1. Who This Is For

Questies is a family chores app. A parent (adult) creates an account and a "Squad"; children join that Squad using a QR code or join code the parent generates in the app — kids never enter an email address or any contact information of their own.

Every account and every child in the app is there because a parent explicitly added them. By using Questies, you consent to the practices described in this policy.

2. Information We Collect

From the parent, at signup:

• Email address and a password (stored only as a salted PBKDF2 hash — we never store or see the plaintext password).
• If you sign in with Apple or Google: your name and email as shared by that provider (not your password).
• Display name and Squad ("family") name.
• Preferred currency code, for showing reward amounts.

About each child added to the Squad (entered by the parent, not the child):

• A display name (a nickname or hero name — real names are never required).
• An optional profile picture: a photo the parent uploads, or one of the app's built-in illustrated hero avatars.
• An optional age band (a coarse range, not a birthdate).
• In-app activity: quests assigned and completed, reward "coins" earned and spent (in-app points, not real currency), levels, streaks, and earned in-app badges and titles.
• Optionally, a photo submitted as proof a chore was completed, if the parent turned that feature on for that chore. Proof photos are private to the family — never public, never shown to other families.

Automatically:

• A device push-notification token, so the app can notify a parent or child about quest activity (e.g. "a chore needs approval"). This is tied to the app installation, not to any personal profile.
• Standard technical logs (timestamps, request paths, coarse rate-limiting data) to keep the service running and prevent abuse. We do not use IP addresses or device data for advertising or tracking.

3. What We Do NOT Collect

We do not require or collect a child's email address, phone number, real name, precise location, or contact list. We show no advertising and use no third-party advertising or cross-app tracking SDKs. We do not sell personal data to anyone.

4. Parental Consent

Because children use this app, a parent must affirmatively agree to this policy and COPPA-style consent terms when creating a Squad, before any child can be added. That agreement, and its version and date, is recorded on the account.

5. How We Use This Information

Solely to run the app: authenticate accounts, track quests and rewards within a family, send the notifications described above, calculate a family's free trial and subscription status, and provide customer support if you contact us. We do not sell personal information, and we do not use children's data for advertising, profiling, or any purpose outside operating the app for that family.

6. Who We Share Information With

We use a small number of service providers strictly to run the app, each only processing the minimum data needed for its job:

• Cloudflare — hosts our servers, database, and file storage (avatars and proof photos).
• ZeptoMail — sends account emails (verification codes, etc.) to the parent's email address only.
• Apple / Google — if you choose to sign in with Apple or Google, they handle that authentication; we only receive the identity they choose to share.
• Expo — delivers push notifications via Apple's and Google's own push services, using the device token described above.
• RevenueCat — processes in-app subscription purchases made through the Apple App Store or Google Play; RevenueCat and the stores handle payment details — we never see or store card numbers.

We do not share information with data brokers or advertisers, and we do not permit any of the above providers to use family data for their own purposes.

7. Data Retention & Deletion

A parent can delete their account at any time from Profile → Delete account. If they are the only parent on the Squad, this permanently deletes the entire Squad — every child profile, every quest, every reward and photo — immediately and irreversibly; there is no recovery period. If another parent remains on the Squad, only the departing parent's own account is removed and the rest of the family is unaffected. A parent can also remove an individual child from the Squad, or edit and delete a child's proof photos, at any time.

8. Parents' Rights Over Their Child's Information

A parent may, at any time and free of charge: review the information we hold about their child (everything a parent can already see within the app is this data), request its deletion (see above), and refuse to allow any further collection by deleting the account. Contact us at [email protected] for any request that cannot be done directly in the app.

9. Security

Passwords are never stored in plaintext (salted PBKDF2 hashing). All traffic to our servers is encrypted in transit. Proof photos and avatars are stored privately and are only ever served to an authenticated member of the same family.

10. Changes to This Policy

If this policy changes in a way that affects how a child's information is collected or used, we will require parents to re-consent before it takes effect. We will post the updated policy on this page and update the "Last Updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or your family's data, please contact us at: