ChoreQuest
1. Accounts and family access
Parent accounts use an email/password, Apple, or Google sign-in through Firebase Authentication. We store your account identifier, email when available, sign-in provider information, family membership, selected profile, onboarding choices, and terms acceptance. Passwords are handled by Firebase Authentication, not stored as readable text in family records.
A paired child device signs in with a Firebase anonymous account linked to its child profile and family membership; the child does not need an email address. Anonymous means no separate email sign-in, not that its activity cannot be linked to a family.
Family records include names or nicknames, avatars, optional profile photos, invitation details, device names supplied during pairing, membership roles, and revocation status. Invited parents use their own sign-in. Parent-created codes are single-use and expire after ten minutes.
2. Chores, rewards, and messages
We synchronize chores, instructions, assignments, schedules and saved timezones, submissions, proof photos, parent reviews and comments, XP records, family-created rewards, claims, goal contributions, help requests, feedback, and related dates in Cloud Firestore. A child's selected personal reward goal also synchronizes to that child's profile across family devices.
Family members can read shared profiles, chores, submissions, reward activity, help requests, and personal reward goals. Proof-photo documents are limited to parents and devices paired to the submitting child. Parents can access family feedback; a child account can access its own feedback. A shared device signed in to a parent account has that account's backend permissions even in Kid mode.
Do not put unnecessary private details in profiles, chores, photos, help requests, or feedback. Share photos of people only with appropriate permission.
3. Photos and service providers
Optional profile photos are stored with family profile records. Chore proof photos are stored as protected documents in Cloud Firestore, separate from submission metadata; the current release does not upload new proofs to Cloud Storage. A photo is required only if a parent configures that chore to need one.
We receive the photo you select or capture, not your entire library. Camera and photo-library permission are requested when you choose that source. You can decline access or change permissions in iOS Settings. A photo-required chore cannot be submitted without a photo.
Google Firebase Authentication and Cloud Firestore provide account and synchronized-data services. Optional Firebase Crashlytics diagnostics are described below. The current release does not use Cloud Functions for family actions or Cloud Messaging for remote alerts. Apple or Google processes social sign-in when selected. Apple processes subscription billing and StoreKit verifies purchases on the device, using a purchasing-account identifier to associate access with the ChoreQuest account. We do not receive full payment card details.
4. What stays on your device
Drafts, including selected proof photos and checked instruction steps, are saved locally in files protected by iOS data protection. Checklist progress is separated by family, child, chore, instruction content, and chore round. It can remain available for a same-round retry; it does not award XP. Drafts do not synchronize between devices, and unsubmitted draft photos are not sent as chore proof.
Animation, haptic, profile-selection, reminder, quiet-hour, and widget preferences are stored locally. You can clear drafts in Settings → Your account → Parent account → Data & privacy controls. Completing account deletion clears this device's drafts; copies on other devices are not remotely erased.
Parent and Kid PIN checks use salted hashes and attempt limits in this device's Keychain. PINs do not synchronize through the family database. They protect normal app navigation, not access by someone who controls the device or has the signed-in parent's credentials. Kid mode on a parent's signed-in device is not a separate restricted Firebase account.
If enabled, widgets receive local chore-count and calendar-status snapshots through an App Group shared with the widget extension. These snapshots do not include profile names, photos, or chore text. Widget summaries may be visible wherever you place the widget. Turning sharing off, switching profiles, locking, or signing out clears shared snapshots; the system controls widget refresh timing.
5. Reminders and diagnostics
Optional chore reminders are scheduled locally with iOS notification permission. The current release has in-app Updates but no remote event push notifications; it does not register or synchronize notification tokens and device alert preferences for that disabled feature. Earlier versions or separately configured services may have left device records, which account cleanup attempts to remove.
Crash reporting is optional and off by default. Enabling Share crash diagnostics in Data & privacy controls allows Firebase Crashlytics reports about crashes and device/app conditions. ChoreQuest does not enable Firebase Analytics. Authentication and hosting providers may process technical network and security information needed to operate their services.
6. Why information is used
Information is used to sign you in, maintain family access, synchronize household activity, operate chores and rewards, process parent reviews, display saved feedback and any added replies, troubleshoot with optional diagnostics, and secure the app. Submitting feedback does not guarantee a response or a response time.
ChoreQuest does not use family data for behavioral advertising, sell personal information, or share child information with advertising networks or data brokers. Information may be disclosed where required by law or necessary to investigate abuse or protect users.
7. Retention, export, and deletion
Family content is kept to provide your family's active chores, rewards, and history. Archiving a child profile hides it from normal use and blocks paired-child family writes; it preserves history and is not permanent deletion.
Parents can prepare a JSON download of family profiles and activity, with an option to include available photos, in Settings → Your account → Parent account → Data & privacy controls. It is a data download, not a guaranteed complete backup or restore service. Files you save or share are under your control; deleting an account cannot recall those copies.
The Remove older reviewed proof photos control is a manual action using the cutoff you select. It keeps pending proofs and activity records; it does not run as an automatic retention service. Profile photos can be replaced or removed through profile editing.
To delete your account, open Settings → Your account → Parent account → Delete Account. Deleting the family owner's account removes the family record and its profiles, chores, submissions, proof documents, rewards, contributions, help requests, feedback, and access records. Invited parents are detached from that family; their own sign-in accounts and private account records are not deleted.
An invited parent deleting their own account removes their sign-in and membership, not the owner's family or shared history they helped create. Owner deletion removes paired-child membership and app records, but this client cannot delete other people's or other devices' Firebase Authentication identities.
Deletion requires a connection and may require signing in again. Cleanup happens in several steps and can be interrupted. Keep access to the owner's sign-in and retry deletion if it does not complete; there is no automatic background cleanup service in this release. Completing deletion does not cancel Apple subscription billing.
Service providers may retain separate backups or security records governed by their own practices and applicable obligations. App deletion does not directly erase those separate records, and this policy does not promise a provider backup purge deadline. Contact us about access, correction, stopping further child participation, or deletion of remaining information rather than treating archiving as deletion.
8. Parent choices, security, and contact
A parent or legal guardian should supervise child use, choose what information to provide, review this policy with participating children, and revoke access for devices or people no longer authorized. Use nicknames and omit optional photos when appropriate. A checkbox or local PIN does not by itself verify parental consent for every legal purpose.
No online system or local protection is completely secure. Protect your device and sign-in credentials, use iOS device security, and revoke lost-device memberships. Service providers may process information outside the country where you live. Contact us with questions about where your family's information is processed.
ChoreQuest is operated by Rahul Pawar. For privacy questions or requests concerning parent or child information, email dev.rahulpawar@gmail.com. We may need to verify that a request comes from an authorized parent or account holder before acting.
The date above identifies this revision. Parents are asked to review substantive terms revisions before using parent tools. Additional notices or consent may be needed when information practices change.
Questions? Email dev.rahulpawar@gmail.com.