Privacy Policy

ChoreStar ("we," "our," or "us") operates chorestar.app and the ChoreStar iOS app (collectively, the "Service"). This policy explains what data we collect, why we collect it, how we use it, and your rights regarding that data.

We built ChoreStar for families and take privacy seriously — especially because families with children use our app. We do not sell your data. We do not run ads. We never share personal information with third parties except as required to operate the Service.

Account information (parents)

• Email address — used for account creation, login, and transactional emails
• Password — stored as a secure hash; we never see your plaintext password
• Family name — used to personalize the dashboard
• Subscription status — to determine which features are available

Family data (entered by parents)

• Children's names and ages
• Avatar colors and images (if uploaded)
• Chore names, descriptions, and reward amounts
• Routine names and steps
• Chore and routine completion history
• Achievement badges earned

Data we do NOT collect from children

Children do not create accounts or provide personal information. They access the app through a family-specific link and a numeric PIN set by a parent. We do not collect names, emails, or any personal data directly from children.

Usage data

• IP address and approximate location (for security and rate limiting)
• Browser/device type and OS version
• Pages visited and features used (for product improvement)
• Error logs (to fix bugs)

• To provide, maintain, and improve the ChoreStar Service
• To authenticate your account and keep it secure
• To process payments and manage your subscription
• To send transactional emails (receipts, password resets, confirmations)
• To respond to support requests
• To detect and prevent fraud, abuse, or unauthorized access
• To comply with legal obligations

We do not use your data for advertising, profiling, or any purpose not listed above.

We share data only with the following trusted service providers, and only to the extent necessary to operate the Service:

• Supabase — database, authentication, and file storage infrastructure. Data is encrypted in transit and at rest.
• Stripe — payment processing. We never store your card number or payment details; Stripe handles all payment data under their own PCI-compliant infrastructure.
• Resend — transactional email delivery (password resets, receipts).

We do not sell, rent, or trade personal information with any third party for their own marketing purposes. We do not share data with data brokers or advertising networks.

ChoreStar is designed for use by parents and guardians to manage chore schedules for their children. The account holder is always an adult parent or guardian.

Children do not register accounts, provide an email address, or submit personal information to us directly. Any information about children (names, ages, avatar) is entered and controlled solely by the parent account holder.

If you believe we have inadvertently collected personal information from a child under 13 without verifiable parental consent, please contact us at privacy@chorestar.app and we will delete it promptly.

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data and family data within 30 days, except where we are required to retain it for legal or billing purposes (e.g., payment records).

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — update or correct inaccurate information
• Deletion — request that we delete your account and associated data
• Portability — receive your data in a portable format
• Objection — object to certain uses of your data

To exercise any of these rights, email us at privacy@chorestar.app. We will respond within 30 days.

All data is transmitted over HTTPS/TLS. Passwords are hashed using industry-standard algorithms. Database access is restricted by row-level security policies. We regularly review our security practices and promptly address any vulnerabilities.

The ChoreStar iOS app stores a child session token in device storage (UserDefaults) to keep a child logged in between sessions. This token is stored only on the device and is never transmitted to third parties. It can be cleared by logging out or uninstalling the app.

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date at the top and, if the changes are significant, notify account holders by email. Continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or how your data is handled:

• 📧 privacy@chorestar.app
• 🌐 chorestar.app