Privacy Policy

Last Updated: February 2, 2026

This Privacy Policy describes how Chorezo ("we", "us", or "our") collects, uses, and shares information when you use our family chore tracking application (the "App").

1. Developer Information

2. Information We Collect

2.1 Personal Information

When you use our App, we collect the following types of personal information:

• Authentication Information: When you sign in using Google OAuth, we collect your email address, display name, and Google user ID
• Profile Information: User role (parent or child), approval requirements, and family membership details
• Usage Data: Chore completions, points earned, family activities, and approval history
• Family Data: Family name, family code, timezone, and week start preferences

2.2 Automatically Collected Information

We may automatically collect certain technical information including:

• Device information and operating system details
• Log data and error reports for app stability and performance
• Session information to maintain your logged-in state

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide and maintain the chore tracking functionality, including user authentication, family management, and point tracking
• Account Management: To create and manage your user account and family memberships
• Feature Functionality: To enable chore assignment, completion tracking, approval workflows, and leaderboard displays
• Communication: To send service-related notifications and updates about your account
• Improvement: To analyze app usage patterns and improve our services
• Security: To detect and prevent fraud, abuse, and security incidents
• Legal Compliance: To comply with applicable laws and regulations

4. How We Share Your Information

4.1 Within Your Family

Information is shared with members of your family group including:

• Your display name and role
• Your chore completions and points earned
• Your position on family leaderboards

4.2 Third-Party Service Providers

We may share information with trusted third-party service providers who assist us in:

• Authentication: Google OAuth for secure sign-in
• Hosting: Cloud infrastructure providers for data storage and app hosting
• Analytics: Service providers that help us understand app usage (if applicable)

We ensure all third-party providers:

• Are contractually obligated to protect your data
• Only use data for specified purposes
• Comply with applicable privacy laws and regulations
• Do NOT sell your personal information

4.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal requests from government authorities
• Court orders or subpoenas
• Legal obligations and regulatory compliance
• Protection of our rights, property, or safety

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

5. Data Security

We take data security seriously and implement appropriate technical and organizational measures:

• Encryption: All data transmission uses modern cryptography (HTTPS/TLS)
• Secure Authentication: Google OAuth 2.0 for secure user authentication
• Access Controls: Strict access controls limit who can view or modify data
• Regular Updates: We regularly update our security practices and infrastructure
• Data Isolation: Family data is isolated and accessible only to family members

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to industry best practices.

6. Data Retention and Deletion

6.1 Retention Period

We retain your personal information for as long as:

• Your account is active
• Necessary to provide our services
• Required to comply with legal obligations
• Necessary to resolve disputes and enforce agreements

6.2 Account Deletion

You have the right to request deletion of your account and associated data:

• In-App Deletion: Navigate to Settings > Account > Delete Account within the App
• Email Request: Contact us at privacy@pallosalama.com to request account deletion
• Deletion Timeline: Account deletion requests are processed within 30 days
• Data Removed: Upon deletion, we remove all personal information except data we must retain for legal compliance, security, or fraud prevention

Note: If you are the only parent in a family, deleting your account may impact other family members. We recommend transferring family ownership or removing members before deletion.

6.3 Data Retention for Legal Compliance

We may retain certain data for legitimate business purposes including:

• Compliance with tax, accounting, and audit requirements
• Fraud prevention and security incident investigation
• Legal disputes and litigation holds

7. Children's Privacy

Our App is designed for family use, including children. We are committed to protecting children's privacy in accordance with applicable laws, including the Children's Online Privacy Protection Act (COPPA) and similar regulations.

7.1 Parental Consent

• A parent or legal guardian must create the family account
• Parents control whether children accounts require approval for chore completions
• Parents have full visibility into their children's activities within the App

7.2 Children's Data

• Children's data is limited to what is necessary for chore tracking functionality
• We do NOT collect location data, photos, or contacts from children
• We do NOT use children's data for advertising or marketing purposes
• We do NOT share children's data with third parties except service providers necessary for app operation
• Parents can review, modify, or delete their children's data at any time

7.3 Third-Party Services and Children

We do not integrate any third-party SDKs or services that are not approved for use in child-directed services. All service providers used in our App comply with children's privacy regulations.

