Privacy Policy

Effective October 2026 · Updated to add Family chat, ad measurement on our website, and Apple’s anonymous count of installs from our ads

Chore Lock is a family app, and much of what it touches belongs to kids. So we hold ourselves to a simple standard: collect as little as we can, protect what we collect, and never make money from your family's data. This page explains, in plain English, exactly what we store, who touches it, and what you can do about it.

Who we are and what this covers

Chore Lock is made and operated by ACED LLC, a Missouri limited liability company, at 1911 S National Ave, Suite 104, Springfield, MO 65804, United States, phone (417) 425-1395. If you have any question about this policy or your data, email support@getchorelock.com. A real person reads it.

This policy covers the Chore Lock app for iPhone, iPad, and Apple Watch, its home-screen widgets, and the getchorelock.com website, including the free School Calendar Finder.

How signing in works

• Parents sign in with Apple. That's the only way to create a Chore Lock account. There is no Chore Lock password to invent or forget. Apple gives us a stable account identifier and, if you allow it, your name and email address. If you choose Apple's Hide My Email, we only ever see the relay address Apple creates, never your real one. Your sign-in record is held by Firebase Authentication, the sign-in service we use from Google. Apple also hands us a sign-in token for your account, which we keep only on our servers, never on any device, for one purpose: so we can tell Apple to disconnect Chore Lock from your Apple account when you delete your account.
• Kids never make an account. There is no kid sign-up, no kid email address, and no kid password. A parent pairs each kid's device with a short code from the parent app. The device then holds an anonymous credential that only means "this device belongs to this kid in this household." It carries no name, no email, and nothing that identifies your child outside your own family.
• Co-parents and guest caregivers join the same way a parent does: Sign in with Apple, plus an invite from a parent in your household.

What we collect

Everything below exists to make Chore Lock work for your family. We don't collect anything from the app for advertising, and we don't buy data about you from anyone. The one place advertising comes into it is our website's ad page, with your permission, described in This website.

About parents and other adults

• Your Apple sign-in details: the identifier Apple assigns, and your name and email if you shared them at sign-in.
• Your household: its name, its time zone, and the settings you choose (schedules, always-free apps, school hours, Sleep Time, rollover and streak rules, quiet hours, notification preferences, the AI strictness setting, and whether the family leaderboard is on).
• Adult names and roles: the name you give each adult in the household and whether they're a parent or a guest caregiver.
• Your parent PIN, which stays on your own phone. It is never sent to us.
• Subscription status: which plan your household is on and when it renews or lapses, as reported to us by Apple. We never see your payment details.

When we ask an adult to confirm their birth year during setup, the answer stays on that phone as a simple "confirmed" flag. We don't store a parent's birth year on our servers.

About kids

• First name and birth year. The first name labels their chores. The birth year picks the kid-mode experience for their age and, on paid plans, gives the AI photo check a coarse age bracket (see below). We don't ask for a last name, an exact birthday, a school name, or a photo of your child's face.
• Their profile: the emoji and color they picked for their avatar, their kid-mode level, and their current streak.
• Chores and history: the chores assigned to them, what they claimed, submitted, and completed, who approved or sent back each one and when, and any notes an adult wrote.
• Proof photos: the photos a kid takes inside the app to show a chore is done, kept for 7 days as described below.
• Time and rewards: minutes earned and used, requests for more time, Chore Bucks balances, what they bought from your family's Market, grounding periods, and Family Jackpot contributions.
• Family chat, only if a parent turns it on: the messages and quick replies they send, the messages they receive, and any request to delete one of their own messages. Each message is kept for 30 days, as described in Family chat.

About kid devices

A paired kid device checks in with our servers regularly so the parent dashboard can be honest about whether protection is working. Each check-in records: when the device was last seen, whether Apple's Screen Time permission is still granted, whether an app selection is configured, whether monitoring is running, what the device currently has locked, the Chore Lock version installed, whether notifications are allowed, whether a grown-up PIN exists on the device, whether Apple's Communication Safety is switched on, and a count and fingerprint of the app lists so we can tell a parent if the lists changed. We do not record the device's name or model. We never record which apps are on the device or which apps your child opens (see "Screen time" below).

We also store the anonymous notification token Apple issues for each phone, watch, or iPad, so we can deliver push notifications to the right device.

Reference photos parents add

On paid plans a parent can add up to two "this is what done looks like" photos to a chore, chosen from the parent's own photo library. They're processed with the same hygiene as proof photos (hidden camera data stripped, downscaled) and stored with the chore. They are kept until you remove them, delete the chore, or delete the household. They're not on the 7-day schedule because they're yours, not your child's.

How we use it

We use your family's data to run Chore Lock: showing chores, approving them, paying out minutes and Chore Bucks, locking and unlocking apps on the schedule you set, sending the notifications you asked for, delivering your family's chat messages if you've turned Family chat on, keeping the parent dashboard truthful, and running the AI photo check on paid plans. We also use it to keep the service safe (for example, to stop someone from reaching another family's data), to answer your support emails and any message you report to us, and to count how many families use the app. That's the whole list. We don't use it for advertising, and we don't build profiles of your children.

The AI photo check

On Premium Solo and Premium Family, including during the free trial of Premium Family, a chore photo can be checked automatically so your kid's minutes land right away instead of waiting for you. This is the one place a photo goes beyond our own servers, so here is exactly what happens.

• When it runs. Only for chores that need a photo, only on paid plans, and only after the on-device check described below has allowed the photo and it has reached our servers. On the free plan it never runs.
• What is sent. The proof photo, any reference photos you added to that chore, the chore's title, your household's strictness setting (Lenient, Balanced, or Strict), and a coarse age bracket worked out from your child's birth year: "under 6", "6–9", "10–12", or "teen". That's the entire request.
• What is not sent. Your child's name, your name, your email, your household name, any account or device identifier, and your location. The check sees a picture and a chore title, nothing more. One thing to know: the chore title is whatever you typed. If you put your child's name in a title, that name travels with the photo. Keep titles generic if you'd rather it didn't.
• Who processes it. Anthropic, PBC, through its Claude API, under our own commercial account and our own key. A fast model looks first; if it isn't confident, a second, more capable model takes a look. We tell the model that the photo is untrusted content and that any text or instructions visible in the picture are scenery to judge, never commands to follow.
• What comes back. One of two answers: "pass" or "unsure". The AI can never reject a chore. A "pass" auto-approves the chore and pays the reward; an "unsure" sends the chore to a parent for review, exactly as it would have gone without AI. We record the verdict on the chore's history. No description of the photo, and nothing else from the provider, is stored.
• You can take it back. A parent has 24 hours to overturn any automatic approval and send the chore back for a redo. Once you've overturned one, the AI leaves that chore alone and it goes to you from then on.
• How long each side keeps it. On our side, the photo follows the 7-day rule below whether or not the AI looked at it. On Anthropic's side, what we send is never used to train Anthropic's models, and it is deleted within 30 days. One exception, in their published terms: if their automated safety systems flag something as breaking their rules, they can keep it for up to two years, and the score behind that flag for up to seven.
• How to turn it off. AI photo checks are part of the paid plans. If you'd rather a person reviewed every photo, turn AI photo checks off in Household Settings, or stay on the free plan, where they never run. The strictness setting lives in the same place.
• If it can't run. If the AI service is unavailable, or a household sends an unusually large number of photos in one month (our fair-use ceiling is currently 2,500 checks per household per month), photos simply go to a parent for review. Nothing is ever blocked.
• We don't train on your family. We do not use your family's photos or chores to train AI models of our own, and we don't let anyone else do so.

Chore photos and how long we keep them

The one exception: if the law requires us to preserve a specific file (for example, a legal preservation request, or our duty as an online service to report suspected child sexual abuse material to the National Center for Missing & Exploited Children), we preserve only what we're required to preserve, for only as long as the law requires.

Before a photo ever leaves your kid's device

• People are blocked. If the camera sees a person in the frame, the photo is not uploaded. Your kid gets a friendly "try again without anyone in the picture." Where Apple's operating system offers it, the device also screens for sensitive content the same way.
• Nothing is recorded about that check. The result stays on the device. It is never sent to us, never shown to a parent, never counted, and never logged. A blocked photo is never stored anywhere, and your kid is never penalized. It's a free retake.
• Hidden camera data is stripped. Photos are downscaled and re-encoded from scratch before upload, which drops GPS coordinates, device details, and every other hidden tag a camera writes into a file. Chore Lock never trusts a photo's own timestamp; the app stamps the time itself.
• Camera only, never the camera roll. Proof photos must be taken inside the app, so nothing else in your child's photo library is ever involved.
• No face recognition. We never run face recognition and never create face signatures, on the device or on our servers.

Family chat

• Who's in it. The parents and kids in your household. Kids can message their parents, and in the Family chat everyone in the family can talk together. Private chats between two kids are off unless a parent turns them on, and only Big Kids can use them. Little Kids can only message their parents, using picture replies and emoji. Guest caregivers can't see chat. No one outside your household can join, find, or read it. Nothing in Family chat is ever public.
• What we store. Each message, who sent it, which chat it's in, when it was sent, and which messages each person has read. We also store a kid's requests to delete one of their own messages, the short notes Chore Lock posts in the Family chat (like “Leo finished everything today”), the name each parent chooses for kids to see (like “Mom”), and a record of which parent turned chat on and when. A message holds whatever its sender types. We never ask a child for more, and parents can read and delete everything, which is part of why chat exists the way it does. Where state law requires a parent's OK through the App Store before a child can use chat (as in Texas), we also store whether Apple has reported that OK for your child's device and, once you approve, the App Store ID of that install, so we can close chat if you withdraw your OK; we keep these only while Family chat is on.
• Why 30 days. Family chat is for keeping your family in touch, especially while other apps are locked. We keep each message for 30 days so a parent who was busy or away has a real window to read what was said and notice anything worrying. We don't keep it longer, because nothing in a family chat needs to last longer and the less we keep, the less there is to lose. After 30 days, each message is deleted automatically, along with its preview and any delete request about it. Our cleanup runs every hour. A parent can delete any message sooner, and turning Family chat off deletes all of your family's messages right away.
• Notifications. To deliver a message, we send its text in a notification through Google's Firebase Cloud Messaging and Apple's notification service, so it can appear on the recipient's lock screen unless their phone is set to hide previews. If a notification can't be delivered within about a day, it's dropped. When a parent deletes a message, Chore Lock also tries to remove the notification it sent, but someone may have already seen it.
• Kids can ask to remove what they sent. A kid can press and hold one of their own messages and tap “Ask a parent to delete this.” Other kids stop seeing it right away, and a parent decides whether to delete it now. Either way, it's gone within 30 days of when it was sent. Removing a message can't undo a notification someone already read.
• Who at Chore Lock can read messages. No one, in the normal course of running the service. Messages are encrypted in transit and at rest, but they are not end-to-end encrypted, so our systems can technically reach them. A person at ACED LLC opens a message only to deal with a message you report to us, or when the law requires it (see “Who we share with”), and we keep a record when we do. Messages are never used for advertising, never sent to an AI service, and never used to train AI.
• Reporting a message to us. A parent can report any message to Chore Lock from the chat. We keep a copy of that message, your note, and the details we need to act on it, we act within 24 hours, and we delete the report 90 days after we've closed it.
• Legal holds. If the law requires us to preserve specific messages (for example, a legal preservation request, or our duty to report suspected child exploitation to the National Center for Missing & Exploited Children), we preserve only those messages, and only for as long as the law requires.

How long we keep your child's information

• Chore proof photos: 7 days from submission, then deleted automatically. Purpose: so a parent can check a chore.
• Family chat messages, their previews, read markers, and kids' delete requests: 30 days from when the message was sent (a read marker, 30 days from when it was last updated), then deleted automatically. Purpose: keeping your family in touch, with time for a parent to read what was said.
• Messages you report to us: 90 days after we close the report. Purpose: acting on the report.
• First name, birth year, avatar, chores, chore history, minutes, and Chore Bucks: for as long as the kid's profile exists in your household, because the app needs them to work and to show you your kid's history. Deleted when you delete the kid or the household.
• Device credential and check-ins: until the device is unpaired or the household is deleted.
• Anything under a legal hold: only as long as the law requires, then deleted on the normal schedule.

Screen time: what stays on your kid's device

The locking is done by Apple's own parental-control technology, the system behind Screen Time, running on your kid's device. That matters for privacy: which apps your child opens, and for how long, stays on their device. When you pick which apps are earnable or always free, Apple hands the app anonymous tokens, so Chore Lock cannot see which apps you chose, and neither can we. Usage is metered on the device; what reaches our servers is the bookkeeping you'd expect: minutes earned, minutes used, and whether the device is currently locked.

We never collect your child's location, contacts, or browsing history, and we never see messages they send in other apps or anything they type outside Chore Lock. Messages sent in Chore Lock's own Family chat are covered in Family chat.

Widgets and Apple Watch

Home-screen widgets read a small snapshot the app writes on the same device (today's chores, the time ring, the next lock). That snapshot never leaves the device. The parent Apple Watch app receives what you'd see on your phone, including a proof photo you're about to approve, directly from your own iPhone.

School calendars

On paid plans, a parent can connect a kid's school calendar by giving us the school's public subscribe link, or by pasting a school web page so Chore Lock can find the link. Our servers then fetch that feed on a schedule. We store the link, when we last fetched it and whether that worked, and only the handful of items that can affect a school-hours lock: days off, half days, and delayed starts, together with the school's own wording so you can see why we flagged a day. Everything else in the feed is discarded. The calendar is public information published by the school. A connected calendar can only ever relax a lock, never add one, and you confirm the dates yourself.

Subscriptions and payments

All billing runs through Apple and your App Store account. We never see or store your card, your billing address, or your Apple Account details. Apple tells us that a household's subscription is active, renewed, refunded, or lapsed, and we store that status so the app knows which features to unlock.

Children's privacy

Chore Lock is built for families and is operated by parents from start to finish. A parent creates the household, adds each kid, pairs each device, decides what gets locked, and can see and delete everything a kid's profile contains. Children cannot create accounts, cannot sign up, and cannot give us information a parent hasn't set up for them. Chore Lock is a parenting tool, but its kid side is made for children to use, so we treat everything a child does in Chore Lock as covered by the U.S. Children's Online Privacy Protection Act (COPPA).

What we collect from a child. Once a parent adds a child and pairs their device, the child's use of the app creates: proof photos (kept 7 days), chore claims and completions, requests for more time, and the anonymous device credential and check-ins described above. If a parent turns on Family chat, it also creates the child's chat messages and quick replies, who they went to and when, and any request to delete one of their messages (all kept 30 days). The parent supplies the child's first name and birth year. That's the complete list. We collect no more than we need to run the app, and we never ask a child for anything else, including a last name, address, phone number, email, location, contacts, or browsing history. A child can type anything into a chat message; that's one reason chat stays inside your household, parents can read and delete every message, and messages delete themselves after 30 days.

How we get consent. Under COPPA, the parent is the account holder and the person who directs every piece of collection about a child. By adding a child to your household, you confirm that you are that child's parent or legal guardian and you consent to the collection, use, and handling described in this policy, including the AI photo check on paid plans. Family chat needs a separate, extra step: it stays off until a parent reads how it works on its own screen in the app and turns it on, and private chats between kids need a second switch with its own explanation. We record which parent said yes and when. Either can be turned off at any time. We use children's information only to operate Chore Lock for your family. A child's chat messages go only to the people in that chat in your household, and to the service providers named below, who may use them only to provide their service to us. We never disclose a child's information to anyone else, never sell it, and never use it for advertising.

How to reach us about your child. ACED LLC, 1911 S National Ave, Suite 104, Springfield, MO 65804, United States; phone (417) 425-1395; email support@getchorelock.com.

Your rights as a parent. At any time you can review what we hold about your child (it's all visible in the app, including every chat message your child sent or received in the last 30 days), correct it, delete any of it, or delete all of it. Deleting a kid's profile removes their data; deleting the household removes everything. You can also refuse any further collection by unpairing the device, deleting the profile, or turning Family chat off, which deletes your family's messages. If you'd rather we did any of this, or you want a copy of your child's data, email support@getchorelock.com from the address on your account and we'll take care of it. We'll confirm you're the parent on the account before we act.

Who we share with

We don't sell your data, and we don't share your family's data with anyone who wants it for their own purposes. The only companies that touch your family's data are the ones that run the service for us, under contract, on our instructions:

• Google (Firebase and Google Cloud): our database, file storage, sign-in, push-notification delivery (which carries the text of chat messages to your family's devices), and the servers our code runs on. This is where your household's data lives, in Google's data centers in the United States.
• Apple: Sign in with Apple, push notifications (including the text of chat messages), App Store billing, and, where state law requires it, age-range and parental-consent checks through the App Store.
• Anthropic: the AI photo check described above, on paid plans only, and only when the check is on.

One more company is different, and it never touches family or app data: Meta Platforms, Inc. (Facebook and Instagram). If you tap Allow on our website's ad page, getchorelock.com/go, Meta's pixel on that page sends your visit and App Store taps to Meta, which uses them for its own purposes under its own policy, not only on our instructions. Nothing from the app or your household is involved. The details and your choices are in This website.

We may also disclose information if the law requires it (for example, a valid subpoena or court order), to comply with a legal duty to report, or to protect someone's safety. We give the content of chat messages to law enforcement only with a search warrant, or where the law otherwise allows it, such as an emergency involving danger of death or serious injury, or a report to the National Center for Missing & Exploited Children. We'll tell you unless the law forbids it. If Chore Lock is ever sold or merged, your data would move with it under this same policy, and we'd tell you first.

What we never do

• No ads in the app. Not on the free plan, not on any plan.
• No third-party trackers or analytics in the app. No ad networks, no data brokers, no analytics companies, no crash-reporting companies inside the app. The only code from outside our company that runs in the app is Apple's and the Firebase libraries we need to talk to our own servers. Our own simple counters (how many chores got done, how many families signed up) run on our own servers. The only third-party measurement anywhere is Meta's pixel on our website's ad page, and it runs only if you say yes there (see This website). Separately, Apple's own private ad measurement can count installs that came from our ads, without identifying anyone (see Counting installs from our ads).
• No face recognition. Ever.
• No reading your family's messages. Family chat is for your family. We don't read it, mine it, advertise with it, or send it to AI. The only exceptions are a message you report to us and what the law requires.
• No selling, renting, or "sharing" of your family's data for anyone else's marketing. Not yours, and especially not your kids'. (Allowing ad measurement on our website shares your visit to that one page with Meta, as described below. That is your call, and it never includes anything from the app or about your family.)

This website

getchorelock.com runs no analytics service and sets no cookies of its own. We keep our own simple counters so we can tell how much interest the site is getting: how many times each page was viewed each day, split by broad source (for example, came from Facebook or from a search engine), by device type (phone, tablet, or computer), and by hour, plus how many times our App Store links were tapped. Those are running totals only. They don't record who you are, your IP address, the exact page you came from, or your browser details, and they store nothing on your device. They run whether or not you allow the ad measurement described next.

Ad measurement on our ad page, only if you say yes

We advertise Chore Lock on Facebook and Instagram, and we'd like to know whether those ads actually bring people to the App Store. For that, one page on this site, getchorelock.com/go, can use the Meta pixel, a small piece of code from Meta Platforms, Inc. It does nothing until you tap Allow on the question that page shows. If you tap No thanks, close the question, or never answer, nothing from Meta loads and no Meta cookie is set. The rest of this site, the pages for signed-in households, the School Calendar Finder, and the app itself never use it.

What Meta receives if you allow it. Your browser then talks directly to Meta's servers, and Meta receives: that you viewed the ad page, and whether you tapped an App Store button on it (we label which one: the top button, the bottom badge, or the sticky bar on phones); the page's address, including any ad-click identifier Meta added to the link you tapped to get there; the page you came from; your IP address and details about your browser and device, such as the browser type, screen size, and language; and cookies. Meta sets two cookies in your browser for this site, _fbp and _fbc, and if you are signed in to Facebook or Instagram in the same browser, your browser also sends Meta's own cookies, so Meta can connect your visit to your Facebook or Instagram account. You are not anonymous to Meta. Meta uses what it receives under its own privacy policy, including to measure and improve ads. What we get back is totals: how many visits and App Store taps our ads produced, never who you are. We don't send Meta your name, email address, or phone number, and nothing about your family or your use of the app ever reaches Meta.

Your choices. Your answer is kept in your browser's local storage (not a cookie) until you change it or clear your browsing data. You can change it any time: on the ad page, tap Ad measurement choices in the footer, or use the control just below. Choosing “Don't allow” stops the pixel right away and removes the two Meta cookies it set for this site; what Meta already received stays with Meta under its own policy. If your browser sends the Global Privacy Control signal, we treat that as a no and don't ask. You can also block or delete cookies in your browser's settings, and Meta's ad preferences let you limit how Meta uses your activity from other websites and apps.

Counting installs from our ads, done by Apple

When we run an ad for Chore Lock that leads to the App Store, we'd like to know how many installs it brought in. For that, the app uses Apple's built-in private ad measurement (Apple calls it SKAdNetwork and AdAttributionKit). The first time the app opens, it tells Apple's system on your device that the app was opened, and nothing else. If you tapped or saw one of our ads before installing, Apple itself later tells that ad network, such as Meta, that an install came from that ad campaign. Apple delays that report and sends it without your name, your email, your device's advertising identifier, or anything else that identifies you or your family, so neither we nor the ad network can tell who installed. If no ad led to your install, nothing is sent. The app contains no code from Meta or any ad network, never asks to track you, and never sends anything about your family or how you use the app to anyone for advertising.

If you joined our pre-launch waitlist, we stored your email address and the date you signed up, for one purpose: telling you when Chore Lock launched. We don't share it, and we'll delete it on request; just write to support@getchorelock.com.

Our free School Calendar Finder searches public government school directories. To keep it healthy we apply a daily lookup limit per visitor. That works by storing a scrambled version of your IP address (a salted hash we can't turn back into the address) alongside the date and a count, nothing else. That record is marked to expire 7 days later and is then deleted. We never store the school you searched for alongside it. When you use the finder from inside the app, the same daily limit applies to your account instead of your address.

Your choices and your rights

Most of what you'd want to do, you can do yourself in the app: see and change your kids' profiles, chores, and every household setting; delete any photo; read or delete any chat message; turn private chats between kids on or off; turn Family chat off; turn notifications on or off by type (except tamper alerts, which stay on, because a parental-control app that can go quiet isn't one); turn AI photo checks off; unpair a device; remove an adult; delete a kid; and delete the whole household.

For anything else, email support@getchorelock.com. Whether or not a particular law applies to you, we'll honor these requests from anyone: tell you what we hold about your family, give you a copy, correct it, delete it, or stop a particular use. We'll verify that you're the parent on the account first, we won't charge you, and we won't treat you differently for asking. We aim to answer within 30 days.

California and other U.S. states. We do not sell personal information. We do not share your family's or the app's personal information for cross-context behavioral advertising. There is one exception, and it is on our website only: if you tap Allow on getchorelock.com/go, Meta's pixel on that page sends your visit and App Store taps to Meta, which California law counts as “sharing” for cross-context behavioral advertising. It happens only on that page and only with your opt-in. To opt out, tap Ad measurement choices in that page's footer, use the control in This website, or turn on the Global Privacy Control signal in your browser, which we honor as an opt-out. We do not use or disclose sensitive personal information for anything beyond running the service, and we have no financial-incentive programs. We knowingly sell or share no personal information of anyone under 16: the ad page is for parents, and nothing from a child's use of the app is ever shared. Rights to know, access, correct, delete, and to be free from retaliation apply as described above, and you can use an authorized agent by having them email us with your written permission.

European Economic Area, United Kingdom, and Switzerland. Chore Lock is built and operated in the United States for families in the United States. If you use it from the EEA, the UK, or Switzerland, this is where we stand. ACED LLC is the controller. We process your family's data to provide the service you signed up for (performance of a contract), to keep it secure and prevent abuse (our legitimate interests), and, for the optional AI photo check and for a child's data, on the basis of the parent's consent, which the parent can withdraw at any time by turning the feature off or deleting the data. Ad measurement on our website's ad page rests on your consent too, given when you tap Allow there, and you can withdraw it at any time as described in This website. Your data is stored and processed in the United States by the providers named above; we rely on the safeguards in their data-processing terms, including the European Commission's standard contractual clauses. You have the rights to access, correct, erase, restrict, port, and object, and to complain to your local data-protection authority. We don't currently have a representative in the EU or the UK. Email us and we'll help.

Deleting your account

You can delete everything from inside the app: Settings → Account & PIN → Delete household & account. It is a real delete, not a hide. When you use it we remove your household and everything under it: every kid profile, every chore and its history, every photo submission, the time and Chore Bucks ledgers, requests, every chat message and chat setting, lock instructions, device records, notification tokens, and every adult and kid-device session, together with the stored photo files themselves, any unused invite or pairing codes, your household's subscription record, and the sign-in accounts of everyone in the household: yours, any co-parent's or guest's, and each paired kid device's. We also tell Apple to disconnect Chore Lock from each adult's Apple account, so it no longer appears under Sign in with Apple in your Apple ID settings, and we discard the sign-in token that let us do that. Deleting your household also signs out and cuts off every paired device.

Three honest caveats. Cancelling your subscription is separate and happens in your Apple account settings; deleting your data doesn't cancel a subscription, and Apple handles any refund. Copies in our database provider's encrypted backups expire on their own schedule shortly afterwards rather than in the same instant. And if an adult in your household first signed in before we began keeping the Apple sign-in token described above, we have nothing to hand Apple for that sign-in, so Chore Lock may stay listed under Sign in with Apple in that person's Apple ID settings until they remove it there themselves (Settings → your name → Sign in with Apple); their account with us is still fully deleted either way.

If you'd rather we did it, or you want confirmation it's gone, email support@getchorelock.com.

Keeping it safe

Your family's data is encrypted in transit and at rest. Access is enforced household by household on our servers, so one family's data can't be reached from another family's account. Photo uploads are accepted only from a paired kid device or a parent in that household, only as images, and can only be deleted from within the household that owns them. Kid devices can never change chores, reward amounts, or settings. Your household's plan is set on our servers from what Apple reports, never by the app itself, so a plan can't be faked. No system is perfect, but we treat kids' data as the most sensitive thing we hold, and we build like it. If we ever learn of a breach affecting your family's data, we'll tell you, and any regulator the law requires, without undue delay.

Where your data lives

Our servers and storage are in the United States, run by Google. Anthropic processes AI photo checks in the United States. Apple processes sign-in, notifications, and billing wherever Apple operates. If you use Chore Lock from outside the U.S., your family's data is transferred to and handled in the U.S. under this policy.

Changes to this policy

If we change how we handle your data, we'll update this page and change the date at the top. For a meaningful change, anything that affects what we collect about your family or how it's used, we'll tell you in the app before it takes effect, and where the law requires it we'll ask for your consent again.

Contact

Questions, requests, or worries about privacy: support@getchorelock.com, call (417) 425-1395, or write to ACED LLC, 1911 S National Ave, Suite 104, Springfield, MO 65804, United States.