Privacy Policy

Who we are, and our privacy officer

Chore Scape and DocuScape are run by Chris Smith, trading as Chore Scape ("we", "us"), who is the data controller for the personal data described in this policy, for both apps and this website.

The privacy officer is responsible for how we handle personal data, and deals with privacy questions, requests and complaints. This one role is our privacy officer under New Zealand's Privacy Act 2020, our Data Protection Officer under Singapore's Personal Data Protection Act, the person in charge of the protection of personal information under Quebec law, and the person accountable for our privacy practices under Canada's PIPEDA. In Australia, these are our contact details for privacy questions and complaints.

What we collect

Across both apps:

• Account details: a nickname (the name other people in the app see), email address, and a password (stored as a secure one-way hash, never in plain text).
• Which accounts yours is linked to (in Chore Scape, a "Warrior" and their linked "Strategist"; in DocuScape, a Strategist and the Chore Scape Warrior they're linked to, where relevant).
• Emails you send us and our replies, such as support questions and requests about your data.

Chore Scape specifically:

• Task ("quest") data you or a linked family member create: titles, descriptions, due dates, rewards, whether photos are asked for, and completion status.
• Your year of birth (never your full date of birth). We ask everyone for it when they sign up, and older accounts are asked once in the app. We use it only to apply the right privacy settings for your age, including whether a parent's OK is needed (see "Children and young people" and "A parent's OK" below). We also record each change to a Warrior's or Solo user's year of birth after sign-up: the old and new year, whether it changed the need for a parent's OK, when, and who made it (if we make the change through support, the record shows it was made by Chore Scape).
• Photos submitted as proof a quest was done, where that feature is used. The app (version 1.6.5 and later) removes location data and other hidden details (EXIF metadata) from a photo before it leaves your phone, and we check stored photos and remove any location data that older versions left in. If a photo can't be cleaned, we delete it. We keep a note of each check: the photo's file name, the result and when.
• In-app progress data: coins, XP, levels, bonuses and penalties, and your collectible cards, including the card packs you earn.
• Payouts, if a Strategist uses Mark as Paid: the amount, the coins it settled, when it was marked as paid and when the Warrior confirmed it, and any payment reference note the Strategist adds. The note is stored encrypted, but we hold the key, so we can still read it.
• Friends and Duels, if you use them: your friend code and who you are friends with or have asked to be friends with; and in Duels (the card game, played against the computer), your decks, the cards you own, your Duels choices saved on your account (where your packs come from and, for Strategists, Play Duels) and the result of each match.
• A parent's OK for a child under 15, and what happens around it: the consent record described in "A parent's OK" below; a child's reminders to their Strategists (how many, and when); and a Strategist's answer if they say "No", or that they're not the child's parent or guardian.
• The missed-quest penalty setting for each Warrior: whether it's on, who last switched it on or off, and when. If it's on, the fines it takes.
• Your time zone (for example "Europe/London"), so days, reminders and quiet hours match your local time. Strategists and Solo users give it when they sign up. For a Warrior, the app sends it only once they're linked to a Strategist.
• A push notification token from Google Firebase, so we can send notifications to your phone. For a Warrior, the app registers it only once they're linked to a Strategist.
• The notifications we send you (such as "Quest approved!"), so the app can list them.
• A random install ID the app creates the first time it runs. It isn't taken from your phone's hardware. It's sent only when a Strategist or Solo account signs up, and we use it only to stop the same phone starting a new free trial again and again. A Warrior's sign-up doesn't use it, so a child who signs up first doesn't use up their parent's free trial.
• If you switch on the fingerprint or face lock, your phone does the check. Your fingerprint or face never reaches us.
• Blocks and reports: who you've blocked, and any report you send (who it's about, the reason, any detail you add, and the name you saw). Reports are emailed to our support inbox so we can look into them.
• Purchase history: which plan or free access your account has, whether a household plan covers you (see "Plans and households" below), and, once plans go on sale in the app, a record of each plan bought: the plan, when it started, when it renews or ends, whether it's active or cancelled, and the app store's reference for the purchase. The app store handles the payment itself, so we never see or store your card details.

