Privacy Policy

Last updated: [date] — Placeholder text. Not reviewed by a lawyer.

1. Introduction

This Privacy Policy explains what information TaskMaster ("the Service") collects, how it's used, and the choices you have. It should be read alongside our Terms & Conditions.

2. Information We Collect

When you create an account, we collect your name and email address. When you set up a Family, we store the display name, avatar, and age range you provide for each profile in that Family. When you use the Service, we store the tasks, rewards, completions, and points activity you and your Family or Group members create. We do not require or collect payment information.

3. How We Use Your Information

We use your information to operate the Service — creating and authenticating your account, displaying your Families and Groups, sending account-related emails (confirmation, password reset, invitations), and providing customer support when you submit a ticket.

4. Third-Party Services

We use the following third-party services to operate the Service:

  • Supabase — database, authentication, and storage of all account and application data.
  • Resend — delivery of transactional emails (confirmations, password resets, invitations).
  • Cloudflare Turnstile — bot protection on signup.
  • Vercel — application hosting.

Each of these providers processes data on our behalf under their own privacy and security practices.

5. Children's Privacy

Kid profiles are not independent accounts. A child does not sign up, log in, or provide any information directly to us — their profile (display name, avatar, age range) is created and managed entirely by the parent or legal guardian who owns the Family. We do not knowingly collect personal information directly from children. A PIN used to switch to a kid profile is a device-level convenience lock, not an authentication credential tied to the child.

6. Data Retention & Deletion

We retain your data for as long as your account, Family, or Group is active. Deleting a Family or Group permanently removes its tasks, rewards, history, and member records, and cannot be undone. You may request deletion of your account by contacting us.

7. Cookies

We use essential cookies to keep you signed in and to remember which profile is active on a shared device. We do not use cookies for advertising or cross-site tracking.

8. Your Rights & Choices

You can access, update, or delete most of your information directly within the Service. For anything you can't change yourself — including a full account deletion request — contact us using the details below.

9. Security

We rely on Supabase's infrastructure and access controls (including Row Level Security policies) to protect your data. No method of storage or transmission is completely secure, and we can't guarantee absolute security.

10. Changes to This Policy

We may update this policy from time to time. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Contact [your contact info].

Back to signup