Last updated: August 18, 2026
ChoresFlow ("we", "us", or "our") is a family chore management application available at choresflow.com. We help families assign chores, track rewards, and manage daily schedules including Islamic prayer times.
We collect only what is necessary to run the service:
ChoresFlow is designed for parents to manage on behalf of their children — a parent creates and controls the account, and any information about a child is entered by the parent. Child profiles contain only a first name and a numeric PIN — no email address, no phone number, and no personally identifiable information beyond what the parent chooses to enter. We do not knowingly collect personal information directly from children, we do not show ads, and we never profile or track children.
Under COPPA (US) and Article 8 of the GDPR (EU/UK), the parent or guardian who creates the account provides consent for, and controls, any child data. If you believe a child has submitted personal information without parental consent, contact us at [email protected] and we will delete it promptly.
Our legal bases for processing (where the GDPR applies) are: performance of our contract with you (running the service and billing), your consent (optional location for prayer times, which you can withdraw at any time), and our legitimate interest in keeping the service secure and reliable and understanding whether our limited outreach is effective.
We do not sell your data. We share it only with the service providers needed to run ChoresFlow:
Where a provider processes data in the United States, that transfer is covered by Standard Contractual Clauses or an equivalent safeguard, and each provider is bound by its data-processing terms.
Your account data is retained while your account is active. You can delete your account at any time — instantly from Parent settings → Family → Delete account in the app, or from choresflow.com/delete-account. Deletion is immediate and permanent; any residual backups are purged within 30 days. Stripe retains payment records for legal compliance according to their own retention policy.
Depending on your location (including under the EU/UK GDPR), you may have the right to access, correct, export (data portability), or delete your personal data; to object to or restrict processing; and to withdraw any consent you have given. You can delete your account and data yourself at any time (see Data retention above).
To exercise any other right, email [email protected]. We will respond within 30 days. If you are in the EU/UK and believe we have mishandled your data, you also have the right to lodge a complaint with your local data-protection supervisory authority.
ChoresFlow uses only essential cookies required for authentication (session tokens). We do not use third-party tracking cookies or advertising cookies.
If you arrive through a campaign or external referral, ChoresFlow temporarily keeps the limited signup-attribution fields described above in your browser tab's session storage. If you sign up, that tab-scoped value is transported through account metadata, copied to a restricted attribution record, and removed from the account metadata when signup is confirmed. The restricted record is not shared with an advertising network and is deleted within 30 days.
We use HTTPS everywhere, bcrypt password hashing, and row-level security on all database tables. No system is perfectly secure, but we take reasonable precautions to protect your data.
We will update the effective date above and provide email or in-app notice of material changes when required by applicable law.
Questions? Email [email protected].