Privacy Policy
Last updated: 2026-03-18
Earnie ("the app", "we", "us") is a family app for chores, XP, and rewards. This privacy policy describes what personal data we collect, how it is used, and how you can delete it.
1. What data do we collect?
Adult users (parents):
- Name
- Email address
- Phone number (optional)
- Birth year or date of birth
- Country and language
- Family role (e.g. mum, dad)
- Avatar/profile picture
- Profile colour
- Push notification token (to send notifications to your device)
- Apple ID (if you sign in with Apple Sign-In)
Child accounts:
- Name (entered by the parent)
- PIN code or password (hashed and stored securely)
- Email address (for email-based children)
- Birth year (optional)
- Avatar/profile picture
- Profile colour
- Language
- Push notification token (to send notifications to the child's device)
Children under 13 cannot create their own accounts. Child accounts are created by a parent using the PIN method. The parent is responsible for the child's account and provides consent on the child's behalf.
2. How do we use the data?
- Family management: Create and manage the family, invite members.
- Chores & XP: Assign chores, track completions, and award XP.
- Rewards: Manage rewards that children can redeem with XP.
- Interest/savings: Calculate XP interest based on saved XP.
- Push notifications: Send notifications about chores, approvals, and rewards.
- Authentication: Sign you in securely via email/password, Apple Sign-In, or family code/PIN.
3. Who can see your data?
- Family members can see each other's name, avatar, and XP balance.
- Parents can see their children's chores, activity, and XP history.
- Your data is not shared with third-party companies for marketing or advertising.
4. Storage and security
- Data is stored in an encrypted database.
- Passwords and PIN codes are stored as encrypted hash values and can never be read in plain text.
- Login tokens are stored encrypted locally on your device and deleted on sign-out.
- All communication takes place over HTTPS.
5. Third-party services
We use a limited number of third-party services to make the app work:
- Subscription management: An external service handles subscriptions and purchases. It receives an anonymised user ID and subscription data. Used only for parent accounts — child accounts make no purchases.
- Push notifications: Notifications are delivered via Apple's infrastructure and a push service.
- Sign in with Apple: If you choose to sign in with Apple, Apple provides a unique ID and optionally your email address.
- Image storage: Avatar images are stored with an external storage service.
We use no external analytics, tracking, or advertising services. If you want to know which specific services we use, you can contact us by email below.
6. Children and GDPR
- Children under 13 can only be registered by a parent (using the PIN method).
- The parent is responsible for the child's account and consents to the data collection.
- No third-party services collect personal data from child accounts. Subscription management and Sign in with Apple are used only by parent accounts.
- Child data is limited to what is strictly necessary for the app to function.
7. Account and data deletion
You can delete your account directly in the app via Profile → Delete account.
- If you are the only parent, the entire family, all child accounts, and all data are deleted.
- If there are other parents in the family, only your account is deleted.
- If you are a child, only your account and your XP history are deleted.
8. How long is your data stored?
- Your personal data is stored for as long as your account is active.
- When you delete your account, all personal data linked to it is removed.
- If you are the only parent in the family, all family data is deleted, including all child accounts.
- Avatar images are deleted from our storage service when the account is removed.
9. Legal basis for processing
We process your personal data on the following legal grounds under GDPR Article 6:
- Contract: Processing required to provide the service (e.g. account management, chores, XP).
- Consent: Push notifications are only sent if you approve. The parent consents on the child's behalf.
- Legitimate interest: Basic security measures and abuse prevention.
10. Where is your data stored?
Your data is stored on servers within the EU/EEA. Some third-party services may process data outside the EU/EEA, in accordance with applicable safeguards (e.g. EU Standard Contractual Clauses). Contact us if you want to know more.
11. Your rights
Under the GDPR you have the right to:
- Request access to your personal data
- Request rectification of inaccurate data
- Request erasure of your data
- Request data portability (receive your data in a machine-readable format)
You can delete your account directly in the app via Profile → Delete account, or contact us by email below.
12. Contact
If you have questions about this privacy policy or your personal data, contact us at: hello@heyearnie.com