Privacy Policy for ChoreQuest

Effective date: 2026-08-08

This document describes what data ChoreQuest (“the app”, com.interactivepie.chorequest) collects, why, and how it’s protected. It applies to every user of the app.

1. Introduction

ChoreQuest is a household chore-tracking app for families. It turns completing chores into shared progress on a virtual house. This policy explains what information the app needs to do that, and nothing more.

2. Data We Collect

• Email address - used only to sign you in via a magic-link email (no password is ever stored). Managed by our backend provider, Supabase. Processed under GDPR Art. 6(1)(b) (necessary to provide the account/service you asked for).
• Display name and avatar emoji - chosen by you, shown to the other members of your household. Also processed under Art. 6(1)(b) - the app can’t show a shared household without it.
• Household data you or your household create: chore definitions, completion history, a shared grocery list, scheduled chores, the shared house’s progress state, and your household’s name/icon/invite code. Processed under Art. 6(1)(b) - this is the service itself.
• Crash/error diagnostics (device/OS info, app version, a stack trace - no personal data attached, see §9) - processed under Art. 6(1)(f) (our legitimate interest in keeping the app working), which you can object to at any time via the contact below, since it’s not required to use the app.
• Device-local data that never reaches our servers: locally scheduled chore-reminder notifications, and a cached session token used to keep you signed in.

3. Data We Do Not Collect

ChoreQuest does not use any advertising or analytics SDKs, does not track you across other apps or websites, does not collect an advertising identifier, and does not request access to your location, camera, microphone, or contacts.

4. Who Can See Your Data

Every table in our database is protected by row-level security scoped to your household. Only people who have joined your household - via your invite code, and approved by your household’s owner - can see your household’s data. No one outside your household, including us, has a way to browse your data through the app.

5. Where Data Is Stored

Your data is hosted by Supabase, Inc. (Postgres database + authentication), in Supabase’s eu-west-1 region (Ireland, EU). Crash diagnostics (see §9) are processed by Sentry in the EU (Germany). Because both of our processors keep data inside the EU/EEA, we don’t currently rely on any cross-border transfer mechanism (e.g. Standard Contractual Clauses) for this data.

6. Data Retention

Your data is kept for as long as your household exists. A chore-completion log that’s undone is kept (marked as deleted) so your household’s history stays accurate, rather than being silently erased. Data is permanently removed when a household is deleted (see Account Deletion below).

7. Account Deletion

You can permanently delete your account at any time from the app: tap your household’s icon (top right) → Account verwijderen (“Delete account”). This is irreversible. What happens next depends on your role:

• If you’re the only member of your household, your household and all of its data (chores, history, grocery list) are deleted along with your account.
• If you’re the sole owner of a household with other members still in it, ownership automatically transfers to another existing member before your account is deleted, so the household and its data continue for the remaining members.

8. Your Data Protection Rights (GDPR)

If you’re in the EU/EEA (or another jurisdiction with similar protections), you have the right to:

• Access the personal data we hold about you.
• Rectify it, if it’s inaccurate - most of your data (display name, avatar, chores, etc.) you can already edit directly in the app.
• Erase it - see Account Deletion above, which you can do yourself in-app at any time without contacting us.
• Restrict or object to our processing of it - this mainly applies to crash diagnostics (§2, §9), which you can opt out of by contacting us; the rest of your data is processed only because it is the service, so restricting it means the app can no longer function for your household.
• Receive a copy of your data in a portable format (data portability). There isn’t an automatic in-app export yet - contact us (§13) and we’ll extract it for you. Given how little data the app holds per household, this is currently handled manually rather than through a self-serve export feature.
• Lodge a complaint with your local data protection supervisory authority if you believe we’ve mishandled your data.

To exercise any of these, contact us using the details in §13.

9. Children’s Privacy

ChoreQuest is not directed to, marketed at, or intended for use by children. Every account (the magic-link email sign-in described in §2) must be created and controlled by someone who is 18 or older.

A household’s adult account holder can still add other household members - including children - by choosing a display name and avatar emoji for them, so the whole family can be assigned and credited for chores. No account, email address, or other personal information is collected directly from those household members; their display name and avatar are entered and controlled by the adult account holder, not by the child.

We do not knowingly collect personal information from children. If we become aware that someone under 18 has created their own account, we will delete it. Because no account holder is a child and no personal information is collected directly from any child household member, ChoreQuest does not trigger COPPA’s “actual knowledge” standard or GDPR Art. 8’s parental-consent requirement for children’s data.

10. Third-Party Services

Two third parties are involved in running ChoreQuest:

• Supabase, Inc., which hosts our database and handles authentication. See Supabase’s own privacy policy for how they handle data on our behalf.
• Sentry (Functional Software, Inc.), used only in released versions of the app to report crashes and errors so we can fix them. Sentry receives technical details about the crash (device/OS info, app version, a stack trace) but the app explicitly disables sending any personal data alongside that (sendDefaultPii = false) - it is not used to identify you or track your activity. See Sentry’s privacy policy for how they handle data on our behalf. Crash reporting is disabled entirely in development builds.

11. Security

All traffic between the app and our backend is encrypted (HTTPS/TLS). Cross-household data isolation is enforced by row-level security policies, not just by app-level checks. Sign-in is passwordless (magic link), so there’s no password for us to store or for you to reuse elsewhere.

12. Changes to This Policy

If this policy changes in a material way, the “Effective date” above will be updated and an in-app notice will be shown the next time you open the app. If a change materially affects your rights (e.g. a new third-party processor, a new data type collected), we’ll also email the address on your account rather than relying on the in-app notice alone.

13. Contact

Questions about this policy, or requests regarding your data, can be sent to: official.interactivepie@gmail.com