%20--%3e%3cdefs%3e%3cstyle%3e%20.st0%20{%20fill:%20%23dd8c43;%20}%20.st1%20{%20fill:%20%23a0c4ef;%20}%20%3c/style%3e%3c/defs%3e%3cg%3e%3cpath%20class='st0'%20d='M203.02,346.63l-38.22-39.39c.51-.44,7.24-6.04,8.45-7.08,17.02-14.77,46.88-43.9,60.99-61.01,5-6.07,8.61-10.93,4.88-18.91-4.24-9.09-13.44-11.45-21.73-5.94-15.94,10.6-35.59,35.16-50.14,49.86-6.31,6.38-10.16,5.98-16.54-.51s-13.41-14.89-19.99-21.51c16.93-15.9,31.63-32.79,48.2-49.07,1.08-1.06,2.63-2.75,2.8-2.93,14.38-14.12,31.29-31.57,51.57-36.93,66.7-17.6,97.08,54.49,56.82,103.82-24.69,30.25-59.25,62.08-87.11,89.6h.02,0Z'/%3e%3cpath%20class='st0'%20d='M227.49,48.39c60.61-8.2,71.81,79.3,14.63,88.63-61.79,10.09-69.89-81.16-14.63-88.63Z'/%3e%3c/g%3e%3cg%3e%3cpath%20class='st1'%20d='M181.73,190.13c-.18.18-.35,1.96-1.43,3.02-16.56,16.28-32.64,33.08-49.57,48.98-7.25-7.3-19.98-21.47-27.51-26.99-12.28-9.02-26.87,3.78-21.4,17.4.96,2.4,7.21,9.25,9.37,11.66,18.89,21.13,41.39,39.46,60.49,60.48,5.73,5.45,9.62,5.27,13.12,2.57l38.22,39.39c-11.05,11.14-20.23,20.43-31.77,30.53-8.47,7.42-18.97,11.7-29.04,2.71l-119.46-118.26c-31.51-36.94-31.29-92.82,6.96-124.98,28.74-24.16,70.61-23.02,99.02,1,18.37,15.53,34.33,36.92,52.99,52.51v-.02h.01Z'/%3e%3cpath%20class='st1'%20d='M101.53.43c75.18-8.14,84.27,103.21,12.69,108.69C40.61,114.75,33.2,7.83,101.53.43Z'/%3e%3c/g%3e%3c/svg%3e)
Legal
Privacy Policy
What we collect, why, who helps us run the service, and how you delete it.
The short version.
- You give us your name and email to run a parent account. Kids never get accounts, emails or passwords.
- Everything about a kid (first name, age, chores, points) is entered by you and stays inside your family.
- No ads, no selling or sharing data for marketing, no tracking across other apps or sites.
- Usage analytics on the web run only if you say yes. Error and crash reports are always on so we can fix things.
- You can delete a kid, or your whole account and family, yourself at any time.
This policy explains what Task Tots, LLC ("TaskTots", "we", "us") collects when you use the TaskTots web app at tasktots.com and the TaskTots iOS app (together, the "Service"), what we do with it, who helps us run the Service, and how you can delete it.
1. What we collect
- Account details. Your name and email address, and your profile photo if you sign in with Google. If you sign in with Apple, Apple may give us a private relay address instead of your real email.
- Family data you enter. Kids' first names and ages, the avatar or look they pick, and the chores, sports drills, rewards, notes, points, streaks and badges in your family. Kids do not create accounts: everything about a kid lives inside the parent's account.
- Parental PIN. The 4-digit PIN you set to leave Kid Mode. It is stored as a one-way hash so our servers can check it but not read it back. We are finishing the move to hashed storage; until that is complete a copy of the PIN may also remain on your account record, and it is removed when the move finishes. Either way, the PIN is a convenience lock for kids, not a password: never reuse one you use elsewhere.
- Push notification tokens. If you allow notifications in the iOS app, a device token is stored on your account record so we can send them. It is removed when you sign out on that device, and tokens that stop working are removed automatically.
- Usage analytics on the web, only if you accept. Which pages are opened and when, tied to your account id and email once you sign in. See section 4. The iOS app does not run usage analytics.
- Error and crash reports. When something breaks, technical details of the error (the page or screen, browser or device model and OS version, and the stack trace) go to our error reporting service so we can fix it. On the web this is Sentry; in the iOS app it is Firebase Crashlytics.
- Server logs. Our hosting and backend keep standard request logs (IP address, time, URL) for a limited period for security and debugging.
We do not collect precise location, contacts, photos, health data or payment details, and the Service has no in-app purchases.
