Privacy Policy

1. Introduction

Welcome to Chorby. Chorby is operated by Apex Home Automations LLC, a Texas limited liability company ("we," "us," or "our"). We are committed to protecting the privacy of you and your family. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

Chorby is a private family task, routine, reward, and allowance app managed by parents and legal guardians. Adults create and manage the household; children use supervised family profiles rather than registering independent accounts. Within Chorby, household content is available to authorized household members, not the public or other households. The providers described in this policy process data to operate the Service.

2. Information We Collect

Account Information (Parents/Guardians)

When you create an account, we collect:

• Email address associated with your Sign in with Apple or Google account (new accounts use Apple or Google)
• Name (if provided by you or your sign-in provider)
• For legacy email/password accounts: email address and a securely hashed password
• Subscription status managed via RevenueCat and the store you purchased from (Apple App Store or Google Play Billing). We do not receive your payment card details

Child Information

When you add a child to your family account, we collect:

• Child's first name or nickname (required)
• Age group selection
• Birth month and year (optional): used to tailor age-appropriate content. These fields do not ask for the child’s birth day
• Gender (optional): used to personalize the experience
• Interests, motivation preferences, and motivators: used to personalize task and reward suggestions. These answers are required to complete guided setup; they are not required in the standard Add Person form
• Chorby mascot selection
• Optional profile photos or avatars uploaded by a parent or by a child using a parent-managed profile
• Optional Profile PIN for child profile access, set by a parent. Profile PINs are hashed on our servers; a PIN may also be cached in operating-system-protected storage on your device to support offline access

Activity Data

• Tasks created, assigned, and completed
• Photos submitted as proof of task completion (if enabled)
• Optional images for rewards (e.g. Gem Shop prize photos)
• Gems (points) earned and spent
• Rewards created and redeemed
• Allowance settings and transaction history

Technical Information

• Device type and operating system
• App version
• A push-notification token (Apple Push Notification service on iOS, Firebase Cloud Messaging on Android), a device identifier, and device name, along with device model, OS and app version, and device settings needed for sync: used to deliver notifications and keep your family's devices in sync
• Crash reports and error logs (to improve app stability)
• Diagnostic and error data: used to keep the app stable and fix problems
• First-party usage analytics events (for example onboarding and setup steps), keyed to a device identifier and, after sign-in, the parent account — not to child profiles
• On Android, a one-time Play Install Referrer string (campaign fields such as source, campaign, and click identifier when present): used to understand which Play listing or campaign led to the install. We do not collect the Android advertising ID

Cookies & Local Storage

Our website uses first-party cookies and browser storage needed for the site to function and measure marketing sources. When a visitor arrives from a supported campaign, we keep the source for that browser session and record the source-specific redirect request when the visitor opens the App Store. You can clear or block this storage in your browser settings. We do not respond to Do Not Track signals.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your family account
• Provide task tracking and management features
• Sync data across your family's devices
• Process reward redemptions and allowance tracking
• Send push notifications you enable in the app (for example task reminders and approval alerts)
• Improve and optimize our Service, including first-party usage analytics
• Debug crashes and fix technical issues
• Prevent fraud and ensure security
• Comply with legal obligations

We do not sell your personal information. We do not use children’s personal information for interest-based or behavioral advertising directed at children.

4. Children's Privacy

Chorby is built for parent-managed households. Parents and guardians supply profile information, authorize household access, and supervise children’s use. Children can complete tasks, submit task-proof photos when a parent enables that feature, and customize their profiles. These activities use the information described in this policy.

Parent-Managed Profiles

• Children cannot create accounts on their own
• A parent or guardian must create the family account and add children
• When you add a child profile, you confirm that you are the child’s parent or legal guardian and acknowledge the collection and use described in this policy
• Parents can review, correct, and request deletion of their children’s information using the controls below or by contacting support

Data Collection Limits

• We collect only the child information needed to run family task, reward, and personalization features as described above
• We use first names or nicknames only; no full legal names are required for children
• We do not collect children's email addresses or contact information
• Children do not create their own login accounts; access is through the parent-managed family account (optional Profile PIN if set by a parent)

Parental Controls

• Parents can review their children’s profiles and activity in the app and request a copy of their data
• Parents can modify or delete child profiles
• Parents can disable photo upload requirements for tasks
• Household owners can request deletion of the household and its associated data through the account-deletion process described below
• To exercise these rights, use the app settings or contact us at [email protected]

5. Photo Data

Our Service may include photos for child profile avatars, reward images, and task-proof photos. We handle this data with special care:

• Purpose: Avatars personalize child profiles; reward images illustrate prizes in the Gem Shop; task-proof photos help verify completion within your family
• Storage: Photos are kept in a private, access-controlled storage bucket and retrieved only through short-lived signed links over secure (HTTPS) connections
• Metadata: Location (EXIF/GPS) data is stripped from avatars, rewards, and task photos when they are re-encoded on upload
• Access: Within Chorby, only authorized members of the same household can view its photos. Photos are not public posts or shared with other households; our providers process them to operate these features
• Parental Control: Photo proof is optional. Parents choose which tasks request it and can change that setting. Turning off photo proof does not delete photos already uploaded
• Managing Photos: Parents can delete individual task-proof photos from completions, change child profile avatars, and remove reward images in the app
• Stored Copies: Removing or replacing a displayed avatar or reward image, or deleting a child profile, does not always immediately erase the stored image file. For help deleting stored copies, including images no longer visible in the app, contact [email protected]
• Account Deletion: Associated photos are included in a household-deletion request. The account-deletion and retention process is described in section 8 below

6. Third-Party Services

We use the following third-party services to operate Chorby:

Supabase

We use Supabase for our database, authentication, and file storage. Supabase processes data on our behalf and is contractually obligated to protect your information.

Authentication Providers

If you choose to sign in with Apple or Google, we receive basic profile information (email address) from these providers to create or link your account. We do not receive or store your passwords from these services.

RevenueCat, Apple App Store, and Google Play Billing

We use RevenueCat to manage subscriptions and in-app purchases. On iOS, billing is processed by Apple through the App Store. On Android, billing is processed by Google through Google Play Billing. We do not receive or store your payment card details. RevenueCat receives subscription and entitlement data (for example product identifiers and whether Chorby Plus is active) so we can unlock parent features. You manage or cancel a subscription where you bought it: on iPhone or iPad, iOS Settings → your name → Subscriptions; on Android, Google Play → Payments & subscriptions → Subscriptions, or play.google.com/store/account/subscriptions.

Push notifications (APNs and FCM)

We use device push tokens for notifications and background synchronization, including widget refresh. On iOS we use Apple’s Push Notification service (APNs); on Android we use Firebase Cloud Messaging (FCM). Notification permission controls visible alerts. On Android, we may use an FCM token for background synchronization and widget refresh even when permission to show visible notifications is disabled. Apple or Google processes the token and delivery payload, such as task reminders, approval alerts, or widget refresh signals. We do not sell push tokens or use them for advertising.

Play Install Referrer (Android)

On Android, we may read the Play Install Referrer once per install. That string can include campaign fields such as source, campaign name, and a click identifier when Google provides them. We store those fields with our first-party usage analytics and may attach the same campaign fields to the RevenueCat subscriber record so we can tell whether a campaign led to a subscription. We do not collect the Android advertising ID (AAID/GAID), do not request the advertising-ID permission, and do not call RevenueCat’s device-identifier collection for this. This is not used to advertise to children or to profile a child.

App Store advertising measurement (iOS)

We use Apple’s AdServices through RevenueCat to understand whether an App Store ad for Chorby led to an install and subsequent subscription. RevenueCat receives and stores attribution information, which may include campaign, ad group, and keyword details, and associates it with the customer record used for your family’s subscription. We use this information to measure advertising performance.

This integration does not display ads inside Chorby and does not use Apple’s Identifier for Advertisers (IDFA).

Crash & Error Diagnostics

We use Sentry as a crash-reporting service provider to keep the app stable and fix bugs. Sentry may process limited technical diagnostics such as app and build version, operating system and device model, exception type, redacted error text, stack traces, and a small allowlist of app lifecycle or recovery states. We configure the SDK not to send default personal information, do not identify a parent or child to Sentry, prevent storage of IP addresses in Sentry, and disable session replay, performance tracing, screenshots, view hierarchy, free-form logs, and automatic request capture. We do not send child or parent names, email addresses, family identifiers, photos, task or reward text, request bodies, or authentication tokens to Sentry. We use diagnostic data only to operate, secure, and improve the Service, not to profile or advertise to a child. Separate first-party recovery events may continue to be stored in our Supabase infrastructure.

Sentry diagnostic events are retained for no longer than 30 days and are then automatically deleted. Because these events are not associated with a Chorby account, account deletion may not identify an individual diagnostic event for immediate deletion, but it will expire under this retention schedule.

