Privacy Policy

Last updated: 7 May 2026

TaskAdoodles is a family task app built for parents and children. We take privacy seriously, especially for kids. This page explains what we collect, why, who we share it with, and the rights you have over your data.

This policy applies to the TaskAdoodles iOS app, the TaskAdoodles Android app, the website at taskadoodles.com, and all related services. The data controller is the operator of TaskAdoodles, contactable at info@taskadoodles.com.

1. The short version

• We collect the minimum data needed to run the app.
• Children's data is never sold, never shared with advertisers, and never used to train AI.
• Photos kids upload as task proof are private to the family, encrypted in transit and at rest, and deleted when a task is approved.
• You can delete your account and all associated data at any time from Settings → Account → Delete Account, or by emailing us.
• Parents are responsible for setting up their child's account and managing it on their behalf.

2. What we collect

From parents

• Name and email address (for sign-in and account recovery)
• An encrypted password
• Subscription status, if you subscribe (handled by Apple — we do not see your card details)
• Support correspondence, if you contact us
• Optional: a profile photo or avatar

From children (set up by a parent)

• First name (or nickname) chosen by the parent
• Date of birth or age, used to tailor the experience
• An app PIN chosen by the parent
• Photos the child voluntarily uploads as task-completion proof
• Avatar customisation choices and in-app progress (XP, levels, points)

Automatically

• Device type, operating system version, and app version (for compatibility and crash diagnostics)
• Anonymised crash and error reports (via Sentry) — these do not include personal content
• A push notification token (Apple Push Notification service on iOS, or Firebase Cloud Messaging on Android), only if you allow notifications, used to send task reminders and approval alerts

From the website

If you join the waitlist, we collect your email address only. The site loads Google Fonts from Google's servers; this exposes your IP address to Google. We do not use analytics, advertising trackers, or third-party cookies on the website.

3. How we use it

• To run the app: create accounts, save tasks, sync between parent and child devices, deliver push notifications, and process subscriptions.
• To keep things working: diagnose crashes, fix bugs, improve reliability.
• To support you: respond to your messages, send essential service emails (password reset, subscription receipts).
• To meet legal requirements: comply with tax, accounting, and any lawful request from authorities.

We do not use your data for advertising, profiling, or AI model training. We do not sell your data.

4. Who we share it with

We use a small number of trusted service providers to run the app. They process data on our behalf and only for the purposes described here:

• Supabase — database, authentication, and encrypted file storage. Hosted in the United States.
• Brevo — transactional email (password resets, subscription confirmations). Hosted in the European Union (France).
• Sentry — anonymised crash and error diagnostics. Hosted in the United States.
• Apple Push Notification service — delivers notifications to iOS devices. Operated by Apple Inc.
• Firebase Cloud Messaging — delivers notifications to Android devices. Operated by Google LLC.
• Apple App Store / StoreKit and Google Play Billing — handle all in-app purchases and subscriptions. We never see your payment card details.

We do not share data with advertisers, data brokers, or social media platforms.

5. Children's privacy

TaskAdoodles is designed for use by children under the supervision of a parent. We comply with the UK Age Appropriate Design Code, the GDPR's child-protection provisions, and the United States Children's Online Privacy Protection Act (COPPA).

• A child account can only be created by a parent who has accepted this policy.
• The parent controls what the child shares — including whether photo proof is required for a task.
• We collect only the minimum data needed for the app to work, and never use children's data for advertising or AI training.
• Children cannot make in-app purchases or share data with users outside their family without an invitation accepted by the parent.
• Friend connections between families are confirmed by an invitation code, not by open search. Children cannot be discovered by strangers.
• A parent can delete a child's account, photos, and history at any time from Settings.

6. How long we keep data

• Account data: kept while your account is active. Deleted within 30 days of account deletion.
• Task photos: deleted automatically when a parent approves a task. Pending photos are kept until reviewed.
• Crash reports: 90 days (Sentry default).
• Email logs (delivery records): 90 days (Brevo default).
• Backups: rolling 30 days.

7. Your rights

You can:

• Access the personal data we hold about you
• Correct it if it is wrong
• Delete your account and all associated data (Settings → Account → Delete Account)
• Export your data (email us and we'll send it to you within 30 days)
• Withdraw consent for optional processing (e.g. push notifications) at any time
• Object to processing or restrict it where the law allows
• Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority

To exercise any of these rights, email info@taskadoodles.com. We respond within 30 days.

8. Security

Data is encrypted in transit (TLS) and at rest. Passwords are hashed with industry-standard algorithms — we never see them. Photos are stored in private buckets accessible only to authenticated members of the family. Parents sign in with an email address and password; children sign in with a username and PIN chosen by their parent.

9. International transfers

TaskAdoodles is operated from the United Kingdom. Some of our service providers (Supabase, Sentry) are based in the United States. Where personal data is transferred outside the UK or EU, we rely on the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or another lawful transfer mechanism.

10. Changes to this policy

If we change this policy, we'll update the date at the top and, if the changes are significant, notify you in the app or by email before they take effect.

11. Contact

For any privacy question, request, or complaint, email info@taskadoodles.com.