Privacy policy

Chore Kidoo is a family app. A parent creates a family, adds the children, and sets up tasks and rewards. Children mark tasks done by taking a live photo, and parents approve them. This page explains what the app stores, why, and for how long.

Who runs the app

Chore Kidoo is run by Vinicius Zandonadi as a personal project. Questions and deletion requests go to vmzandonadi@gmail.com.

What we store

• The family name, the preferred language, currency and time zone.
• Each parent's e-mail address, and their name when they sign in with Google. It is the parent's sign-in identity; when a parent asks for an e-mail sign-in link, that is the only mail it receives. Signing in with Google sends Google a sign-in request; we receive only the address, the name and a Google account id.
• The optional parent lock PIN and any child PIN, stored only as a salted hash. We cannot read them back. Children sign in on their own device through a one-time link a parent creates; no child account, e-mail or password exists.
• Each child's first name or nickname, a chosen avatar, and an optional savings goal. No surname, birth date, e-mail address or phone number is asked for.
• Tasks, rewards, coins earned and spent, and approval decisions.
• Proof photos taken inside the app when a child marks a task done.

Photos

Photos are taken with the camera only when the child chooses to, and only to show a parent that a task was done. They are stored in a private bucket that is not publicly reachable, and can be seen only by people signed in to the same family. Each photo is deleted automatically 90 days after it was taken. Photos are never used for anything else and are never shared with third parties.

What we do not do

• No advertising, no ad networks, no analytics or tracking SDKs.
• No selling or sharing of personal data.
• No account is created for children and no data is collected from a child that a parent has not set up in the family.
• No location, contacts, or other device data is accessed.

Cookies

The app sets a sign-in cookie so the family stays signed in, and a language cookie on pages before sign-in. There are no third-party cookies.

Where data lives

Data is stored with Vercel (hosting and photo storage) and Neon (database), and sign-in e-mails are sent through Resend, under their respective security terms. Traffic is encrypted with HTTPS.

Deleting your data

A parent can remove a child from the family settings, which deletes that child's tasks, coins and photos. To delete the whole family, write to vmzandonadi@gmail.com from any address, quoting the family name and the parent's e-mail address, and it will be removed within 30 days.

Children

Chore Kidoo is meant to be set up and supervised by a parent or guardian. Children use it under a family the parent created. If you believe a child's data was stored without a parent's consent, contact us and it will be deleted.

Changes

If this policy changes, the date at the top is updated and the new version is published at this address.