regarding that data. **A note for parents:** ChoreChamps is designed for family use. Parents create accounts and control all child profiles. If your children use this app, you are in control of their data at all times. This app complies with applicable children's privacy laws, including COPPA (Children's Online Privacy Protection Act) requirements for users under 13. ChoreChamps is built on a single principle: **your family's data belongs to your family.** --- ## Data We Collect ### Parent Account Data When you create a ChoreChamps account, you provide: - Email address (for login and account recovery) - A password you choose (hashed and stored securely — we never see your plaintext password) - Your name (optional, used only for display within your family account) ### Child Profile Data Parents add child profiles to their family account. The data collected for each child includes: - Child's name (set by the parent) - Points balance (managed by the parent through approved chores and rewards) - Chore completion records (what tasks were completed and when) - Badge and achievement records (what the child has earned) **We do not collect any data directly from children.** All child profiles are created and managed by the parent account holder. ### Usage Data The current deployment does not send analytics events to a third-party provider and does not use behavioral advertising. The hosting service may produce operational logs needed to keep the service secure and available. We do not collect precise location data or device identifiers for advertising. ### No Biometric or Sensitive Data ChoreChamps does not collect biometric data, health information, precise geolocation, photos, or voice recordings from children or parents. --- ## How We Use Data ### What We Use Parent Data For - **Authentication** — verifying you own your account when you log in - **Account access** — maintaining your authenticated session and family access ### What We Use Child Profile Data For - **Displaying the child's dashboard** — showing assigned chores, points balance, and achievements - **Processing chore completions** — recording when a task is done and updating the point balance after parent approval - **Awarding badges** — tracking achievements as the child earns them - **Rewards redemption** — processing point redemptions when the child claims a reward ### What We Don't Do - We do not use your data to build advertising profiles. - We do not sell, license, or share your family's data with any third party for marketing or advertising purposes. - We do not use data collected from children for any purpose other than the service itself. - We do not operate any third-party behavioral advertising in this app. - We do not collect data from children under 13 without verifiable parental consent — and since parent accounts control all child data, this consent is given by the parent when they create the child profile. --- ## Data Sharing ### Shared With No One ChoreChamps does not share your family data with any third party. No data brokers, no ad networks, no analytics companies that resell your information. ### One Exception — Subprocessors We use a small number of trusted service providers to run the app: - **Vercel / Coolify** — hosting and server infrastructure. Servers store your app data (database) as part of running the service. These subprocessors are contractually bound to use your data only to provide the service we pay them for. ### No Social Plugins or External Links ChoreChamps does not embed social media plugins, share buttons, or external tracking on any screen visited by children. --- ## Children's Privacy (COPPA Compliance) ChoreChamps is designed for family use and must be compliant with COPPA (Children's Online Privacy Protection Act) for users under 13 in the United States. ### How We Protect Children's Data 1. **Parent as data controller.** Parents create all child profiles and control all data associated with them. The parent account holder is the decision-maker for every piece of child data. 2. **No direct collection from children.** We do not ask children to provide any information. A child can only access ChoreChamps through an account a parent controls. 3. **No behavioral advertising.** This app contains no third-party advertising, no interest-based advertising, and no collection of children's data for advertising purposes. 4. **Data minimization.** We collect only what is needed to run the service — child name, point balance, chore completions, and earned badges. No extra. 5. **Parental access and deletion rights.** At any time, a parent can log into their account and review, update, or delete any child profile and its associated data. 6. **Verifiable parental consent.** By creating a child profile within a parent account, the parent provides consent for that child's data to be used in the service. Parents can delete that data and the child profile at any time. ### For Non-U.S. Users If you are outside the United States, similar protections apply under applicable local law. The principles are the same: parents control their children's data, no third-party data collection for advertising, and full parental access and deletion rights. --- ## Data Retention - **Parent accounts** persist until the parent deletes their account or requests deletion. - **Child profiles** persist until the parent deletes them or the parent account is removed. - **Chore completion records** are retained as part of the family's history for as long as the account is active. - **Points and badge data** are updated in real time and reflect the current state. To delete any data, log into your account and delete the relevant records, or contact us at the support URL. --- ## Your Rights As a parent account holder, you can at any time: - **Review your child's profile data** — log in and see all stored information - **Update or correct any data** — edit child names, adjust points if needed - **Delete a child profile** — removes all associated data for that child - **Delete your entire account** — removes all family data permanently - **Export your data** — contact us and we will provide an export of your family's data in a standard format - **Refuse further data collection** — delete the child profile or contact us To exercise any rights or ask questions: **chores.ashbi.ca** (or the app's built-in support channel). --- ## Security - Passwords are hashed using bcrypt before storage. We never store plaintext passwords. - All data in transit is encrypted via HTTPS. - Database connections use environment-variable secrets — no credentials in code. - Access to the backend is restricted to authenticated sessions — no public database exposure. - Session tokens expire after a fixed period and require re-authentication. --- ## Changes to This Policy If this policy changes, the updated version will be posted at the same location with a new effective date. --- ## Governing Law This privacy policy is governed by applicable privacy laws in the jurisdiction in which ChoreChamps operates, including but not limited to: - COPPA (United States — children under 13) - GDPR (European Union — where applicable) - Other applicable state and national children's privacy laws --- ## Contact For privacy questions, data deletion requests, or concerns: - **App:** chores.ashbi.ca - **Developer:** Available via the app's support channel or through the contact form at chores.ashbi.ca --- *Last updated: August 14, 2026*