Privacy Policy

2. Information We Collect

We collect the following categories of data to provide and improve our Services:

2.1 Personal Information You Provide

2.2 App Activity Data

We collect information about your use of our Services:

• Task and Chore Data: Tasks you create or are assigned, task completion status, and points earned
• Reward Data: Rewards created, points used, and redemption history
• Family Information: Family group membership for organizing tasks and rewards
• Points History: Audit trail of points earned and spent

2.3 Device Information

When you use our mobile app, we automatically collect:

• Device Identifiers: Push notification tokens (Firebase Cloud Messaging tokens) to send notifications
• Device Model: Your device model name and type for error diagnostics
• Operating System: OS version for compatibility purposes
• App Version: The version of Choremanji you are using

2.4 Diagnostics Data

To improve app stability and performance, we collect:

• Crash Reports: Information about app crashes and errors
• Performance Data: App responsiveness and loading times
• Error Logs: Technical error messages (no personal content)

2.5 Data We Do NOT Collect

Choremanji does not collect:

• Location data (GPS or network-based)
• Contacts or address book
• Photos or media (except profile pictures you upload)
• Microphone or camera data
• Calendar data
• Files or documents
• Financial information (payments are processed by Stripe)
• Health or fitness data
• Advertising identifiers

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 App Functionality

• Create and manage your account
• Enable task creation, assignment, and tracking
• Process reward redemptions and point calculations
• Facilitate family group management
• Send push notifications about tasks and rewards

3.2 Service Improvement

• Monitor app performance and fix bugs
• Analyze usage patterns to improve features
• Respond to your support requests

3.3 Security

• Authenticate your identity
• Detect and prevent fraud or abuse
• Protect the security and integrity of our Services

3.4 Communications

• Send verification emails and password reset links
• Notify you of important account changes
• Respond to your inquiries

4. Data Sharing and Third-Party Services

We do not sell your personal information.

We share your information only in the following circumstances:

4.1 Service Providers

We use trusted third-party services to help provide our Services:

These providers are contractually obligated to use your information only as directed by us to provide our Services and are bound by confidentiality obligations.

4.2 Legal Requirements

We may disclose your information if required by law, legal process, or government request, or to protect the rights, property, or safety of Choremanji, our users, or others.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS/SSL (HTTPS)
• Encryption at Rest: Sensitive data is encrypted in our database
• Password Security: Passwords are hashed using Argon2, a modern and secure hashing algorithm
• Secure Token Storage: Authentication tokens are stored in encrypted secure storage on your device
• Access Controls: Only authorized personnel have access to user data
• Server Location: Our servers are located in Amsterdam, Netherlands, with enterprise-grade physical and network security

6. Data Retention

We retain your information for as long as necessary to provide our Services and fulfill the purposes described in this policy:

• Account Data: Retained while your account is active and for a reasonable period after deletion to comply with legal obligations
• Task and Reward Data: Retained while your family account is active
• Device Tokens: Deleted when you log out or uninstall the app
• Verification Codes (OTP): Automatically deleted after 5 minutes
• Error Logs: Retained by Sentry for up to 90 days
• Session Tokens: Access tokens expire after 30 minutes; refresh tokens expire after 1 year

When data is deleted, we use soft deletion first (marking as deleted) followed by permanent deletion in accordance with our data retention schedule.

7. Your Rights and Choices

You have the following rights regarding your personal information:

7.1 Access Your Data

You can view most of your personal information within the app in your profile settings.

7.2 Update Your Data

You can update your profile information, including name, email, and profile picture, through the app settings.

7.3 Delete Your Account

You can request deletion of your account directly from the app. For detailed step-by-step instructions, please visit our Account Deletion Guide.

Deletion Process Overview

1. Request Deletion: Access the "Delete Account" option from your profile menu in the app
2. Email Confirmation: Confirm your deletion request via email link (expires in 24 hours)
3. Grace Period: 7-day waiting period during which you can cancel the deletion
4. Final Deletion: After the grace period, your account is permanently deleted

What Gets Deleted

When you delete your account, the following data will be permanently removed:

• Your profile information (name, email, username, avatar)
• Your password and authentication credentials
• Tasks you created or were assigned to you
• Your task completion history
• Rewards you created or were assigned to you
• Your reward redemption history
• Your points balance and points history
• Device tokens and notification settings

For Parents: Two Deletion Options

If you have a parent role, you can choose between:

• Delete My Account Only: Your account will be removed, but family data may remain if other parents exist
• Delete My Account and Entire Family: All family members, tasks, rewards, and history will be permanently deleted

Data Retention After Deletion

After your account is deleted:

• Data is kept in a soft-deleted state for 30 days for recovery purposes
• After 30 days, all data is permanently and irreversibly deleted from all our systems, including backups
• Some minimal data may be retained for legal compliance or fraud prevention, but will be anonymized

Important: Account deletion is permanent and cannot be undone after the 7-day grace period. For complete details, see our Account Deletion Guide.

7.4 Opt-Out of Notifications

You can disable push notifications through your device settings or within the app.

7.5 Data Portability

You can request a copy of your data in a portable format by contacting us at alireza.nasseh@gmail.com.

7.6 Rights for EU/EEA Residents (GDPR)

If you are in the European Union or European Economic Area, you have additional rights under GDPR:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Request limited processing of your data
• Right to Object: Object to processing based on legitimate interests
• Right to Data Portability: Receive your data in a structured, machine-readable format

To exercise these rights, contact us at alireza.nasseh@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority.

8. Children's Privacy

Our Services are designed for families, including children under 13, with parental supervision. We comply with the Children's Online Privacy Protection Act (COPPA) and similar regulations.

8.1 Parental Consent

Child accounts can only be created by a parent or guardian. By creating a child account, parents provide consent for limited data collection necessary to use our Services.

8.2 Limited Data Collection for Children

For child users, we collect only:

• Name (as provided by parent)
• Username
• Profile picture (optional, set by parent)
• Task and reward activity

We do not collect email addresses from children without parental consent.

8.3 Parental Rights

Parents can at any time:

• Review their child's personal information
• Request deletion of their child's data
• Refuse further collection of their child's information
• Edit or update their child's profile

To exercise these rights, contact us at alireza.nasseh@gmail.com.

8.4 No Behavioral Advertising

We do not engage in behavioral advertising to children. We do not use children's data for marketing purposes.

9. International Data Transfers

Your information is primarily stored on servers in Amsterdam, Netherlands. If you access our Services from outside the European Union, your data will be transferred to and processed in the Netherlands.

For users in the United States, we comply with applicable data protection requirements. For transfers from the EU/EEA, we rely on standard contractual clauses and other approved mechanisms to ensure adequate protection of your data.

10. App Permissions

Our mobile app requests the following permissions:

We do not request access to your camera, microphone, location, contacts, or files.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes:

• We will update the "Last Updated" date at the top of this page
• We may notify you via email or in-app notification for significant changes
• We encourage you to review this policy periodically

Continued use of our Services after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days.