Older versions of the app may send the time zone, notification token or install ID sooner than described above. For a child under 15 with no linked Strategist, our server doesn't accept a time zone or notification token, and removes any notification token it already has. Copies of the install ID, year of birth and time zone that any version of the app sends with a sign-up are removed from our sign-in records within two hours. The year of birth stays on your profile, and a Strategist's or Solo user's install ID stays in the free-trial record.

DocuScape specifically:

• Source documents a Strategist uploads to create a template (e.g. a council or employer form) — a Word document or PDF.
• The structured questions and answers drafted from that document, and every answer a Strategist submits when filling one in — which may include information about a Chore Scape Warrior linked to that Strategist (see "Data about someone other than the account holder" below).
• The email addresses a Strategist configures as recipients for a completed record (e.g. a council caseworker's or employer's email address).

Children and young people

Chore Scape is used by adults on their own, by adults with a support person, and by children and teenagers with a parent or carer as their "Strategist". Children under 15 use Chore Scape as a Warrior, with a parent or carer linked as their Strategist, and need a parent's OK before they can use photo proof or Friends (see "A parent's OK" below). Chore Scape on your own (Solo) isn't available to anyone under 15: the app won't set one up, and one set up by an older version works like a child's account with no Strategist (see "Time limits" below).

We follow the UK Information Commissioner's Age Appropriate Design Code (the Children's Code) for every child who uses Chore Scape, wherever they live. We'll also follow Australia's Children's Online Privacy Code once it's registered (it's due by 10 December 2026).

• Year of birth. Everyone is asked for their year of birth. We only ask for the year and don't check it against anything. In the app, only you and your linked Strategist(s) or Warrior(s) can see it. We can see it too, as we can the other data we hold (see "Who at Chore Scape can see your data"). We use it only to decide which default settings apply to you. Once it's set, you can't change it yourself; a linked Strategist can correct it, or we can if you email support. Changes to a Warrior's or Solo user's year are recorded. If a change would mean a parent's OK is no longer needed, only an adult Strategist with a verified email can make it, and they're asked to confirm it first.
• Friends are off for under-18s. For anyone under 18, or anyone who hasn't told us their year of birth yet, adding friends is switched off. Only a linked adult Strategist can switch Friends on for their Warrior, and they can switch them off again at any time. For a child under 15, a parent's OK is needed first. The Warrior is told when this changes. Duels are played against the computer only: there are no matches against friends or other people.
• What friends see. Friends are added only with a friend code that you choose to share; nobody can search for you. A friend sees your nickname and nothing else: not your email, your quests, your photos or your age. There is no chat. You can remove a friend at any time. Before an under-18 adds or accepts their first friend, the app shows a short reminder about staying safe online.
• Strategists can see a Warrior's quests and photos. Every Strategist linked to a Warrior can see their quests and quest photos, and the app tells Warriors this. A Warrior can see who's linked to them in Settings → Account → Who can see my quests, and tell us if one of them isn't their parent or carer. We look into it, and we don't tell the other linked Strategists.
• New Strategists need approval. When a Warrior already has a Strategist, a new Strategist can only link after the Warrior approves it and one of their existing Strategists approves it too.
• Nothing to buy. Warriors can't buy anything in Chore Scape. Card packs are only ever earned.
• What we don't do. Chore Scape has no ads, no advertising ID, no analytics or tracking tools and no location tracking, and we don't use anyone's data for marketing or profiling.
• Automatic decisions. A few things happen automatically, without a person deciding each time: the default settings for your age come from your year of birth; the missed-quest penalty takes coins, but only if a Strategist has switched it on for that Warrior (at most one 10% fine a day, and the Warrior is told each time); and an account for a child under 15 with no Strategist is scheduled for deletion (see "How long we keep it"). If you think one of these got something wrong, email our privacy officer and a person will look at it.
• Accounts children set up themselves. A Warrior can create their own account with an email address, and linking to a Strategist happens afterwards. If you're a parent or carer and your child has done this, you can link to their account as their Strategist, or email us and we'll help, including deleting the account if you ask (see "Making a request").

A parent's OK for children under 15

This section is part of Version 2 of our privacy policy (1 October 2026).

