Kid ChoreGet the app

Privacy Policy

Last Updated: March 28, 2026

Effective Date: March 28, 2026

Galitek LLC ("Company," "we," "us," or "our"), a Virginia limited liability company, operates the Kid Chore mobile application and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information and your children's information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, you must not use the Service.

1. Important Information About Children's Privacy

Kid Chore is designed for families. Child profiles are created and managed exclusively by a Parent or legal guardian ("Parent"). Children access the Service only through a Parent-generated access code — we do not collect personal information from children directly.

Because some children using the Service may be under 13, we comply with the Children's Online Privacy Protection Act ("COPPA"). By creating a child profile, you, as the Parent, consent to our collection and use of that child's information as described in this Privacy Policy.

Parents may at any time:

  • Review the personal information collected about their child
  • Request deletion of their child's personal information
  • Refuse further collection of their child's information by deleting the child's profile
  • Contact us at info@kidchore.com with any requests regarding their child's data

2. Information We Collect

2.1 Information Provided by Parents

When you create an account and use the Service, we collect:

  • Account Information: Email address, password (stored as a cryptographic hash — we never store plain-text passwords), and account creation timestamp
  • Third-Party Authentication Data: If you sign in using Google or Apple, we receive and store your Google ID or Apple ID and associated email address. We do not receive or store your Google or Apple password.
  • Family Information: Family name that you choose during setup
  • Subscription Information: Subscription plan type, subscription status, platform (Google Play or Apple App Store), purchase token, product identifier, original transaction identifier, trial and expiration dates. Payment processing is handled entirely by Google Play or the Apple App Store — we do not collect, process, or store credit card numbers, bank account details, or other direct payment information.

2.2 Information Provided by Parents About Their Children

When a Parent creates a child profile, we collect:

  • Child Profile Information: Child's first name (or nickname), age (used for display purposes only), and selected avatar (from a preset illustrated set — no photo uploads for child profiles)
  • Access Code: A unique 6-character alphanumeric code generated by the Service for the child to log in

2.3 Information Generated Through Use of the Service

As the Service is used, we automatically collect:

  • Chore Data: Chore titles, descriptions, point values, schedules, completion status, submission timestamps, approval/rejection status, and rejection notes
  • Photo Proof: If a Parent enables photo proof for a chore, the child may upload a photo to demonstrate completion. Photos are stored on Cloudinary (a third-party cloud storage provider). We store only the image URL.
  • Points and Rewards Data: Point balances, point transaction history (amounts and reasons), reward titles, descriptions, point costs, and redemption records
  • Notification Data: Notification titles, bodies, read status, and timestamps
  • Device Tokens: Firebase Cloud Messaging (FCM) tokens for delivering push notifications to Parent and child devices

2.4 Information We Do NOT Collect

  • We do not collect precise geolocation data
  • We do not collect contacts, call logs, or SMS data
  • We do not collect biometric data
  • We do not collect browsing history or tracking data from other apps
  • We do not use cookies or web tracking technologies in the mobile app
  • We do not collect children's email addresses, phone numbers, or physical addresses
  • We do not allow children to make their information publicly available

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To Provide the Service: Creating and managing accounts, families, child profiles, chores, rewards, points, and related features
  • To Authenticate Users: Verifying Parent identity through email/password or third-party OAuth providers, and verifying child identity through access codes
  • To Deliver Notifications: Sending push notifications about chore submissions, approvals, rejections, reward redemptions, and other Service events using Firebase Cloud Messaging
  • To Process Subscriptions: Managing premium subscription status, verifying purchases, and providing access to premium features
  • To Maintain and Improve the Service: Monitoring Service performance, diagnosing technical issues, and improving functionality
  • To Comply with Legal Obligations: Responding to legal requests and preventing fraud or abuse

4. How We Share Your Information

We do not sell, rent, or trade your personal information or your children's personal information to any third party.

