TidyTots — Privacy Policy

App: TidyTots: Chores & Allowance (package org.cloudemythos.tidytots)
Developer: OuzzTech
Last updated: October 24, 2026

The short version

TidyTots collects nothing from children. Children are profiles a parent creates — never users with accounts.
No account, no sign-in. The app never asks for your email address or any login. You set it up on your device and it works.
Your family's data lives on your device, in an encrypted database. The parent and child views stay in sync on the device automatically, with no account and no internet — and there is no multi-device sync in this version.
Zero ads for your kids — always. There is no advertising SDK and no analytics SDK in the app.
We never sell or share your family's data. The only companies that process anything are Google Play (payments) and RevenueCat (subscription verification), and only under your own purchase.
You are in control: you can view, export, and delete all of your family's data inside the app, at any time — including after the free period ends.

1. Who this policy is for

TidyTots is used by a parent or guardian (the person who set up the app on the device) to run chores, allowance, and savings goals for their children. Only an adult sets up the app, sets the parent PIN, and makes purchases. Everything below is written for that parent.

2. What the app stores — and where

TidyTots is local-first: your family's working data is stored on your device in a database encrypted with SQLCipher, with the encryption key held in Android's secure keystore storage. Stored on the device:

Parent setup details: your family settings, your currency choice, and your parent PIN — stored only as a salted cryptographic hash, never as the digits themselves, and never in a form anyone (including us) can read back. The app has no account and no sign-in, so it never collects your email address.
Child profiles: a first name or nickname, an optional birth year that you enter, and the avatar the child picks from the app's built-in set. No child photos are required, and children never enter their own information anywhere in the app.
Family activity: chores and schedules, approvals, the allowance ledger (amounts, reasons, timestamps, who approved), savings jars and goals, allowance schedules and IOU records, your custody settings, rewards you define, and Love Notes and encouragement badges you write.
Photo proofs: photos captured inside the app when a child shows a finished chore (see §5).
App bookkeeping: the date the app was first launched on the device (used for the free period — see §4).

3. Children and COPPA: we collect nothing from children

Children do not have accounts, email addresses, or passwords in TidyTots, and the app does not collect personal information from children — directly or indirectly. A child's profile contains only what the parent typed in: a first name or nickname, an optional birth year, and a chosen avatar. Profiles live only in the app on the parent's device. Because a parent provides and controls every piece of child-profile information, parents hold the rights described in §8 for all of it.

4. The 7-day free period and the device hash

TidyTots gives every family 7 free days, granted by the app itself. There is no Play free-trial offer, no card, and nothing that can auto-convert into a charge. To keep those 7 days honest (so reinstalling the app does not restart them), the app derives a one-way identifier on the device: your device's Android ID combined with an app-specific salt, hashed with SHA-256. The raw device ID never leaves your phone. Only the irreversible hash is used — as the anonymous user ID for RevenueCat (see §6) — to remember when the free period began. The hash cannot be used to identify you or your device, and it is not used for advertising or tracking of any kind.

5. Photo proofs

When a chore uses photo proof, the photo is captured with the in-app camera and stored encrypted in your family's space only — on your device. Photo proofs are automatically deleted 7 days after the parent's decision on the chore, unless you choose to keep a photo. We never run facial recognition or any biometric processing on photos, never use them for any other purpose, and never share them with any third party.

6. Purchases: Google Play and RevenueCat

All purchases happen in the Parent Zone, behind your PIN, and are processed by Google Play under your own Google account. We never see or store your payment-card details. RevenueCat verifies your purchases and keeps your subscription and one-time-product entitlements in sync; it receives the purchase receipts issued by Google Play and the anonymous hashed identifier described in §4 — not your name, not your email, and none of your family's chore, ledger, or photo data. There is no other third-party processor. There is no advertising SDK, no analytics SDK, and no crash-reporting service in the app, and security checks that protect purchases run on the device itself.

7. Parent and child stay in sync — on this device, without an account

Inside the app, the parent view and the child view share one on-device database, so they are always in sync without any account and without the internet: when a child finishes a chore it appears in the parent's approvals, and when a parent approves or decides something it appears on the child's home. This sync never leaves the device. There is no multi-device sync and no server copy of your family's data in this version. If multi-device sync is added in a future version, this policy will be updated before it ships, and you will be told in the Parent Zone.

8. Your rights: view, export, delete

View: every balance in TidyTots can be opened to show exactly how it got that number, entry by entry.
Export: you can export the full ledger (CSV) and a complete copy of your family's data from the Parent Zone.
Delete: you can delete a child's profile or wipe all family data in the app at any time. Deleting removes the ledger, photos, and stored files. You can also contact us at the address below with any deletion question; there is no server copy of your family's data to delete — everything deletable lives in the app.
No hostage data: if the free period ends or a subscription lapses, your data stays viewable, exportable, and deletable forever. We never lock your family's records behind a payment.

9. What we never collect and never do

No account, no sign-in, no email address collected.
No location data — the app does not request location permission.
No contacts, no phone numbers, no advertising ID, no microphone in this version.
No data collected from children (see §3).
No ads, no personalized advertising, no behavioral analytics, no data sale, no data sharing for marketing — ever.
No external links anywhere in Kid Mode, and no purchase surface of any kind is reachable by a child.

10. Security

Family data on the device is encrypted at rest (SQLCipher) with the key protected by Android's secure storage; purchase traffic is encrypted in transit; and purchase integrity is verified against server-checked receipts rather than anything stored locally. Device backups are governed by your device's own settings; TidyTots does not upload your family's data anywhere. No system is perfectly secure, but the design goal is simple: there is very little data anywhere except on your own devices.

11. Changes to this policy

If we change this policy in a way that affects how your family's data is handled, we will update this page, change the date at the top, and surface the change in the Parent Zone before it takes effect. The in-app plain-language summary in the Parent Zone always matches this page.

12. Contact

Questions about privacy, or a deletion request: contact@cloudemythos.org (OuzzTech, developer of TidyTots).