Children under 15 need a parent's or guardian's OK before they can use photo proof or Friends. Quests, coins, XP and cards work either way. We're bringing this in two steps: see "Switching it on" below.

Who needs it

• We go by year of birth. Because we only know the year, we assume the youngest age you could be: someone who turns 15 this year is treated as under 15 until 1 January. If we don't know someone's year of birth, we treat them as under 15.
• We use the same age, 15, in every country. It's the strictest of the rules in the countries this policy covers, so it meets all of them.
• Strategists never need a parent's OK.

What waits for the OK

• Photo proof. Until a parent says OK, the child's quests don't ask for photos and can be completed without them, and nothing is uploaded. The Strategist's choice of photos is kept, so the quests ask for photos again once the OK is given.
• Friends. They stay off until a parent says OK and a Strategist switches them on.
• No Warrior can buy anything in Chore Scape, with or without the OK.

Who can give it, and how

A Strategist linked to the child gives the OK in their own Chore Scape app, by confirming "I'm [the child]'s parent or guardian — I agree". To give it, they must be 18 or over (by year of birth) and have a verified email address that isn't the child's own. Before they agree, the app shows them what Chore Scape keeps about the child, and links to this policy.

Our method is in-app confirmation by a linked adult Strategist with a verified email. We can't check that someone really is a child's parent or guardian, so we rely on that confirmation. To help catch mistakes, the Strategist sees the child's year of birth, any other linked Strategists are told when an OK is given, and the child can tell us if a Strategist isn't their parent or carer.

What we record

Each time an OK is given, we record:

• which child it's for, and their year of birth at the time;
• which Strategist gave it, with their nickname at the time and a scrambled copy (a SHA-256 hash) of their email address, so the record still makes sense if their account changes (we can still check an address against it, so it doesn't hide the address from us);
• what it covers (photo proof and Friends);
• the version of this policy they were shown (Version 2), the version of the screen they agreed on, and the consent age at the time;
• how it was given (in-app confirmation), that they confirmed they're the child's parent or guardian, and when;
• when it ended, why (withdrawn, unlinked, the Strategist's account deleted, or replaced by a new OK), and who ended it.

We keep these records for as long as the child's account exists, and delete them with it.

Saying no

• A Strategist can choose No, keep them off instead. Photo proof and Friends then stay off for that child, unless another linked parent or guardian has given their OK. This counts even before we switch the check on for everyone. Quests keep working, and the Strategist can change their mind later.
• A Strategist who isn't the child's parent or guardian can say so. We stop asking them, and the child is told to ask a parent or guardian to link.
• A child can remind their Strategists to decide, at most once a day and 3 times for each Strategist. Once a Strategist has answered, we stop asking them.

Withdrawing the OK

• Any linked Strategist can withdraw the OK at any time, in Settings → Account → Privacy & Friends. This works even before we switch the check on for everyone.
• Withdrawing ends every OK for that child, whoever gave it. Photo proof and Friends switch off, and the child's quest photos are deleted straight away (the stored files within about an hour). A link the app has already made to show a photo can keep working for up to an hour, and a phone that has already shown a photo may keep a copy in the app's cache for a while.
• After a withdrawal, Friends stay off even if an OK is given again, until a Strategist switches them back on.
• Any linked parent or guardian can give their OK again later.
• Unlinking also ends that Strategist's OK. Once we've switched the check on, if no other linked Strategist has given an OK, photo proof and Friends switch off for the child. Their photos are then kept for up to 30 days, so proof of recent chores isn't lost by accident, and deleted after that unless a parent gives their OK again. To have them deleted straight away, withdraw the OK before unlinking, or ask us.

Photos

• A child's quest photos are seen by the child, by every Strategist linked to them, and by the providers that store them for us (see "Who we share it with"). The app tells children: "Your Strategist can see your quests and photos."
• We can access the photos too, but we only look when we need to (see "Who at Chore Scape can see your data").
• Quest photos, for everyone, are deleted 7 days after the quest is completed. See "How long we keep it" for the other times photos are deleted.

Children already using Chore Scape

On the day we switch the check on, photo proof and Friends switch off for children under 15 whose parent hasn't given their OK yet. Their quests keep working, and quests that asked for photos can be completed without them. Photos they took before are kept for up to 30 days, then deleted unless a parent gives their OK. Their Strategists get a notification asking them to decide.

