COPPA Compliance

Our Commitment to Children's Privacy

Choretastic! is designed as a family management tool where parents create and control children's accounts. We take the privacy of children very seriously and comply fully with the Children's Online Privacy Protection Act (COPPA), which protects children under the age of 13.

Parental Consent

Choretastic! requires verifiable parental consent before any child's information is collected. This is enforced through our app architecture:

• Only authenticated parent accounts can create child profiles.
• Parents must be signed in with a verified email address.
• Child profiles are created within the parent's family group and cannot be created independently.
• Child devices use anonymous authentication managed by the parent. No email, password, or personal identifier is required from the child.

Information Collected from Children

We collect only the minimum information necessary to provide our service. Information associated with child profiles includes:

• Display name and avatar: As entered by the parent during profile creation.
• Chore completion data: Records of chores assigned, completed, and approved.
• Screen time data: Balances, daily limits, and usage records.
• Device information: Device identifiers for linked child devices, used for screen time enforcement.
• Location data: Only when explicitly enabled by the parent for safety features (geofence arrival/departure alerts at parent-defined safe zones).

We do not collect a child's birth date, age, email address, social media accounts, or any other identifying information directly from children. The display name and avatar are the only personal details captured for child profiles.

How Children's Data Is Used

Children's data is used exclusively to:

• Display the child's chores, rewards, and screen time balance within the app.
• Enforce screen time limits on linked devices.
• Provide location-based safety features when enabled by parents.
• Generate activity reports for parents.

We do not use children's data for advertising, marketing, or any purpose unrelated to the core family management service. We do not sell or share children's data with third parties for commercial purposes.

Parental Rights

Parents have full control over their children's data at all times. As a parent, you can:

• Review: View all data associated with your child's profile through the app.
• Modify: Update your child's name, avatar, settings, and permissions at any time.
• Delete: Remove your child's profile and all associated data through the app settings. Deletion is permanent and includes all chore records, screen time data, photos, and device links.
• Revoke consent: Unlink child devices and disable data collection features at any time.
• Restrict: Control which features are available to your child, including location tracking, content filters, and communication permissions.

Data Security for Children

We implement strong security measures to protect children's data:

• All data is encrypted in transit (TLS) and at rest.
• Firestore security rules enforce family-scoped access so only parents within the same family can access a child's data.
• Child device authentication uses cryptographic device verification to prevent unauthorized access.
• Server-side PIN verification protects parental controls from being bypassed.
• Photos and files are stored in family-scoped storage paths with access controls.

Third-Party Operators

We use Google Firebase as our backend infrastructure provider. Firebase processes children's data on our behalf under our instructions and in compliance with COPPA. We do not allow Firebase or any other third-party operator to use children's data for their own purposes.

Apple's Screen Time API is used on-device to monitor and enforce screen time limits. Screen time data processed through this API remains on the device and under Apple's privacy protections.

Data Retention and Deletion

Children's data is retained only as long as the child's profile is active within a family. When a child profile is deleted:

• All personal information is permanently removed from our database.
• All photos and uploaded files are deleted from cloud storage.
• Device authentication tokens are revoked.
• Location history and geofence data are erased.

When a family account is deleted, all associated child profiles and data are also permanently deleted.

Contact Us

If you have any questions or concerns about our COPPA compliance or children's privacy practices, please contact us at:

privacy@choretastic.com

We respond to all inquiries regarding children's data within 48 hours.