Privacy & Your Family's Data

What we store

• The email address and password you sign up with (your password is never stored in readable form — only a one-way scrambled version).
• Names and PINs for the parents and kids in your family (PINs are scrambled the same way, not stored as plain numbers).
• Any avatar pictures you upload for family members.
• The quests, rewards, and settings your family sets up, and the history of gems/XP earned and spent.

That's it — no location tracking, no ad identifiers, no analytics or tracking scripts of any kind running in the app.

Why we store it

Only to run the app itself — sign you in, remember your family's quests and rewards, and keep track of gems and XP. Nothing here is used for advertising, and nothing is used to build a profile of you or your kids.

Who can see it

Only accounts inside your own family. Every family's data is walled off from every other family's — both in the app's own logic and a second time at the database level, so even a bug in the app couldn't leak one family's data to another. This isolation has been directly tested, not just assumed.

The app is built and run by one person (Dakota) as a small family project, not a company. As the operator, he has the technical ability to access the underlying database directly — the same way anyone running their own server does — but that access is only ever used for support, debugging, or a data-deletion request, never to browse or use family data for any other purpose.

Do we sell or share it?

No. Nothing is sold, and nothing is shared with advertisers or data brokers. The only outside companies involved are the ones that make the app run at all: Supabase (stores the database, login accounts, and uploaded pictures) and Railway (hosts the running app). Fonts are loaded from Google Fonts, and if you choose to tap the "Support" link in Settings you'll leave the app for Ko-fi's own website — those are the only other services this app talks to.

A note on children's data

• Kids never create their own account, enter an email address, or sign up for anything — only a parent, using their own email and password, sets up the family and enters each child's name and (optionally) a picture.
• Kids use the app by tapping their own icon on a shared family device. There's no chat, no messaging, no way to contact anyone outside the family, and no way for a child to see or reach any other family's data.
• Nothing about a child is used for advertising, sold, or shared with anyone beyond the hosting services described above.
• A parent can remove a child's information at any time — "Reset child progress" clears just the activity history, and "Delete this family forever" (in Parent Settings, for the family owner) removes everything, including names and pictures.

This is a plain description of what the app actually does, not a legal opinion. If you have specific compliance questions — for example, using this in a school, therapy practice, or other organization — you should get your own legal advice for that context.

Deleting your data

The family owner can permanently delete the whole family — every quest, reward, gem, streak, and uploaded picture, plus every parent's login — from Parent → Settings → Delete this family forever. It's instant and can't be undone, so it asks you to type the family's name to confirm first.

There's also a smaller "Reset child progress" tool in Parent Settings if you only want to clear a kid's quest/reward/gem history without deleting the whole family.

If you're not the family owner, or you'd rather someone else handle it, email [email protected] and it will be deleted by hand instead.