Analytics & Measurement

We run first-party usage analytics in the app so we can see where parents drop off in onboarding and setup, and how the product is used. Events are stored in our own database. They are keyed to a device identifier and, after the parent signs in, to the parent account. We do not attach these events to child profiles or store child rows in the analytics tables (no child name, age, birth date, avatar, or other child content). We do not use a third-party analytics or advertising SDK for this. On Android, first-party usage events may include the Play Install Referrer campaign fields described above; that is not an advertising SDK and does not include the Android advertising ID. We do not use children’s personal information for interest-based or behavioral advertising directed at children.

Support Communications

When you contact support, we receive the information you send and the account and device details included in your message. In-app reports prefill your account email, account and family identifiers, and app/device information. You may also choose to attach recent diagnostic logs, which can contain device, family, child and account identifiers and task text. These optional logs are separate from the minimized Sentry diagnostics described above. The report is sent through your chosen email app to our support mailbox so we can investigate the issue. You can review the message before sending it and contact support about access to or deletion of information supplied in a report.

Service Providers and Platform Services

Our service providers include Supabase (database, authentication, storage, and first-party analytics/recovery events), Sentry (crash and error diagnostics), RevenueCat (subscription management), and Upstash (request rate limiting; it receives account identifiers, not family content). We use these providers to operate, secure, and support Chorby, subject to our agreements with them.

We require third parties that receive user data from Chorby to provide the same or an equivalent level of protection as described in this Privacy Policy and required by applicable app-store privacy rules.

Apple and Google also provide platform services such as sign-in, app-store billing, and push delivery; Google Play supplies the Android Install Referrer described above. Your use of those services, and of the email provider you choose for support, is also governed by their own terms and privacy policies. Their platform activities are not all performed solely on Chorby’s instructions.

7. Data Sharing

We do not sell your personal information. We do not share personal information with third parties so they can market their own products to you independently of our Service.

We may share information only in these limited circumstances:

• Service Providers and Platforms: With the providers described in section 6 for hosting, authentication, subscriptions, push delivery, support and crash reporting. Our contracted services are subject to our provider agreements; Apple, Google and your chosen email provider also operate platform services under their own terms and privacy policies
• Legal Requirements: If required by law, court order, or government request
• Safety: To protect the safety of users, the public, or Chorby
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)

8. Data Retention

• We retain your data for as long as your account is active
• You can delete your account at any time in the app (Settings → Account & Login → Delete Account and Data) or by emailing [email protected]
• If you own a household, a successful deletion request closes that household on our servers and schedules its family data, including associated photos, for permanent deletion after a 30-day recovery period
• During those 30 days you can sign in to Start Fresh with a new household or contact [email protected] to request recovery of the old one. Starting Fresh keeps your login and new household; it does not restore the old household
• If you joined someone else’s household and do not own one, Delete Account removes your account and membership immediately, without the household’s 30-day recovery period. Other members and their shared household data remain
• The requesting device signs out after a successful request. Other devices apply closure when they reconnect; copies cached offline may remain visible until then
• We do not send an email when the permanent deletion (day-30 purge) completes
• Deleting your Chorby account does not cancel a store subscription. Cancel where you originally subscribed: iOS Settings → your name → Subscriptions for App Store purchases, or Google Play → Payments & subscriptions → Subscriptions for Play purchases, even if you now use a different type of device
• Sentry diagnostic events are retained for no longer than 30 days and are then automatically deleted
• Residual copies in encrypted backups are purged within 90 days
• We may retain certain data as required for legal compliance, fraud prevention, or dispute resolution

9. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Delete your account and associated data
• Portability: Request your data in a portable format
• Objection: Object to certain data processing activities

To exercise these rights, contact us at [email protected] or use the account settings in the app.

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected and the right to opt out of the sale of personal information. We do not sell personal information.

European Residents (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation, including the right to lodge a complaint with your local data protection authority.

10. Data Security

We implement industry-standard security measures to protect your data:

• All data is transmitted over HTTPS encryption
• Passwords are securely hashed and never stored in plain text
• Row-level security ensures users can only access their own family's data
• Photos and sensitive files are stored in private, access-controlled buckets and encrypted at rest by our infrastructure provider.
• We use secure, reputable cloud infrastructure providers
• Regular security reviews and updates

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We encourage you to use a strong password and keep your account credentials safe.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Updating the "Last updated" date at the top of this page
• Sending an email notification for significant changes
• Displaying a notice in the app

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your data, please contact us:

Email: [email protected]