CHOREPOCKET

Privacy policy

Effective 22 October 2026 · Version 2.2

Your family’s information stays private.

ChorePocket is an adult-managed family organiser. It has no advertising or behavioural tracking. We do not sell personal information. Adults choose what to enter about their household.

Who is responsible

ChorePocket is a trading name of Adoomi Limited (Adoomi Ltd), a company registered in the United Arab Emirates under registration MC 14683. We are responsible for the personal information used by this service. Our contact address is Smart Station, First Floor, Incubator Building, Masdar City, Abu Dhabi, United Arab Emirates. Contact [email protected] for privacy questions or requests.

Information we use

Family information comes from the adults managing the account. Purchase updates also come from the store and RevenueCat. We do not ask children to create accounts or provide information directly.

Why we use this information

Where data-protection law requires a lawful basis, we use contractual necessity for your adult account and the service you request; our legitimate interests in maintaining a secure, reliable private family service for security and necessary support; and legal obligation where a law requires specific processing. For child profile information, our interest is to provide the private household features requested by an authorised adult, with limited access and optional fields. Where consent is required by applicable law, we rely on that consent, which may be withdrawn. Optional device permissions can be refused or withdrawn in device Settings. This does not prevent typed entry or the core account tools.

Your email is needed to sign in. Child photos, spoken commands, Goals, Giving Pot and reminders are optional. Avoid sensitive health, identification-document or other unnecessary information in free-text fields. We do not use your information to make automated decisions with legal or similarly significant effects, or to profile children for advertising.

Children’s information

The service is intended for parents and other authorised adults. You must have authority to enter and manage information about a child. Child profiles stay within the household; there is no public directory, social feed or child purchasing account. We do not use profile photos for facial recognition. Biometric app lock is checked by the phone’s operating system; ChorePocket does not receive or store biometric templates.

Photos, reminders and voice

You can replace or remove a saved photo from the child’s profile. A photo is available only through authenticated household requests. The app keeps photos in bounded memory for display, not its long-term offline cache; offline views may show initials instead. A JSON export includes the saved photo bytes, so keep exports private.

Chore and school reminder settings are family records. Alerts are scheduled locally on each phone with your permission, using generic visible text. We do not collect push-notification tokens or use reminders for advertising. Device permissions and delivery depend on the operating system; you can turn alerts off without losing your family records.

In-app mobile speech uses an on-device English speech model with your permission. If a supported model is unavailable, you can type instead. We do not save audio or send audio or full transcripts to our API. Only the record fields you review and confirm are saved. On the web, the browser’s speech service may process audio remotely under its own terms.

Where available, Siri and Shortcuts use Apple’s services under your Apple privacy settings. Child names and identifiers and the command you request may be made available to those actions. The app keeps a minimal protected device snapshot for up to 24 hours or the session expiry, and one command draft for up to five minutes. Google Assistant uses Google’s services and sends the requested command fields to the app, not its audio; the app does not publish the household roster to Google. Its protected device scope lasts up to 24 hours or session expiry and its command draft stays in memory for up to five minutes. These optional actions require device authentication and confirmation in the app before saving. Signing out clears or invalidates the app’s snapshots and drafts; a shortcut you saved with Apple may remain in your Apple account. Availability varies by platform and release.

Who helps us provide the service

We share information with these services as needed to operate ChorePocket, and with authorities only where required by law. A business transfer may require transferring service records, subject to applicable law and notice. We do not sell family data.

International processing

Adoomi Limited is based in the UAE. Our providers operate internationally, including in the United States and other countries where their infrastructure or support teams operate. Information may therefore be processed outside your country; it is not limited to UAE storage. Applicable transfer safeguards may include contractual data-protection terms, approved standard contractual clauses or an applicable adequacy decision. You can contact us for information about the safeguards relevant to your data.

Storage and retention

Connections to the service use HTTPS. Native credentials and bounded offline family data use iOS Keychain or Android Keystore-backed secure storage. Recent offline read copies expire after seven days; pending actions are kept until resolved or cancelled. Web versions use browser storage, which has different protection from native secure storage. Signing out clears the app’s local account data; deletion requires the server to confirm completion.

We keep active account and household records while you keep the account, including during read-only access after a trial or subscription expires. This keeps your history available for viewing, export and correction. Photos remain until replaced, removed or the household is deleted. Failed cleanup is retried; we do not confirm account deletion while the deletion workflow is incomplete.

Completed account deletion removes the adult account, sessions and sole-member household content, including photos and histories. A limited keyed hash of a deleted billing identity, deletion timestamps and related billing-event references may remain to reject late or replayed purchase updates and prevent a deleted account being recreated by those updates. These records do not contain your email, child profiles or family content. They are kept separately from household records for up to 12 months after deletion and then deleted. Completed deletion also deletes the RevenueCat customer record for your account. Apple and Google keep their own purchase records under their own rules; account deletion does not cancel a store subscription.

Encrypted disaster-recovery backups of account, household and private-photo records normally expire after 30 days. Access is restricted to authorised operators. Backups are not used for ordinary account access; any recovery must reapply later deletion and session-revocation records before restored data can be made available.

Support correspondence and operational security records are kept for as long as needed to resolve the issue, protect the service or meet a specific legal obligation. If records must be retained after a deletion request, we will explain the categories, reason and applicable retention period or criteria. You can ask us about or request deletion of support correspondence separately.

Your choices and rights

You can edit child profiles and settings, remove photos, correct ledger entries through audited corrections, create a JSON export, and permanently delete your account from More → Settings → Privacy & security → Data & privacy. Read the deletion instructions for shared-household and subscription details.

Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection to processing, and withdraw consent where we rely on it. An authorised adult may make a request about a child’s information. We will verify authority without asking you to send a sign-in code, password or session token, and respond within the applicable legal time limit. Contact [email protected].

You may also complain to your applicable data-protection authority. For UK privacy concerns, see the Information Commissioner’s Office. UAE information is available through the UAE Government’s data-protection guidance. You do not need to contact us first to exercise a right to complain.

Website and policy changes

The public website has no advertising cookies or behavioural analytics. Hosting services process ordinary request information to deliver and secure pages. We update this policy’s date and version when it changes. If a change materially affects how existing family information is used, we will provide an appropriate in-app or email notice.