2. How we use it
To run the Service: sign you in, store and show your family's chores, drills and rewards, send the emails and notifications described in section 5, answer support requests, and find and fix problems. With your consent, we also use web analytics to understand which parts of the app are used. We do not sell personal information, we do not share it for advertising, and we do not show ads.
3. Service providers
These companies process data on our behalf so the Service can run:
| Provider | What for |
|---|---|
| Google Firebase | Sign-in (Firebase Authentication), the database that holds your account and family data (Cloud Firestore), the server code that runs account deletion, PIN checks and notifications (Cloud Functions), push delivery (Firebase Cloud Messaging), and crash reports from the iOS app (Crashlytics). |
| Google Sign-In and Sign in with Apple | Optional ways to sign in. Each gives us only your name, email and a sign-in token. |
| Apple Push Notification service | Delivers push notifications to iPhones and iPads. |
| Vercel | Hosts the web app and its server code. |
| PostHog | Usage analytics on the web app, only after you accept on the consent banner. |
| Sentry | Error reporting for the web app and its server code. |
| Postmark | Sends our transactional email (the welcome email and approval notifications) and receives your email address and first name to do so. |
Your data is stored on Google Cloud servers in the United States. We may also disclose information if required by law, or to protect the rights and safety of our users.
4. Analytics and your consent
The first time you visit the web app you are asked whether we may use analytics. If you decline, or close the banner, PostHog is never loaded and nothing is sent to it. If you accept, PostHog records page views and page leaves, and links them to your account id and email once you sign in. You can change your choice at any time in Settings under "Privacy & data"; it is remembered per browser. The iOS app does not run usage analytics.
Error reporting (Sentry on the web, Crashlytics on iOS) stays on whether or not you accept analytics, because we need it to keep the Service working. It records errors and crashes only, not what you typed. On the web, session replay (a replay of what was on screen when an error happened, with all text masked) is only turned on if you accept analytics.
5. Email and push notifications
We send a welcome email when you finish signing up, and a notification when a kid marks something done or asks for a reward so you can approve it. Approval notifications arrive by email and, if you allowed them in the iOS app, by push. You can turn email and push approval notifications on or off in Settings. Signing out of the iOS app removes that device's push token. We do not send marketing email.
6. Children's privacy
TaskTots is for parents and guardians, who must be 18 or older to create an account. We do not knowingly collect personal information from children under 13 directly, and we are not directed at children.
Kids use the Service through their parent's account, on the parent's device, in Kid Mode. They never create an account, enter an email address or password, see analytics prompts, or communicate with anyone through the Service. The only information about a kid is what the parent enters (a first name and age) and the kid's activity in the app (chores marked done, drills practised, rewards asked for). Parents can see, edit and delete all of it at any time, and deleting the parent account deletes it too.
If you believe a child has created an account or given us personal information outside of Kid Mode, email support@tasktots.com and we will delete it.
7. Keeping and deleting your data
We keep your account and family data for as long as your account exists. You can delete it yourself at any time:
- A single kid: Parent Dashboard, the kid's profile, Delete.
- Your whole account on the web: Settings, Privacy & data, Delete account.
- Your whole account in the iOS app: Settings, Delete Account.
- Or email support@tasktots.com from your account's email address and we will do it for you.
Deleting your account removes your sign-in and your account record, including the PIN and push tokens. If you are the only parent in your family, the family and everything under it is deleted as well: every kid profile and all of their chores, drills, rewards, points, badges and history. If another parent shares the family, only you are removed and the family stays with them. Deletion is immediate and cannot be undone.
Deleting your account does not delete usage analytics, error or crash reports that were already sent to PostHog, Sentry or Crashlytics; those expire under each service's retention period (90 days or less). Email support if you want them removed sooner. Backups of the database are kept for up to 30 days and then overwritten.
8. Security
Data travels over HTTPS. Database access rules limit each family's data to the parents in that family, and the PIN is checked on our servers, never on the device. We use reasonable safeguards, but no system is 100% secure, so please use a strong, unique password or sign in with Google or Apple.
9. Your choices and rights
Inside the Service you can update your details, change your PIN, turn web analytics on or off, turn email and push notifications on or off, and delete kids or your whole account. Depending on where you live you may also have the right to ask for a copy of your data or to correct it. Email support@tasktots.com and we will respond within 30 days.
10. Changes
We may update this policy. The effective date at the top changes when we do, and for a material change we will tell you in the app or by email before it takes effect.
11. Contact
Task Tots, LLC. Questions, requests or concerns: support@tasktots.com.