Your family’s things stay with your family.

What we keep

Only what the app needs to work

About each person

A name, an email address to sign in with (a child’s too), a password stored only as a one-way hash, their role (parent or child), and their settings: color, time zone, notification choices. If they sign in with Google, the Google account’s id and email address.

What your family adds

Chores, events, notes, the inventory and shopping list, rewards, and categories — including whatever you type into them — plus who did which chore and when, and who changed what.

To keep accounts safe

Sign-in sessions, for up to 60 days. The internet address a sign-up or sign-in came from, for about a day, only to slow down people guessing passwords.

For notifications

If you turn them on, the address your browser gives us for delivering them, and whether the last one arrived.

For Create with AI

That an ask was made, when, by whom, and how long it was — not what was asked.

For purchases

Which family bought which pack, and Stripe’s id for the payment. Your card never reaches us.

We do not use analytics, advertising or tracking services, and we never sell or rent anyone’s information.

Who else sees it

A short list, each for one job

Vercel and Neon

Where the app runs and where its database is kept. They store everything above on our behalf.

Anthropic

Only when a parent uses Create with AI: the words they typed, today’s date and time zone, the family’s category names, and up to 60 chore titles, so it does not suggest a chore you already have. No names or email addresses are sent, unless somebody typed them there.

Stripe

Only when a parent buys asks: their email address, the family’s public id, and which pack. Payments are made in Stripe’s own form. Stripe, as Link, is the seller of record for purchases and handles receipts and sales tax under its own privacy policy.

Email

Our email provider (Resend) delivers the few messages the app sends: a link to confirm an address, a password reset, and a note to parents when somebody joins the family. They carry a first name and a link — nothing about your chores.

Google

Only if you choose to sign in with Google: we receive your Google account’s id, email address and name.

Push services

Apple, Google, Mozilla or Microsoft deliver notifications to your devices. The contents are encrypted so only your device can read them.

An AI assistant you connect

If you connect one of your own, it can see what you can see in the app, and what it reads goes to that assistant’s service under its terms. Nothing is sent to one until you connect it, and you can disconnect it any time.

Problem reports

If you use Report a problem, what you write is filed in our private issue tracker on GitHub, with your name, your role, your family’s name, the page you were on and your browser’s details, so we can reproduce it.

Barcodes and calendars

A scanned barcode (and only the number) is looked up with Open Food Facts. A calendar a parent subscribes to is fetched from the address they gave.

Children

A parent is always in charge of a child’s account

Children’s accounts are made by a parent in the family, or by joining with an invite code a parent created. We keep only what the app needs for them: a name, an address to sign in with (which we never write to, for an account a parent adds), their chores and what they ticked. Children cannot buy anything or use Create with AI, and cannot change or reset a password. A parent can remove a child’s account at any time. To see or remove what we hold about a child, a parent can write to us at the address below.

Inside a family

Who in your family sees what

Everyone in a family sees each other’s names and shared chores and events. Parents see everyone’s email addresses and can keep chores, events and inventory items to parents only. Somebody can keep an event to themselves, if the family allows it, and then nobody else sees it — parents included. We look at a family’s contents only when you ask us to help with something. Our own overview of the service is counts; the exception is that it shows who asked for more Create with AI asks, so we can answer them.

Cookies

One to keep you signed in

A single cookie keeps you signed in, and a short-lived one carries a Google sign-in while it happens. Your browser also remembers your light or dark choice and whether you dismissed the install prompt. No tracking cookies. When a parent opens the dialog to buy asks, Stripe’s own script loads to take the payment and check for fraud; at no other time does the app load anything from another company.

Keeping and removing

What deleting takes away

We keep your information while your account exists. Deleting your account, from your account page, removes your details, your sessions, devices and connections, and what was only yours: your private events, notes, ticks and requests. Things you added for the whole family, like shared chores and events, stay with the family without your name on them. For 60 days afterwards the address cannot be used to sign up again; only a one-way fingerprint of it is kept for that. Records of purchases are kept for our accounts.

To delete a whole family, to get a copy of your family’s information, or to have a problem report removed from our tracker, write to us.