Privacy policy

Last updated October 2026.

We collect as little as possible

The only personal information ChoresMe keeps is each grown-up’s email address. Kids are never asked for personal information.

What we store

• Grown-ups: email, a password (stored scrambled with bcrypt, never in plain text), the name the kids call you (for example “Mom”), and whether you want email alerts.
• Kids: a nickname chosen by a parent, a built-in cartoon avatar, a PIN (stored scrambled), and their chores, points, stars and reward requests.
• Family: the house name you choose, your time zone, chores, rewards and any reward pictures you upload.
• Devices: a random code in a cookie that keeps a phone or family screen signed in, a rough device label (like “iPhone”), and, if you turn on notifications, the address your browser gives us for sending them.
• Security logs: IP addresses of failed sign-in attempts, kept for 24 hours to stop password guessing.

What we never collect

Kids’ real names, photos, birthdays, email addresses, phone numbers or location. No ads, no tracking scripts, no analytics companies. We don’t sell or share your data.

Who handles it

• Our hosting and email provider (Porkbun) stores the database and sends our emails.
• Your browser’s maker (Apple, Google, Mozilla or Microsoft) delivers phone notifications. The message is encrypted so they can’t read it.
• Fonts load from Google Fonts.
• The person who runs ChoresMe can see each family’s house name, the grown-ups’ email addresses, sign-up date and simple counts (how many kids, chores done, devices). This is only to run and support the service. They can’t see kids’ nicknames, chores, points or rewards.

Children’s privacy

ChoresMe is used by children, so a parent creates every family account and sets up every kid profile and device. We follow the U.S. Children’s Online Privacy Protection Act (COPPA) and Canada’s PIPEDA by not collecting personal information from kids, using it only to run the service, and deleting it on request.

How long we keep it

Your family’s data stays until you delete your family (Family → Your data → Delete family), which removes it right away. Notifications are deleted after 60 days, failed sign-in records after 24 hours, and pairing codes after 7 days.

Your choices

• Download everything: Family → Your data → Export.
• Delete everything: Family → Your data → Delete family.
• Turn email alerts off: Family → My alerts.
• Questions or requests: support@choresme.com

Security

HTTPS everywhere, scrambled passwords and PINs, protection against forged requests and password guessing, and each family’s data kept separate.