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights:

8.1 Access and Portability

• Request a copy of your personal information
• Receive your data in a structured, machine-readable format

8.2 Correction

• Update or correct inaccurate personal information
• Modify your profile settings and preferences

8.3 Deletion

• Request deletion of your account and personal data
• Remove specific information (subject to legal retention requirements)

8.4 Objection and Restriction

• Object to certain data processing activities
• Request restriction of data processing in specific circumstances

8.5 Withdraw Consent

• Withdraw consent for data processing where consent is the legal basis
• Note: Withdrawing consent may limit app functionality

To exercise these rights: Contact us at privacy@pallosalama.com with your request. We will respond within the timeframe required by applicable law.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses approved by the European Commission
• EU-U.S., UK, and Swiss Data Privacy Framework compliance where applicable
• Adequate level of data protection as required by GDPR

10. EU-U.S., UK, and Swiss Data Privacy Frameworks

We comply with the EU-U.S., UK, and Swiss Data Privacy Framework requirements regarding the collection, use, and retention of personal information from the European Economic Area, United Kingdom, and Switzerland.

We commit to:

• Comply with all applicable privacy and data protection laws
• Process EU personal information only for purposes consistent with user consent
• Implement appropriate technical and organizational security measures
• Provide the same level of protection required by Data Privacy Framework Principles

11. Google OAuth and Third-Party Authentication

Our App uses Google OAuth 2.0 for authentication. When you sign in with Google:

• You are redirected to Google's authentication service
• Google's privacy policy and terms of service apply during authentication
• We receive only the information you authorize (email, display name, user ID)
• You can revoke our App's access through your Google Account settings at any time
• Revoking access will prevent you from using the App until you authenticate again

Google's Privacy Policy: https://policies.google.com/privacy

12. Cookies and Similar Technologies

We use cookies and similar technologies to:

• Maintain your logged-in session
• Remember your preferences and settings
• Ensure app security and prevent fraud

Types of cookies we use:

• Essential Cookies: Required for authentication and core app functionality
• Preference Cookies: Remember your settings and choices
• Security Cookies: Detect and prevent security threats

You can control cookies through your browser settings, but disabling cookies may limit app functionality.

13. Analytics and Usage Data

We may collect anonymized usage statistics to understand how our App is used and to improve our services. This data:

• Does NOT include personally identifiable information
• Is aggregated and anonymized
• Helps us improve app performance and user experience
• Is NOT sold or shared with third parties for advertising

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our practices or services
• Legal or regulatory requirements
• User feedback and improvements

When we make material changes:

• We will update the "Last Updated" date at the top of this policy
• We will notify you through the App or by email
• For significant changes, we may require you to review and accept the updated policy
• Continued use of the App after changes constitutes acceptance

We encourage you to review this Privacy Policy periodically.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For data protection inquiries specific to the European Economic Area, you may also contact your local data protection authority.

16. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area, our legal bases for processing your personal information include:

• Contract Performance: Processing necessary to provide our services under our terms of service
• Consent: Where you have given explicit consent for specific processing activities
• Legitimate Interests: Processing necessary for our legitimate business interests (e.g., fraud prevention, security)
• Legal Obligation: Processing required to comply with legal obligations

17. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information (Note: We do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@pallosalama.com with "California Privacy Rights" in the subject line.

18. Data Breach Notification

In the unlikely event of a data breach that affects your personal information:

• We will notify affected users without undue delay
• Notifications will be sent via email or in-app notification
• We will provide information about the nature of the breach and steps taken
• We will comply with all applicable data breach notification laws

19. Disclaimer

This Privacy Policy applies solely to information collected by our App. We are not responsible for the privacy practices of third-party websites or services linked from our App. We encourage you to review the privacy policies of any third-party services you access.

Chorezo - Privacy Policy
Last Updated: February 2, 2026
Version 1.0