Privacy Policy - Poikilingo Kids Chores & Pocket Money

At Poikilingo, we create safe and playful digital experiences for children. This Privacy Policy applies to the Poikilingo Kids Chores & Pocket Money mobile application (iOS and Android; bundle ID com.poikilingo.kidschorestracker. Other Poikilingo products may have their own, separate privacy terms. Poikilingo Kids Chores & Pocket Money is designed as a family app and is built to collect as little information as possible.

Effective Date: September, 11th 2026.

1. Who we are

The App is operated by:

Poikilingo ApS
Guldringen 27
4320 Osted, Lejre
Denmark
CVR: DK41942185
Email: support@poikilingo.com

Poikilingo ApS is the controller of the personal information described in this policy, except where a service provider acts as a separate controller under its own terms.

2. Parents, guardians, and children

A parent or legal guardian creates and manages the family account. Children do not create an account using an email address, password, Google account, or Apple account.

A parent may create a child profile and may authorise a child’s device using a temporary, single-use QR code or setup code. The parent or guardian decides whether to create the profile, what information to enter, which chores and rewards to assign, whether to connect a child device, and whether to invite another parent or guardian.

By creating and saving a child profile, the parent or guardian confirms that they are authorised to provide and manage the information entered about that child and requests that Poikilingo process that information to provide the App. Parents should use a first name, nickname, or other non-identifying display name and should not enter unnecessary or sensitive information.

3. Information we process

3.1 Parent account information

When a parent creates or uses an account, we may process:

– name or display name;
– email address;
– authentication provider;
– Firebase user identifier and authentication tokens;
– account creation and most recent sign-in timestamps;
– family membership and role; and
– parent-invitation information, including the invitation’s creator, status, and timestamps.

Parents may use email and password, Google Sign-In, or Sign in with Apple. When Google Sign-In or Sign in with Apple is selected, we receive limited information made available by that provider, such as a name, email address, and provider-specific account identifier. The exact information depends on the provider and the choices made by the user. Passwords used for email authentication are handled by Firebase Authentication and are not stored in the App’s family database.

3.2 Child profile and family activity information

A parent may provide or create:

– the child’s first name, nickname, or chosen display name;
– a selected emoji avatar and colour;
– current and starting star and family-recorded pocket-money balances;
– chores, including their titles, type, frequency, rewards, and penalties;
– chore completion, pending, approval, and missed-task status;
– family-created rewards and their star or money costs;
– reward requests and approval messages; and
– internal profile, chore, reward, and request identifiers and timestamps.

This information is used only within the relevant private family workspace. It is not published publicly.

The App does not ask children to provide an email address, postal address, telephone number, photograph, precise location, or social-media account. Parents should not place sensitive personal information in profile names, chore titles, reward titles, or approval messages.

3.3 Child-device setup information

When a parent connects a child device, the App processes:

– a temporary QR code or manually entered setup code;
– the relevant family and child-profile identifiers;
– a randomly generated, restricted child-device authentication identifier;
– the invitation’s status, creator, creation time, redemption time, and expiry time; and
– technical information needed to authenticate and secure the request.

A child-device setup code is single-use and expires after 15 minutes. It is not a hardware advertising identifier and is not used for tracking. After enrolment, the child device receives restricted access to the assigned child profile. It does not receive access to parent settings, other child profiles, or family-administration features.

Parent invitation codes are single-use and expire after 72 hours.

3.4 Camera access

The App requests camera access only when a user chooses to scan a child-device setup QR code. QR-code recognition occurs for setup purposes. The App does not use this feature to take, retain, or upload photographs or videos. Users may deny camera access and enter the setup code manually instead. Camera permission can be withdrawn in the device settings.

3.5 Technical and security information

Google Firebase may automatically process limited technical information needed to provide and secure its services, including IP addresses, user-agent information, authentication and server logs, request timestamps, app or service identifiers, and security or abuse-prevention signals.

We do not use this information to build advertising profiles or to track users across unrelated apps or websites.

3.6 Information stored on the device

The App stores a local copy of child profiles and family chore-and-reward information on the device using the operating system’s application storage. This supports display, continuity, and synchronisation. Signing out stops cloud access but may not immediately remove this local copy. Local App data can be removed by deleting the App or clearing its application data through the device’s settings. A connected child device stores the authentication state needed to remain linked to its assigned child profile.