We share information only with the following service providers, strictly as necessary to operate the Service:

Service Provider Purpose Data Shared
Google (Firebase Cloud Messaging) Push notification delivery Device FCM tokens, notification content
Google (OAuth) Parent authentication Google ID token (during sign-in only)
Apple (Sign in with Apple) Parent authentication Apple identity token (during sign-in only)
Cloudinary Photo storage for chore proof Uploaded photos
RevenueCat Subscription and in-app purchase management User ID, purchase tokens, subscription status
Google Play / Apple App Store In-app purchase processing and payment Purchase tokens, product IDs (payment details are handled entirely by the store)

These service providers are contractually obligated to use your data only for the purpose of providing their services to us and are bound by their own privacy policies.

We may also disclose your information:

  • To comply with law: In response to a subpoena, court order, or other legal process
  • To protect rights and safety: When we believe disclosure is necessary to protect our rights, your safety, or the safety of others
  • In a business transfer: If Galitek LLC is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction. In such event, we will notify you before your personal information is transferred and becomes subject to a different privacy policy. Any acquiring entity will be required to honor the commitments made in this Privacy Policy with respect to children's data.

5. Data Storage and Security

  • Your data is stored on secure servers. Our backend infrastructure uses encrypted database connections and industry-standard security practices.
  • Passwords are stored using cryptographic one-way hashing — we cannot read or recover your password.
  • Authentication tokens are stored securely on your device using platform-native secure storage (Keychain on iOS, encrypted storage on Android).
  • We use HTTPS/TLS encryption for all data transmitted between your device and our servers.
  • Access to production data is restricted to authorized personnel only.

While we implement commercially reasonable security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

  • Active Accounts: We retain your data for as long as your account is active and as needed to provide the Service.
  • Child Data: Child profile data is retained until the Parent deletes the child's profile or deletes their account.
  • Deleted Accounts: When you delete your account, we delete or anonymize your personal information and all associated family and child data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, legal compliance).
  • Subscription Records: We retain subscription transaction records as required for financial and tax reporting obligations.
  • Photos: Photos uploaded to Cloudinary are deleted when the associated chore assignment is deleted or the account is deleted.

7. Your Rights and Choices

7.1 All Users

You have the right to:

  • Access the personal information we hold about you and your children through the Service's interface
  • Correct inaccurate information by editing profiles within the Service
  • Delete your account and all associated data by contacting us at info@kidchore.com
  • Delete child profiles at any time through the Service's "Manage Kids" settings
  • Withdraw consent for data collection by deleting your account
  • Opt out of notifications by disabling push notifications in your device settings

7.2 Virginia Consumer Data Protection Act (VCDPA)

If you are a Virginia resident, you have additional rights under the VCDPA:

  • The right to confirm whether we are processing your personal data
  • The right to access your personal data
  • The right to correct inaccuracies in your personal data
  • The right to delete your personal data
  • The right to obtain a portable copy of your personal data
  • The right to opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects

We do not sell personal data. We do not process personal data for targeted advertising. We do not engage in profiling that produces legal or similarly significant effects.

To exercise any of these rights, contact us at info@kidchore.com. We will respond to your request within 45 days. If we deny your request, you may appeal by contacting us at the same email address.

7.3 California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, and disclose
  • Request deletion of your personal information
  • Non-discrimination for exercising your privacy rights

We do not sell or share personal information as defined under the CCPA/CPRA.

7.4 European Economic Area, United Kingdom, and Other Jurisdictions

If you are located in the EEA, UK, or another jurisdiction with applicable data protection laws, you may have additional rights including the right to lodge a complaint with your local data protection authority. Our legal basis for processing personal data is your consent (provided when creating an account) and legitimate interests in operating the Service. Contact us at info@kidchore.com to exercise any applicable rights.

8. Third-Party Links and Services

The Service may contain links to third-party websites or services (e.g., Google Play Store, Apple App Store) that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party services you interact with.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated Privacy Policy within the Service
  • Updating the "Last Updated" date at the top of this page
  • Sending a push notification or email for significant changes, particularly any changes affecting children's data

Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy. If a change materially affects how we handle children's data, we will obtain new verifiable parental consent where required by COPPA.

10. Contact Us

If you have any questions or concerns about this Privacy Policy, our data practices, or your children's privacy, please contact us:

Galitek LLC Email: info@kidchore.com Website: https://kidchore.com

For COPPA-related requests concerning your child's data, please include "Children's Privacy Request" in the subject line so we can prioritize your inquiry.