Privacy
What you share stays private.
SharedChores gives the people you share life with a private place to share the load. We use only what’s needed to keep that group in sync, protect the service, and deliver the choices you make. We don’t sell your information, track you across other companies’ apps or websites, or build advertising profiles.
What SharedChores collects
Information comes from you, other people in your private group, the app and device you use, and Apple or Cloudflare when they provide the services described below.
Account, names, and group content
Adult accounts use Sign in with Apple. SharedChores asks Apple for your full name so the app can suggest a display name; you can change it before setup. Account creation also shows a separate, unchecked choice to receive occasional setup tips and SharedChores Plus offers. Only when you turn that choice on does the app request Apple’s email scope. Choosing no—or leaving the choice off—does not affect account creation or subscription access.
If you choose those emails and Apple includes an email address in its verified identity token, SharedChores keeps that Apple-provided address, which may be a Hide My Email relay address. We do not ask you to replace a relay address with a personal address, and we do not trust or store an email typed into an app request. The address is encrypted as a protected system field, a keyed one-way lookup is kept to prevent duplicate handling, and we record the consent version, time, and source. Marketing-email delivery is currently disabled: no marketing delivery provider is connected and no promotional emails are being sent. Enabling delivery later requires a compliant provider, privacy and legal review, sender authentication, and working unsubscribe, bounce, complaint, and deletion handling.
We keep the display names, child nicknames, built-in avatar choices, group name, invitation labels, and settings your group chooses. Group content includes chore and challenge titles, optional rewards, assignments, due times, review choices, routines, progress, Chore Points, private Leaderboard standings, recaps, and shared history. The group’s confirmed time zone keeps due dates, routines, and recaps on time without Location permission.
Optional completion photos
When you mark a chore done, you may add one still photo for your private group to review. A photo is optional and is never treated as automatic proof that a chore was completed correctly. SharedChores receives only the photo you take or select. The app re-creates it as a smaller JPEG and removes location and other source metadata before upload. It does not request broad access to your photo library, and it does not collect video or audio.
Completion photos are linked to the group, chore, and member who uploaded them. Authorized group members can view or report them; adults and the member who uploaded a photo can remove it. Reporting closes photo access immediately. For up to 30 days, we keep only the internal group, chore, photo, and reporting-member references, the selected report category, and the report time needed for bounded safety and abuse review; this report record does not contain the photo. Photos are encrypted before private Cloudflare R2 storage, have no public link, do not appear in notifications or public sharing, and automatically expire after 90 days. When an Apple Sensitive Content Warning or Communication Safety setting requests it, the device checks the selected or downloaded photo locally and may keep it hidden while the member decides what to do; the check result is not sent to SharedChores. We do not use photo content for advertising, analytics, facial recognition, identity or location inference, or automated decisions about whether a chore was done.
Account, device, notification, and security information
SharedChores uses a protected Sign in with Apple account identifier and random internal user, group, member, installation, device, and app-account identifiers. We also keep the device-integrity key and security binding needed for Apple App Attest, session and access-protection records, and notification tokens and settings. These details help keep the right people connected, block unwanted access, and deliver the notifications you choose.
Purchases
To connect a verified purchase to the right account or group and make the right SharedChores Plus features available, we keep a random app-account token, the Apple product and original-transaction linkage, entitlement state, and relevant expiration, grace-period, billing-retry, or revocation state. We do not receive your payment-card number.
Your onboarding choices
During adult setup, you can choose answers about the number of people sharing chores, what feels difficult, how you handle chores now, what you want to improve, chore areas, a preferred rhythm, motivation, and when you want to start. Every question is optional. These choices help shape your setup.
A separate Help make SharedChores better choice starts off. If you turn it on, the app automatically sends only these predefined choices to SharedChores so the app’s creator can learn what people need and improve the app. It does not send names, chore details, free-form text, or answers from child accounts. This is separate from optional email updates, and neither sharing nor declining changes the price or your subscription access.
The latest shared response is encrypted and linked internally to your adult account so you can remove it. The creator’s restricted admin area shows answer counts and recent choices without names, emails, or account identifiers. We keep a response for up to 365 days after its last update. Turn off sharing in the app’s privacy choices to remove it immediately; account deletion also removes it. We do not send these answers to advertising services, notifications, ordinary logs, or our aggregate feature-use event stream.
Use, reliability, and network information
To learn whether SharedChores is working well, we use a small, fixed set of feature-use events and receive crash or performance diagnostics through Apple when Apple makes them available. These reports do not include group-written text, child or member identifiers, Chore Point totals, or Leaderboard ranks.
Limited operational records can include the request time, route type, request identifier, method and status, response time, app environment or version, a safe error category, and a pseudonymous security reference when needed. Apple and Cloudflare also process the network information required to connect you, such as an IP address and requested host or path. SharedChores does not keep an IP address as a product-analytics profile.
How information is used
- Confirm sign-in and keep your private group, invitations, chores, optional completion photos, challenges, progress, Chore Points, recaps, and settings together.
- Sync changes, deliver the notifications you choose, and protect accounts and devices from unwanted access.
- Verify Apple purchases and make the right Plus features available to the group.
- Record an adult’s optional email choice and, only after marketing delivery is properly enabled, send the setup tips and Plus offers that adult requested.
- Understand feature use in aggregate, review the onboarding choices adults choose to share, find problems, and improve the app.
- Complete deletion requests, prevent abuse, protect people and the service, and meet legal obligations.
Children’s information
A child profile is created and managed by the group owner from an adult account. It may include an owner-chosen nickname, built-in avatar, chore assignments and activity, review choices, private Chore Points and group rank, connected-device information, and notification settings selected by the owner.
SharedChores does not ask a child for an email address, phone number, birthday, legal name, home address, location, contacts, profile photograph, voice recording, public username, school information, social profile, or advertising identifier. An adult’s optional email choice never applies to a child profile. After the group owner reviews and acknowledges the current child photo notice for that child profile, the child may deliberately add one optional still completion photo to a chore while Plus is active. To keep that record accurate, we retain the notice version, the time recorded by our service, and an internal member reference to the owner who acknowledged it. Existing profiles are not treated as acknowledged automatically. The photo follows the same family-only access, removal/reporting controls, metadata removal, encryption, and 90-day expiration described above. Child profiles never receive marketing or upgrade notifications.
Sharing and service providers
SharedChores does not sell your information or show third-party or behaviorally targeted ads. We use service providers only to operate and protect SharedChores, and require them to handle information under their agreements with us and applicable law.
- Cloudflare hosts the app and website services and provides encrypted database and private object storage, job delivery, security, reliability reporting, and limited aggregate product measurement. Cloudflare necessarily processes network-request information to provide those services. Group-written text and completion-photo bytes are application-layer encrypted before they are stored with Cloudflare.
- Apple provides Sign in with Apple, App Attest, push notifications, App Store purchases, and crash and performance diagnostics. Apple handles that information under its own terms and privacy commitments.
No marketing-email provider is connected today, and Cloudflare Email Service is not used for marketing. Before promotional email is enabled, this policy and the service-provider record will be updated as needed and the provider will be reviewed under an appropriate agreement. SharedChores does not use tracking pixels in email or share an email address for cross-company tracking, advertising audiences, or data-broker activity.
We may also disclose information when law requires it, when reasonably necessary to protect people or the service, or as part of a business transaction with appropriate safeguards.
Retention and deletion
Optional onboarding responses expire within 365 days after their last update and are removed immediately when sharing is turned off or account deletion is accepted. We keep active account and group information while it is needed to provide SharedChores. If an adult withdraws the optional email choice in Settings, we immediately clear the encrypted email address and its keyed lookup. A content-free consent event may remain with the adult account to document that choice; account deletion removes the consent record and event history. Completion photos automatically expire after 90 days and may be removed sooner by an authorized member, a report decision, or deletion. The minimal photo-report record described above expires after 30 days. Invitation records stay only while they are current or recent. Product-use measurement has a 90-day target and may disappear sooner under platform limits. Minimal security records normally have a 30-day limit. Purchase-integrity records may be kept longer when needed to verify transactions, and a documented active incident or legal obligation may require a limited exception.
Adults can delete their account inside the app. A non-owner adult can leave a group and remove their identity linkage. The group owner must first transfer ownership or choose group deletion, can delete a child profile, and can remove a non-owner adult from the group. Removing a member closes that person’s sessions, devices, notifications, and future group or photo access right away.
When our server accepts a deletion request, access ends and cleanup starts right away. Any stored marketing-email ciphertext and keyed lookup are cleared as part of acceptance, before ordinary asynchronous cleanup. We aim to finish ordinary active-system cleanup within seven days; remaining recovery copies age out within 30 days. Shared history may keep a past event without the person’s name when needed to keep everyone else’s record understandable. Minimal content-free security, transaction, or legal records may remain only while their documented need continues. See Delete your account for the steps.
Your choices
- Turn notifications off in iOS or choose generic notification previews in SharedChores.
- Review group, member, device, invitation, and subscription settings in the app.
- Skip any onboarding preference question, leave optional answer sharing off, or turn it off later in the app’s privacy choices to delete the saved response.
- Leave the email choice off during account creation, or withdraw it later in Settings without losing account or subscription access.
- Choose whether to add a completion photo, and view, remove, or report photos using the controls available for your role.
- If another member should no longer have access, ask the group owner to remove that non-owner member from the group.
- Leave a group or delete an account when role and ownership rules permit.
- Ask the group owner to remove a child profile or connected child device.
Security
SharedChores uses reasonable technical and organizational safeguards designed to protect your information. No service can promise absolute security, so we also limit what we collect and how long we keep it.
Cookies and tracking
This website uses no cookies, advertising pixels, chat widgets, or social embeds. SharedChores also does not use email tracking pixels or cross-context tracking. Its hosting service still processes the limited network-request information described above. SharedChores does not provide public group profiles or public chore pages.
Changes and questions
Material changes will be reflected by the date above and, where appropriate, explained in the app. For privacy questions, email corporate@cerebraenterprises.com or visit SharedChores Support.