4. What we do not collect or do

The App does not contain third-party advertising and does not include Firebase Analytics, Google Analytics, an advertising analytics SDK, or an advertising attribution SDK.

The App does not intentionally collect:

– device location obtained through GPS or the operating system’s location services (Firebase may process an IP address and related general-region information for service security and operation);
– contacts or address books;
– children’s email addresses or telephone numbers;
– children’s photographs, videos, or voice recordings;
– health, medical, or biometric information;
– the IDFA or other identifiers for advertising;
– browsing or search history outside the App;
– data for cross-app or cross-website tracking; or
– public posts or social-media content.

We do not sell or rent personal information, share it with advertisers or data brokers, use children’s information for marketing, create advertising profiles, or provide public profiles, public comments, messaging with strangers, or an open social network.

5. Pocket money and financial information

The pocket-money feature is only a family record-keeping tool. The App does not hold or transfer real money, open financial accounts, process withdrawals, provide payment cards, conduct banking activity, or process purchases between parents and children.

Any pocket-money balance shown in the App is entered and managed by the family and does not represent funds held by Poikilingo. If paid subscriptions or in-app purchases are introduced later, payments will be processed by the applicable app-store provider. Poikilingo will not receive full payment-card details.

6. How we use information

We process information to:

– create and authenticate parent accounts;
– create and operate private family workspaces;
– create and display child profiles;
– synchronise authorised family information across devices;
– let parents create chores and rewards;
– record chore completion and family-managed balances;
– let children submit chore and reward requests;
– let parents approve or decline requests;
– invite another parent or guardian;
– securely connect a child device;
– prevent unauthorised access, abuse, and fraud;
– maintain, troubleshoot, and secure the App;
– respond to support and privacy requests; and
– comply with legal obligations and protect our legal rights.

7. Legal bases for processing

For users in the European Economic Area, United Kingdom, and other jurisdictions requiring a lawful basis, we rely on the following grounds as applicable:

– Performance of a contract: to provide the account, private family workspace, synchronisation, and other features requested by the parent.
– Consent: where consent is required by law for processing information relating to a child or for an optional feature. Consent can be withdrawn by contacting us, although withdrawal may prevent the relevant feature from operating.
– Legitimate interests: to provide support, maintain service security, prevent fraud or misuse, and protect users and our services, balanced carefully against the rights and interests of children.
– Legal obligations: where processing or retention is necessary to comply with applicable law, legal process, or a binding request from a competent authority.

8. Children’s privacy and parental involvement

The App is intended to be set up and managed by a parent or legal guardian. Child-facing access is limited to age-appropriate family functionality, such as viewing assigned chores and balances, marking chores, viewing available family rewards, and sending a request to a parent.

Parent-only profile administration, invitations, chore and reward management, approval controls, and settings are behind the App’s parent flow and parental gate. A parental gate is a product control and is not, by itself, a substitute for any form of parental consent required by applicable law.

We do not knowingly collect personal information directly from a child without the involvement and authorisation of a parent or legal guardian. If you believe a child’s information was provided without appropriate authority, contact [support@poikilingo.com](mailto:support@poikilingo.com). We will investigate and delete the information where required.

9. How information is shared

9.1 Within the family

Information is shared among authorised members and devices within the same private family workspace. An invited parent can view and manage family child profiles, chores, balances, rewards, and pending requests. A connected child device can access only the child-facing information and actions permitted for its assigned profile.

9.2 Service providers

We use Google Firebase as a service provider for:

– Firebase Authentication;
– Cloud Firestore database storage;
– Cloud Functions;
– secure data synchronisation; and
– related technical infrastructure and security.

Google processes information on our behalf to provide and secure these services and may process limited service data under its applicable terms. We do not enable Firebase Analytics in the App. More information is available in https://firebase.google.com/support/privacy and the https://policies.google.com/privacy.

Google Sign-In and Sign in with Apple are optional authentication methods. When selected, authentication data is also processed under the https://policies.google.com/privacy or https://www.apple.com/legal/privacy/.

We require service providers handling personal information on our behalf to protect it appropriately and to process it only for providing, securing, and maintaining their services or as required by law.

9.3 Legal, safety, and business reasons

We may disclose information where reasonably necessary to comply with applicable law or legal process; respond to a lawful request from a public authority; protect the safety, rights, and property of users, children, Poikilingo, or others; investigate fraud, abuse, or security incidents; or establish, exercise, or defend legal claims.