Switching it on

We're bringing this in two steps: first an app update, then we switch the check on for everyone. Until then, photo proof and Friends work as before for children under 15, except that a parent's "No" or a withdrawn OK counts straight away. Strategists can give their OK once they've updated the app; older versions don't have it. When we switch the check on, Strategists who haven't decided yet get a notification asking them to.

What we process before a parent's OK, and why

• United Kingdom: we rely on providing the service a Strategist has set up for the child, and on our legitimate interests in running it safely. We follow the Children's Code standards on default settings and data minimisation.
• Australia and New Zealand: we collect only what's reasonably necessary to provide the service (APP 3 and IPP 1), and this policy is our notice at collection (APP 5 and IPP 3).
• Canada and Singapore: we rely on consent, which for a child under 15 comes from a parent or guardian. Before a parent's OK, we process only what's needed to create the account, link it with a parent, run the quests a linked Strategist sets, and ask for the OK.
• Quebec: a child under 14 needs the consent of a person with parental authority. Our under-15 rule covers this.

Time limits

• Once we've switched the check on, an account for a child under 15 (with a known year of birth) that has had no linked Strategist for 30 days is scheduled for deletion, and the child is told in the app. It's deleted 30 days after that, unless a Strategist links first. Accounts with no year of birth aren't removed this way.
• A linked child whose parent hasn't given their OK, or has said no, keeps using quests with photo proof and Friends off. We don't delete their account for that.

If a change to this policy affects a child's OK, we'll ask the parent again in the app.

Why we use your data

Under UK law, we rely on the following lawful bases:

• Contract — most processing (account creation, quests, linking, generating and sending a completed record, and giving you or your household the plan that's been bought) is necessary to provide the service you've asked us for. For a child's account, that's the service their Strategist has set up.
• Consent — for photo proof and Friends (for a child under 15, a parent's OK: see "A parent's OK" above), and for optional features such as the fingerprint or face lock. You can withdraw consent at any time; that doesn't affect what we did before.
• Legitimate interests — to apply privacy settings that suit your age (your year of birth), to keep accounts safe, to look into reports, and to stop free trials being misused (the install ID).
• Legal obligation — to keep records the law requires, such as proof of a parent's OK and records of any data breach, and to answer requests about your data.
• Substantial public interest / health & social care purposes — where a DocuScape record includes special category data (see below), this is the basis that applies, reflecting that these records exist to support a genuine care or support relationship, not for any other purpose.

In Australia and New Zealand, we collect only what's reasonably necessary to provide the service. In Canada (including Quebec) and Singapore, we rely on your consent, or for a child under 15 their parent's. If you withdraw consent to something the service needs, we may not be able to keep providing it, and we'll tell you what it means first. "What we process before a parent's OK" above explains how this applies to children.

Special category data in DocuScape records

DocuScape exists to turn genuinely repetitive council and employer paperwork into something faster to fill in. Depending on the document a Strategist uploads, the questions and answers in a record may include special category data under UK GDPR — for example, information about someone's health, care needs, or support requirements. We don't ask for this deliberately; it's a direct reflection of whatever questions are on the source document itself. We process it only to generate the record you've asked for and send it to the recipients you've configured — never for any other purpose, and never combined with other users' data.

Data about someone other than the account holder

A DocuScape record is submitted by a Strategist, but it's often about someone else — the Chore Scape Warrior they support. That person doesn't sign in to DocuScape or submit the record themselves. If you're a Warrior linked to a Strategist using DocuScape, records may be created that reference your name and, where a template asks for it, details about your day. If you have questions about a specific record submitted about you, contact us at the email above.

Who at Chore Scape can see your data

Chore Scape is run by one person, Chris Smith, trading as Chore Scape. In the app, your quests and photos are shown only to you and the people you're linked to. Other users can't see them.

Because we run the service, we can technically access the personal data in our systems, including quest photos. Your data is encrypted while it travels and on our hosting provider's disks, but it isn't end-to-end encrypted. That protects it from outsiders, not from us or our hosting provider. Anyone who got hold of our administrator login or our servers' secret keys could access it too, so we keep those to ourselves and never build them into the apps.

We only look at or change your personal data when we need to:

• to answer something you've asked us, such as a support question or a request to see, correct or delete your data;
• to look into a safety report or misuse;
• to fix a fault or check that an update works, using as little personal data as we can;
• to keep the service secure;
• or when the law requires it.

We never browse accounts or photos for any other reason, and only Chris looks at an individual person's data.

We use an AI coding assistant, Anthropic's Claude, to help us build and maintain the service. It can reach our systems, so that it can help us fix faults and check updates. Our rule is that it works only with totals, test results and account IDs (random codes, not names or email addresses). We don't use it to read your details, quests or photos. This is separate from the DocuScape feature that uses Anthropic (see "Who we share it with").

Before we update our systems, we take a copy of our database (not photos), so we can put things right if an update goes wrong. Since 1 October 2026, each copy is encrypted with a key only we hold before it's stored with Proton, which can't read it. Older copies, taken before then, weren't encrypted this way. They're on our own computer and in our Proton storage (which Proton can't read either), and we're deleting them: they'll be gone once our version 1.9.0 update is complete. Our hosting provider, Supabase, also keeps daily backups of our database for 7 days, so something that's deleted can take up to 7 days to disappear from those.

Staff at the providers we use (see "Who we share it with") can access data only as needed to provide their service, under contracts that limit them to that.

Who we share it with

We use a small number of specialist providers ("processors") to run our apps. None of them may use your data for their own purposes.

• Supabase — hosts our database, file storage (including quest photos), and user authentication for both apps. Our project's data is hosted in Supabase's EU region, in Frankfurt, Germany, and our contract is with Supabase Pte. Ltd. Supabase also keeps daily backups of our database (not photos) for 7 days.
• Resend — sends emails on our behalf: sign-in verification codes and password resets (both apps), a DocuScape record's completed PDF to the recipients a Strategist has configured for it, and reports about other users to our own support inbox.
• Anthropic — when a Strategist uploads a source document to create a DocuScape template, its text is sent to Anthropic's Claude API to draft the list of questions the app will ask each time the form is filled in. This happens once per template, not once per submission. Anthropic processes this text to generate that response; it is not used to train their models.
• Google Firebase — delivers push notifications (e.g. "your quest was approved") to both apps. This uses a device-level token, not your name or email, but the text of a notification, such as a quest title or a linked family member's nickname, passes through Firebase on its way to your device. On iPhone, Firebase hands notifications to Apple's push notification service, which delivers them to your phone.
• Zoho — hosts our email (support@chorescape.co.uk and privacy@chorescape.co.uk). It holds the emails you send us and our replies, including requests about your data, and the reports about other users that reach our support inbox. Our mailboxes are in Zoho's UK data centre.
• Proton — stores the copies of our database that we take before an update (see "Who at Chore Scape can see your data"). Since 1 October 2026, each copy is encrypted on our own computer, with a key only we hold, before it's uploaded. Proton's storage is end-to-end encrypted as well, so Proton can't read the copies. Proton is a Swiss company.
• Cloudflare — hosts this website. See "This website" below.

App stores

Plans can't be bought in the app at the moment. When they go on sale, you'll buy them in the app from your phone's app store. On Android phones, that's Google Play. On iPhone, it's Apple's App Store. The store takes the payment as an independent controller, under its own terms and privacy policy, not as our processor. It tells us what we need to give access and to keep your purchase history: which plan was bought, its status, when it renews or ends, and the store's reference for the purchase. We give the store a random reference for your account, so a purchase can be matched to it. We never see or store your card details, and we don't take payments on this website or anywhere else.

Plans and households

One plan covers a household: the adult who buys it, up to 6 Warriors linked to them, and the other adult Strategists linked to those Warriors (such as a second parent or a carer), up to 4 adults in all, including the buyer. To work out who a plan covers, we use the links between accounts that we already hold. We don't collect anything extra for this.

We do not sell your data, and we do not share it with anyone else for marketing purposes. The only other recipients of a DocuScape record are whichever email addresses a Strategist has personally configured for that specific template (e.g. a named council caseworker) — we never choose or add recipients ourselves.

Where your data goes

Our database and file storage are in Germany (Supabase's Frankfurt region, in the EU). Supabase Pte. Ltd., the company we contract with, is based in Singapore, and Supabase's staff may access data from outside the EU when they need to, for example to give support. Our email is held in the UK, by Zoho. Proton, which stores our encrypted database copies, is a Swiss company. Resend, Google Firebase and Anthropic are in the USA, and so is Apple's push notification service for iPhones. Cloudflare, which hosts this website, runs a worldwide network.

Before we send personal data to another country, we make sure it stays protected to the standard the law where you live expects:

• United Kingdom: the EU (including Germany) and Switzerland are covered by the UK's adequacy regulations. For the USA, Singapore and other countries, we rely on the safeguards each provider commits to in its own terms, such as the UK Extension to the EU-U.S. Data Privacy Framework or standard contractual clauses with the UK Addendum.
• Australia (APP 8), Canada (PIPEDA), New Zealand (IPP 12) and Singapore (the PDPA's transfer rules): we use providers whose contracts require them to protect personal data to a comparable standard, and we stay responsible for how they handle it.
• Quebec: before personal information leaves Quebec, we assess whether it will be adequately protected, taking into account how sensitive it is, why it's used, the safeguards in place and the law where it's going, and we keep that assessment in writing. Ask our privacy officer if you'd like a summary.

Data held in another country may be available to that country's courts, law enforcement and national security authorities under its laws.

This website

This website, chorescape.co.uk, handles a little personal data too:

• My Account. When you sign in, reset your password or ask to delete your account on My Account, what you type (your email address, password or reset code) goes straight to Supabase, the same as in the apps. While you're signed in, your session is kept in your browser's session storage, which is cleared when you sign out or close the tab.
• Fonts. Every page loads the Inter font from Google Fonts, so Google receives your device's IP address when you visit.
• Hosting. The website is hosted by Cloudflare, which handles every visit, including your IP address, and adds a small script that checks for automated traffic (bots).

How long we keep it

• Account and quest data: kept for as long as your account exists.
• Quest photos: deleted 7 days after the quest is completed. They're deleted sooner when the proof is denied, when the quest is deleted or when the account is deleted, and straight away if a parent withdraws their OK (the stored files within about an hour). If a parent says no, or, once we've switched the check on, a child's OK ends another way (such as by unlinking), the child's photos are kept for up to 30 days, then deleted unless a parent gives their OK. A link the app makes to show a photo stops working within an hour. A phone that has shown a photo can keep a copy in the app's cache for a while after we've deleted it, including the phone of a Strategist who has since unlinked.
• Records of a parent's OK, a child's reminders, a Strategist's answers, and year-of-birth changes: kept for as long as the account they're about exists, and deleted with it.
• Year of birth, friends, Duel records and the missed-quest penalty setting: kept for as long as your account exists.
• Notifications: deleted after 30 days.
• Reports: kept, so we have a record of what was reported. If an account involved is deleted, the report is kept without the link to that account. A copy of each report is also emailed to our support inbox (see the next line).
• Emails you send us, our replies, and the copies of reports in our support inbox: kept in our mailbox, so we have a record of what was asked and what we did. They aren't deleted automatically when an account is deleted. Ask us if you'd like yours deleted.
• DocuScape completed records (the submitted answers and generated PDF): automatically deleted 7 days after submission. A Strategist's own copy is sent to their own email at the time of sending, since that's the point after which we no longer hold it ourselves.
• DocuScape source documents (the file a Strategist originally uploaded to create a template): kept for as long as that template exists, and deleted when the template is deleted.
• Purchase history: kept for as long as your account exists. The app store keeps its own record of a purchase, under its own privacy policy.
• The install ID record (for Strategist and Solo phones only; see "What we collect"): kept after your account is deleted, but no longer connected to your account, so the same phone can't start another free trial.
• Accounts for children under 15 with no Strategist: scheduled for deletion once they've had no linked Strategist for 30 days, then deleted 30 days later unless a Strategist links first. This starts once we've switched on the parent's OK check.
• Backups: Supabase keeps daily backups of our database for 7 days, so something deleted from the database can take up to 7 days to disappear from them. From 1 October 2026, the encrypted copies we take before an update (see "Who at Chore Scape can see your data") are kept only while we might need them to undo that update, then deleted. The older, unencrypted copies described there will be gone once our version 1.9.0 update is complete.

Both apps have a "Delete My Account" action in Settings. Requesting it marks your account for deletion straight away and shows you the exact date it will happen; you can cancel the request at any point before then. 30 days after the request, an automated process permanently deletes your account, every record tied to it (except the install ID record, reports and emails, as described above), and any files you've uploaded (such as proof photos or DocuScape documents). Copies in backups go when those backups are deleted (see "Backups" above). If you're a Warrior, a linked Strategist keeps the card packs they got when you levelled up, and each one still carries your account's ID (a random code, not your name or email) so the same level can't bring them a second pack. You can also request deletion by emailing us instead, if you'd rather not use the in-app option, and a parent or guardian can ask us to delete their child's account (see "Making a request"). Deleting your account doesn't cancel a subscription bought through an app store: cancel it in the store.

How we protect it

• All traffic between our apps and our servers is encrypted in transit.
• Data at rest is encrypted by our hosting provider. This protects it from outsiders, such as someone who steals a disk. It isn't end-to-end encryption, so it doesn't stop us or our hosting provider accessing it (see "Who at Chore Scape can see your data").
• In the app, access to your data is restricted by row-level security policies, so one family's — or one Strategist's — data is never visible to another's.
• Since 1 October 2026, the copies of our database that we take before an update are encrypted with a key only we hold.
• Quest photos are stored privately. The app shows them through links that stop working within an hour.
• We don't embed administrative credentials in the apps themselves.
• We send third-party processors only what each one genuinely needs to do its job — for example, Anthropic sees a template's source text once, never a submitted record's actual answers.

If there's a data breach, we'll act quickly to contain it, and we'll tell the regulator and the people affected wherever the law requires it. "Laws and regulators in each country" below explains when.

Laws and regulators in each country

We follow the privacy law of each country this policy covers. Here's what each one gives you, how quickly we reply, and when we report a breach.

United Kingdom

• Laws: the UK GDPR and the Data Protection Act 2018, and the Information Commissioner's Age Appropriate Design Code (the Children's Code).
• Regulator: the Information Commissioner's Office (ICO), ico.org.uk.
• Your rights: access, correction, erasure, restriction, portability, objection, withdrawing consent, and not being subject to decisions based only on automated processing that have legal or similarly significant effects.
• We reply: within one month. For complex requests, the law lets us take up to two more months; we'll tell you if we need to.
• Breaches: if a breach is likely to put people at risk, we tell the ICO within 72 hours of finding out. If the risk to you is high, we tell you without undue delay.

Australia

• Laws: the Privacy Act 1988 and the Australian Privacy Principles (APPs). We'll also follow the Children's Online Privacy Code once it's registered.
• Regulator: the Office of the Australian Information Commissioner (OAIC), oaic.gov.au.
• Your rights: access to your personal information (APP 12), correction (APP 13), and complaint.
• We reply: within 30 days.
• Breaches: under the Notifiable Data Breaches scheme, if a breach is likely to cause serious harm, we tell the OAIC and the people affected as soon as practicable.
• Complaints: please complain to us first. If you're not happy with our answer, or we haven't replied within 30 days, you can complain to the OAIC.

Canada

• Law: the Personal Information Protection and Electronic Documents Act (PIPEDA).
• Regulator: the Office of the Privacy Commissioner of Canada (OPC), priv.gc.ca.
• Your rights: access, correction, withdrawing consent (with reasonable notice, subject to legal or contractual limits), and complaint.
• We reply: within 30 days. The law lets us extend this by up to 30 more days; we'll tell you if we need to.
• Breaches: if a breach creates a real risk of significant harm, we report it to the OPC and tell you as soon as feasible. We keep a record of every breach for at least 24 months.

