← Back to TidyChore
Privacy Policy
Last updated: April 2026
Who we are
TidyChore is a family organization app. When we say "we" below, we mean the TidyChore team. When we say "you," we mean the person using it — and every member of your household who signs in.
What we collect
The minimum needed for the app to work:
- Sign-in identifier: Google, Apple, or an anonymous tablet session (created from an 8-character household invite code, no email or name required).
- Your profile: Display name, avatar emoji, color, and optional birthday.
- Household data you create: Chores, tasks, shopping items, events, to-dos, allowance entries, quotes, and photos attached to chore verification.
- Optional push-notification token: Only if you grant permission, so reminders can reach your device.
- On iOS only, with your permission: The Advertising Identifier (IDFA). Used solely so our ad partner can cap how often the same ad shows you — never to build a profile of you across other apps. You can decline; the free tier still works.
- Basic diagnostics: Crashes and failed network calls. No third-party analytics SDK is embedded.
What we do NOT collect
We never access or collect your contacts, call history, SMS, precise location, biometric data, or health data. We do not build advertising profiles of you across apps. We do not track children across services.
How we use your data
- To run the app: render your household, sync chores, send reminders you requested.
- To keep the service working: fix bugs, prevent abuse, debug crashes.
- To show ads to adult free-tier users on the phone via Google AdMob, and to show G-rated child-directed ads on the shared family tablet. Non-personalized requests only. Ads never receive your household content.
- To process premium purchases and subscriptions via Apple, Google Play, and RevenueCat — only the billing identifier is shared, never your household content.
How ads work, by surface
- Kid-role members on the phone: no ads, ever. The ad banner never renders under a child account.
- Adult or owner members on the phone: non-personalized, PG-rated ads via AdMob. No alcohol, gambling, or mature content inventory is eligible.
- The shared family tablet (Display Mode): G-rated and child-directed, because kids see it. Same non-personalized policy.
- Any paying household: no ads on any surface, for any member. The ad-free or premium upgrade applies household-wide.
Ad Tracking Transparency (iOS)
On first ad impression, iOS will ask whether TidyChore can track you. Tapping "Ask App Not to Track" tells us to avoid any identifier-based frequency capping. The app works the same either way and we never re-prompt. Child-role accounts never see the prompt because they never see ads.
Children's privacy (COPPA)
TidyChore is designed for families, including children, under a parent-managed household. Parents are in control: only adult or owner members can manage settings, see full audit data, and approve chore verifications. Kid-role members get no ads on their personal sign-ins, only G-rated child-directed ads on the shared tablet, no third-party analytics, and no behavioural tracking. Kid profiles contain only a display name and avatar emoji chosen by the parent.
Household-wide premium
Premium is a household-wide entitlement — one paying member unlocks the full app for everyone in the household. Ads disappear for every device in that household too, including the family tablet.
Rewarded-ad trial
Once every 30 days, your household can watch a rewarded ad for a 7-day Premium trial. If your household is still in the 30-day cooldown, watching the ad instead awards 3 bonus moves per member in the dots-and-boxes game (gated to once per 7 days). No extra data is collected for this feature.
Data sharing
We do not sell your data. We share data only with the service providers strictly required to operate the app:
- Supabase: Database hosting, authentication, real-time sync, and file storage. Row-level security restricts every query to your own household.
- Google AdMob: Serves non-personalized ads on free-tier phone surfaces (PG-rated to adult and owner members; G-rated and child-directed on the shared family tablet). Never serves ads under a child-role sign-in.
- RevenueCat: Subscription and one-time purchase management.
- Google Sign-In / Apple Sign In: Authentication only. We receive the identity token + optional display name; we do not access your contacts, calendar, or other account data.
Household data isolation
All household data is strictly isolated. You can only access data from households you're an active member of. This is enforced at the database level with row-level security policies. No household can see another household's content.
Data security
Data is encrypted in transit (TLS) and at rest. Authentication uses industry-standard OAuth 2.0 via Google and Apple, with anonymous sessions for family tablets. PIN verification for chore approval uses salted hashing and is never stored in plain text.
Where your data lives
Household data is stored on Supabase servers (Postgres + Storage) in the United States. Chore verification photos are kept in private buckets and auto-deleted after 30 days. Completed discussion threads may be cleaned up after 30 days unless pinned.
Your rights
- Export: Settings → Privacy & data → Export my data. You get a JSON copy of everything your household has generated.
- Delete: Settings → Privacy & data → Delete my account. We permanently remove your profile and authentication record in the same request.
- Decline tracking: On iOS, tap "Ask App Not to Track" when prompted. We never re-ask.
- Opt out of push: Disable notifications at the OS level or in Settings → Notifications.
- Manual requests: Email [email protected] — we respond within 7 days.
Changes to this policy
We may update this policy as TidyChore evolves. Material changes will be announced in the app and/or via email. Continued use after a change constitutes acceptance.
Contact
Privacy questions or requests? Email [email protected].