Privacy policy
Effective June 2026
The short version: ChoreTrack has no accounts, no ads, no analytics, and no tracking. Your family's data lives on your devices. If you turn on sync, it travels as encrypted blobs we cannot read. The only personal information we ever hold is a recovery email — and only if you choose to give us one.
Data stored on your devices
Everything ChoreTrack works with — family name, kids' nicknames, chores, points, prizes, PINs (stored as one-way hashes), and activity history — is stored in a local database on your own device. We never see it. It is covered by your device's own encryption and backed up only through your own iCloud/Google device backup, under your control.
Phone sync (ChoreTrack Plus)
If you enable sync, your household data is encrypted on your device (XChaCha20-Poly1305) with a key derived from your household code before it leaves the phone. Our server stores only this ciphertext, indexed by a one-way hash of your code. We do not have your code, cannot derive the key, and therefore cannot read your family's data. Sync data is hosted on Amazon Web Services (USA).
Recovery email (optional)
If you choose to add a recovery email, we store that email address together with your household code on our server, so we can email the code back to you if you lose it. This is the one deliberate exception to the zero-knowledge design, and it is opt-in. Skip it and we hold nothing about you. To remove it, clear the recovery email in the app and email us to confirm deletion.
Children's privacy
ChoreTrack is operated by parents. Kids never create accounts, never enter an email or phone number, and no information about children is transmitted to us in readable form. Kid profiles are nicknames stored on your own device (and, with sync, inside encrypted blobs we cannot open). We do not knowingly collect personal information from children.
Purchases
Subscriptions are processed by Apple's App Store or Google Play. We use RevenueCat to validate subscriptions using an anonymous identifier — no name, email, or payment details ever reach us. Payment information is handled entirely by Apple/Google.
What we don't do
- No advertising, and no advertising SDKs
- No analytics or behavioral tracking of any kind
- No selling, sharing, or monetizing of data — there is nothing to sell
- No contact with third parties beyond the infrastructure named above (AWS, RevenueCat, Apple/Google)
Your data, your exit
Every chore, point, and prize can be exported as CSV from the app with one tap, on the free plan, forever. Deleting the app deletes your local data. If you used sync, email us and we will delete your encrypted blob and any recovery record.
Changes & contact
If this policy changes, the new version will be posted here with a new effective date. Questions or deletion requests: support@choretrack.app.