Quebec

• Law: the Act respecting the protection of personal information in the private sector, as amended by Law 25.
• Regulator: the Commission d'accès à l'information du Québec (CAI), cai.gouv.qc.ca.
• Person in charge of the protection of personal information: our privacy officer (see "Who we are").
• Your rights: access, correction, withdrawing consent, asking us to stop sharing your information or to de-index it, a copy of information you gave us in a structured, commonly used format, and being told when a decision about you was made only by automated processing, with the chance to have it reviewed by a person.
• Children: for a child under 14, consent comes from a person with parental authority. We ask for a parent's OK up to 15.
• We reply: within 30 days.
• Confidentiality incidents: if there's a risk of serious injury, we tell the CAI and the people affected promptly. We keep a register of every incident.

New Zealand

• Law: the Privacy Act 2020 and its Information Privacy Principles (IPPs).
• Regulator: the Office of the Privacy Commissioner, privacy.org.nz.
• Your rights: access to your personal information (IPP 6), correction (IPP 7), and complaint.
• We reply: as soon as we reasonably can, and within 20 working days.
• Breaches: if a privacy breach has caused, or is likely to cause, serious harm, we tell the Privacy Commissioner and the people affected as soon as practicable.

Singapore

• Law: the Personal Data Protection Act 2012 (PDPA).
• Regulator: the Personal Data Protection Commission (PDPC), pdpc.gov.sg.
• Data Protection Officer: our privacy officer (see "Who we are").
• Your rights: access, correction, withdrawing consent (we'll tell you what that means for your account first), and complaint.
• We reply: as soon as we reasonably can, and within 30 days. If we can't, we'll tell you within 30 days when we will.
• Breaches: if a breach is likely to cause significant harm, or affects 500 or more people, we tell the PDPC within 3 calendar days of assessing it. If it's likely to cause you significant harm, we tell you too.

Your rights

Depending on where you live (see "Laws and regulators in each country"), you have the right to:

• ask what personal data we hold about you, and get a copy of it (access);
• ask us to correct data that's wrong (correction);
• ask us to delete your data (erasure), unless the law requires us to keep it — use "Delete My Account" in either app's Settings or on My Account, or email us;
• get a copy of data you've given us, in a format you can reuse (portability);
• object to, or ask us to restrict, some kinds of processing;
• withdraw consent at any time, including a parent's OK for their child;
• be told about decisions made automatically, and ask a person to look at them again;
• complain to us, and to the regulator where you live.

Children have these rights too, and a parent or guardian can use them on behalf of their child.

Making a request or a complaint

How to ask

Email our privacy officer at privacy@chorescape.co.uk or support@chorescape.co.uk. Please email from the address your account uses, so we can check it's you, and tell us what you'd like. Making a request is free.

We reply within the time the law where you live allows: one month in the UK; 30 days in Australia, Canada, Quebec and Singapore; and 20 working days in New Zealand. If we need longer and the law allows it, we'll tell you why.

Requests from parents and guardians

To protect children, we act on a request about a child's account only when it comes from the verified email address of an adult Strategist who is linked to that child in Chore Scape at the time. We check this against our records before we do anything.

• Deleting a child's account: we schedule it for deletion. It's deleted 30 days later, and can be cancelled in that time. We tell the child, and the child's other linked Strategists.
• A copy of a child's data: we send it to that verified email address, within the time limit above.
• Anything else, or a request from a parent or guardian who isn't linked in the app, goes to our privacy officer, who may ask for more information to confirm who you are and your relationship to the child.

Children can also ask for themselves. A grown-up they trust can help.

Complaints

If you're unhappy with how we've handled your data, please tell our privacy officer first. We'll acknowledge your complaint within 30 days and do our best to put things right. You can also complain to the regulator where you live:

• United Kingdom: the Information Commissioner's Office, ico.org.uk
• Australia: the Office of the Australian Information Commissioner, oaic.gov.au
• Canada: the Office of the Privacy Commissioner of Canada, priv.gc.ca
• Quebec: the Commission d'accès à l'information du Québec, cai.gouv.qc.ca
• New Zealand: the Office of the Privacy Commissioner, privacy.org.nz
• Singapore: the Personal Data Protection Commission, pdpc.gov.sg

Changes to this policy

When we make a significant change to how we handle your data, we publish a new version of this policy with a new version number, keep each version unchanged at its own address (this one is privacy-v2.html), and tell you in the app. If a change affects a parent's OK for their child, we'll ask the parent again.