Privacy Policy
Last updated: November 3, 2026 (first version effective October 21, 2026)
This policy explains what the Chore Garden app (“Chore Garden”, “the app”) does with information about you and your children. Chore Garden is published by Nikmesoft Company, Ltd. (“Nikmesoft”, “we”). Questions: [email protected].
The short version
- Chore Garden is a family chore chart: parents set chores, children mark them done on their own device, parents approve, and the family's garden grows.
- The app is for parents. Children use it only on a device a parent has paired with a one-time code, and only after the parent has given consent and confirmed it by email.
- About a child we keep a nickname, an avatar, the chores they mark done and their device's sign-in session; our server logs also keep the IP addresses of devices that connect to it, for up to 15 days. No real names, birthdays, photos, location or anything typed by a child.
- No ads, no analytics or tracking, no selling of data. Children's data is not given to any third party.
- A parent can delete all data about the children from the app at any time.
One account for Chore Garden and FamiGuard
Chore Garden uses the same account system as our app FamiGuard: the same email and password, or Sign in with Apple (on iPhone and iPad; on Android you sign in with email and password). One account works in both apps. This matters when you delete your account (see Deleting your data).
Information about the parent
| Information | Why | How long we keep it |
|---|---|---|
| Name, email address, password (stored hashed) or your Sign in with Apple identifier | Signing in, the consent confirmation email, password reset | Until the account is deleted |
| Family PIN (stored hashed) | Leaving kid mode and turning sound on or off on a child's device; opening Settings on your phone | Until you change it or the account is deleted |
| Sessions: a sign-in token, when it was created and last used | Keeping you signed in | Until you sign out or remove it, after 60 days without use, or 90 days at most |
| Consent record: policy version, method (in-app checkbox and email confirmation), who agreed, when you agreed, confirmed and (if you did) withdrew. It contains no data about your children | Proof of parental consent | As long as the garden exists, withdrawn records included; deleted with “Delete Chore Garden data” or with the account |
Information about children
A parent enters, for each child:
- a nickname of up to 16 characters (the app asks you not to use full names), and
- an avatar picked from a fixed set of pictures.
When a child uses their device, we also record:
- Chore completions: which chore, which day, its status (waiting, approved or not counted), and the time it was marked done and decided, to the second.
- The child's device session: a token, when the device joined and when it was last used. We do not record the device's model, platform or version, an advertising identifier, location, contacts, photos, microphone or camera.
| Information | How long we keep it |
|---|---|
| Nickname and avatar | Until 30 days after the parent removes the child, when the child and all their completions are deleted; deleted at once if consent is withdrawn or the garden or account is deleted |
| Chore completions, with their times | Until 30 days after the parent removes the child (deleted together with the child); deleted at once if consent is withdrawn or the garden or account is deleted. Completions that stay waiting for 7 days without a decision stop counting |
| Child's device session | Until a parent removes the device, the child is removed, consent is withdrawn, after 60 days without use, or 90 days at most |
What we don't collect
Chore Garden does not collect children's real names, birthdays or ages, photos, location, push notification tokens on children's devices, analytics or advertising data, or anything typed by a child — children have no text fields in the app.
What a child's device shows
A child's device shows that child's own chores and completions. About brothers and sisters it shows only their nickname, avatar and the number of water drops they added to the garden this season — not their chore names or times.
Parental consent
- Before you add the first child, the app tells you what we collect, why, how long we keep it, that we share it with no one, and your rights, and asks you to agree with a checkbox.
- We then send a confirmation link to your account's email address. Until you confirm, a child's device cannot be paired and no activity about the child is recorded.
- You can see all your children's data in the app at any time.
- You can withdraw consent in the app's Settings (behind the family PIN), under Privacy & help → Parental consent → Withdraw. This deletes at once all data about your children: their profiles, completions, device sessions and pairing codes, and signs their devices out immediately. The garden and the chore list stay, unassigned, and the season's total water stays as a number.
Copies in our database backups are removed when those backups expire (after 30 days), and IP addresses in server logs within 15 days. This also applies to the deletions below.
Deleting your data
There are two ways to delete data in the app:
- Delete Chore Garden data (Settings, behind the family PIN) deletes the garden, the children, chores, completions, seasons and the consent record, and signs the children's devices out. Your account and FamiGuard are not affected.
- Delete account (Settings, after signing in again) deletes the shared account and all its data in both apps, including FamiGuard's (devices, places, notifications and messages). You can delete the account this way without the family PIN. A FamiGuard subscription bought through Apple is not cancelled by deleting the account: manage it in your iPhone's Settings → [your name] → Subscriptions. A FamiGuard subscription bought on Google Play is not cancelled either: manage it in Google Play → Subscriptions. It is detached from the account and can be restored to another one.
You can also email us from your account's email address at [email protected] and we will delete your account and its data for you. Both ways are described on the account deletion page.
Where data is stored and who processes it
We do not sell data, show ads or use analytics or tracking SDKs, and no third party receives children's data.
- Our own server in Vietnam holds the database and its backups.
- Resend sends the consent confirmation and password emails. It receives only the email address and display name.
- Apple, for Sign in with Apple, if you use it.
Chore Garden does not use Google Sign-In, Firebase, push notifications or analytics. On Android it shows two of Google Play's own screens, for rating the app and for updating it (see Android and Google Play). Cloudflare answers DNS queries for our domain and delivers our website nikmesoft.com, which the app reads for the update check; no other app traffic passes through it.
Our server's security logs are reviewed automatically. Personal identifiers are removed from them before the review.
Technical data on our server
| Information | How long we keep it |
|---|---|
| IP addresses in server logs, including requests from children's devices (the app's own log does not record IP addresses) | At most 15 days (logs rotate daily) |
| Rate-limit records that stop people guessing pairing codes (an IP address or network) | About 1 day |
| A garden you no longer use | Until you delete it |
| Database backups | 30 days, then deleted automatically |
On your phone
- The optional evening reminder is a notification scheduled on your phone; our server is not involved, and its text names no child or chore.
- Your sign-in token is kept in the phone's secure storage, and a few on/off settings (reminder, sound) in the app's preferences.
- Nothing about your children is stored on your phone.
On a child's device, for the watering can, the app keeps for each child and season how many drops this device has already poured: two numbers in the app's preferences, with no names and no chores. They are removed with the app.
Android and Google Play
- The Android app collects the same data as the iPhone app, nothing more. Apart from the two Google Play screens below, it uses no Google services: no Firebase, no Google Sign-In, no advertising ID and no Google Analytics.
- Rating the app. On the parent's phone only, never on a family member's device, the app may show Google Play's own rating and review sheet, a few times a year at most. If you choose to rate the app or write a review there, Google Play receives it and publishes it under Google's policies. The app sends nothing about it to us.
- Updating the app. When a version of the app is no longer supported, the app shows a screen asking you to update. Its Update button starts Google Play's own in-app update, inside the app. To find the update, Google Play receives details about the device, the app version and its installed modules, under the Google Privacy Policy. Nothing about it is sent to us.
- Android permissions: internet; notifications (asked only when you turn on the evening reminder; Android 13 and later ask you first); restarting the reminder after the phone restarts; vibration for the reminder; and the phone's fingerprint, face or screen lock to open Settings. The app does not ask for location, camera, microphone, contacts, photos or files.
- On Android you sign in with email and password; Sign in with Apple is not offered.
- A FamiGuard subscription bought through Google Play is managed in Google Play → Subscriptions. Deleting the account does not cancel it.
- Deleting data or the account works as on iPhone, in the app's Settings (see Deleting your data), or by email from your account's address. The account deletion page for Google Play is nikmesoft.com/apps/chore-garden/delete-account/.
Update check
From version 1.0 (the version released in November 2026), when you open the app or return to it, it downloads a small configuration file from our website, https://nikmesoft.com/app-config/v1/com.nikmesoft.choregarden.json, to find out whether a newer version is available or needed. The app adds no account ID, device identifier, location or usage data to this request. Like any web request, it carries normal network information, including your IP address, which our hosting provider (Cloudflare) receives. Our website does not log these requests.
Only when a version is no longer supported, the app also asks the store which version is current: the iPhone app asks Apple's iTunes Lookup service (itunes.apple.com), with your store's country; the Android app asks Google Play (see Updating the app).
Security
Every connection uses TLS. Every request checks the session and the signed-in family. Pairing codes, PIN attempts and sign-in are rate-limited. Server logs contain no children's nicknames or chore titles. The database is not reachable from the internet, only by our operators over the local network. Passwords and PINs are stored hashed, and purchase tokens encrypted.
Changes
If a future version of the app changes what is described here, we will update this policy and the date above before that version is released.
Contact
Nikmesoft Company, Ltd., Da Nang, Viet Nam. Phone: +84 938 765 299.
Questions or requests about your or your children's data: [email protected].