Who controls the data
Sibling Rewards is the controller of information processed by the app. Household owners and parents decide which members, chores, rewards, and submissions belong to their household.
Information we process
- Account information such as display name, email address, password credential, Google identity link, and household role.
- Household information including invitation codes, member relationships, chores, schedules, rewards, points, reviews, and redemption history.
- Photos and notes submitted as proof of completed activities.
- Notification tokens and preferences when push notifications are enabled.
- Limited operational logs needed to keep the service reliable and investigate errors.
How information is used
Information is used only to provide household membership, chore and reward workflows, photo review, point accounting, notifications, account recovery when available, security, and service maintenance. Sibling Rewards does not sell personal information and does not use it for advertising.
Storage and service providers
Application records and photos are hosted using Cloudflare services. Push notifications are delivered through Expo and the device platform. Google processes information when a member chooses Google Sign-In. These providers process the minimum information needed to deliver their part of the service.
Retention and deletion
Current photo proof is retained for up to 30 days after a submission is approved or rejected. Older revisions may also be removed after 30 days. Ledger entries may remain after a correction so the household has an auditable points history.
Members can schedule account deletion inside Settings. Household owners can schedule household deletion, and parents can schedule child-data deletion. Scheduled deletion has a 30-day recovery period and can be cancelled in the app before it is completed. A household owner must transfer ownership before deleting only their personal account.
Children and household access
A child joins only after creating or signing in to an account and using a parent-issued, single-use invitation. The inviting parent determines the role. Household information is private to authenticated members of that household.
Security and choices
Sessions are protected with access and refresh tokens, passwords are stored as salted hashes, and sensitive API requests require authentication. Members can edit their display name, change their password, choose notification categories, and use the in-app deletion controls.
Policy changes
If this policy changes materially, the effective date below will be updated and the new policy will be published at this address.