If Poikilingo is involved in a merger, acquisition, restructuring, financing, or sale of assets, information may be transferred as part of that transaction subject to appropriate confidentiality and data-protection safeguards. We will provide notice where required by law.

10. Data storage locations and international transfers

The App’s Cloud Firestore database and Cloud Functions are configured for Google’s `europe-west1` region in Belgium. Firebase Authentication is operated from data centres in the United States. Google may also process limited service and security data at other locations permitted under its applicable terms.

Poikilingo is based in Denmark. Where personal information is transferred outside the European Economic Area, we rely on recognised legal safeguards where required, such as an adequacy decision, Standard Contractual Clauses, the contractual and technical safeguards supplied by our service providers, or another legally recognised transfer mechanism.

Firebase states that supported service data is encrypted in transit and at rest. For details, see https://firebase.google.com/support/privacy.

11. Data retention

Parent account, family, and child-profile information is generally retained while the family account remains active and for as long as reasonably necessary to provide the App, maintain security, resolve disputes, enforce agreements, and comply with legal obligations.

Accounts that remain inactive for 24 months may be scheduled for deletion. Where reasonably possible, we will notify the parent before deleting an inactive account. Particular records may be retained longer where required by law or where reasonably necessary for security, fraud prevention, dispute resolution, or legal claims.

Child-device setup codes expire after 15 minutes, and parent invitation codes expire after 72 hours. Related backend records and server logs may be retained after expiry or redemption where needed for security, fraud prevention, troubleshooting, and audit purposes, and are deleted or anonymised when they are no longer reasonably necessary.

We normally complete a verified account-deletion request within 30 days and will confirm when it has been completed. Information is then deleted or anonymised from active systems unless continued retention is legally permitted or required. Residual copies may remain temporarily in restricted backups and logs until overwritten or deleted according to the applicable service-provider schedule.

12. Security

We use reasonable administrative, technical, and organisational safeguards designed to protect personal information, including authenticated parent accounts, family-based database access rules, restricted child-device permissions, temporary single-use setup codes, access controls, and encrypted network communications supplied by our infrastructure providers.

No internet service can guarantee absolute security. Parents should protect account credentials, use a strong and unique password, and prevent unauthorised access to their devices. If you believe an account is compromised, contact [support@poikilingo.com](mailto:support@poikilingo.com).

13. Parent choices and controls

Parents can use the App to create, edit, and remove child profiles; change chores and rewards; manage balances; approve or decline requests; invite another parent; and create a setup code for a child device.

The current version does not provide an in-App control for revoking an already connected child device or deleting the complete parent account. For help disconnecting a child device, obtaining a copy of information, or requesting complete account and family-data deletion, contact support@poikilingo.com.

Deleting the App, clearing its local data, or signing out does not by itself delete information stored in the family account on Firebase.

14. Privacy rights

Depending on where you live, you may have the right to request access to, correction of, deletion of, or restriction of personal information; object to certain processing; withdraw consent; receive certain information in a portable format; obtain information about categories of information collected or disclosed; and lodge a complaint with a data-protection authority.

These rights may be subject to legal exceptions. We may need to verify the requester’s identity, authority over the family account, or relationship to the relevant child before completing a request. Requests can be sent to support@poikilingo.com. Do not send passwords, setup codes, or sensitive child information by email.

Poikilingo does not sell personal information or share it for cross-context behavioural advertising. Users will not be unlawfully discriminated against for exercising applicable privacy rights.

15. Account and data deletion

To request complete deletion of a parent account and associated family data, email support@poikilingo.com from the email address associated with the parent account. Do not send a password or sensitive child information.

Before deleting a family shared with another parent, we may need to verify family ownership and determine whether ownership should be transferred to another authorised parent. Following verification, we will delete or anonymise the relevant information unless continued retention is required or permitted for legal, security, fraud-prevention, or dispute-resolution purposes.

Parents can remove an individual child profile in the App. For confirmation that all associated server-side records have been removed, contact us using the address above.

16. Third-party links and services

Parent-facing parts of the App may provide access to third-party authentication or support services governed by their own privacy policies. The child-facing experience is not designed to provide unrestricted web browsing or communication with third parties.

Changes to this policy

We may update this Privacy Policy when App features, service providers, data practices, or legal requirements change. When changes are material, we will provide notice through the App, website, email, or another appropriate method. The effective date at the top shows when this version became effective.

18. Contact and complaints

For questions, concerns, or privacy requests, contact: