Privacy Policy
Effective date: October 21, 2026
This policy explains what the Chore Garden app (“Chore Garden”, “the app”) does with information about you and your children. Chore Garden is published by Nikmesoft Company, Ltd. (“Nikmesoft”, “we”). Questions: [email protected].
The short version
- Chore Garden is a family chore chart: parents set chores, children mark them done on their own device, parents approve, and the family's garden grows.
- The app is for parents. Children use it only on a device a parent has paired with a one-time code, and only after the parent has given consent and confirmed it by email.
- About a child we keep a nickname, an avatar, the chores they mark done and their device's sign-in session; our server logs also keep the IP addresses of devices that connect to it, for up to 15 days. No real names, birthdays, photos, location or anything typed by a child.
- No ads, no analytics or tracking, no selling of data. Children's data is not given to any third party.
- A parent can delete all data about the children from the app at any time.
One account for Chore Garden and FamiGuard
Chore Garden uses the same account system as our app FamiGuard: the same email and password, or Sign in with Apple. One account works in both apps. This matters when you delete your account (see Deleting your data).
Information about the parent
| Information | Why | How long we keep it |
|---|---|---|
| Name, email address, password (stored hashed) or your Sign in with Apple identifier | Signing in, the consent confirmation email, password reset | Until the account is deleted |
| Family PIN (stored hashed) | Leaving kid mode and turning sound on or off on a child's device; opening Settings on your phone | Until you change it or the account is deleted |
| Sessions: a sign-in token, when it was created and last used | Keeping you signed in | Until you sign out or remove it, after 60 days without use, or 90 days at most |
| Consent record: policy version, method (in-app checkbox and email confirmation), who agreed, when you agreed, confirmed and (if you did) withdrew. It contains no data about your children | Proof of parental consent | As long as the garden exists, withdrawn records included; deleted with “Delete Chore Garden data” or with the account |
Information about children
A parent enters, for each child:
- a nickname of up to 16 characters (the app asks you not to use full names), and
- an avatar picked from a fixed set of pictures.
When a child uses their device, we also record:
- Chore completions: which chore, which day, its status (waiting, approved or not counted), and the time it was marked done and decided, to the second.
- The child's device session: a token, when the device joined and when it was last used. We do not record the device's model, platform or version, an advertising identifier, location, contacts, photos, microphone or camera.
| Information | How long we keep it |
|---|---|
| Nickname and avatar | Until 30 days after the parent removes the child, when the child and all their completions are deleted; deleted at once if consent is withdrawn or the garden or account is deleted |
| Chore completions, with their times | Until 30 days after the parent removes the child (deleted together with the child); deleted at once if consent is withdrawn or the garden or account is deleted. Completions that stay waiting for 7 days without a decision stop counting |
| Child's device session | Until a parent removes the device, the child is removed, consent is withdrawn, after 60 days without use, or 90 days at most |
What we don't collect
Chore Garden does not collect children's real names, birthdays or ages, photos, location, push notification tokens on children's devices, analytics or advertising data, or anything typed by a child — children have no text fields in the app.
What a child's device shows
A child's device shows that child's own chores and completions. About brothers and sisters it shows only their nickname, avatar and the number of water drops they added to the garden this season — not their chore names or times.
Parental consent
- Before you add the first child, the app tells you what we collect, why, how long we keep it, that we share it with no one, and your rights, and asks you to agree with a checkbox.
- We then send a confirmation link to your account's email address. Until you confirm, a child's device cannot be paired and no activity about the child is recorded.
- You can see all your children's data in the app at any time.
- You can withdraw consent in the app's Settings → Privacy (behind the family PIN). This deletes at once all data about your children: their profiles, completions, device sessions and pairing codes, and signs their devices out immediately. The garden and the chore list stay, unassigned, and the season's total water stays as a number.
Copies in our database backups are removed when those backups expire (after 30 days), and IP addresses in server logs within 15 days. This also applies to the deletions below.
Deleting your data
There are two ways to delete data in the app:
- Delete Chore Garden data (Settings, behind the family PIN) deletes the garden, the children, chores, completions, seasons and the consent record, and signs the children's devices out. Your account and FamiGuard are not affected.
- Delete account (Settings, after signing in again) deletes the shared account and all its data in both apps, including FamiGuard's (devices, places, notifications and messages). You can delete the account this way without the family PIN. A FamiGuard subscription bought through Apple is not cancelled by deleting the account: manage it in your iPhone's Settings → [your name] → Subscriptions. A FamiGuard subscription bought on Google Play is detached from the account and can be restored to another one.
You can also email us from your account's email address at [email protected] and we will delete your account and its data for you.
Where data is stored and who processes it
We do not sell data, show ads or use analytics or tracking SDKs, and no third party receives children's data.
- Our own server in Vietnam holds the database and its backups.
- SendGrid (Twilio) sends the consent confirmation and password emails. It receives only the email address and display name.
- Apple, for Sign in with Apple, if you use it.
Chore Garden does not use Google Sign-In, Firebase, push notifications or analytics. Cloudflare only answers DNS queries for our domain; no app traffic passes through it.
Our server's security logs are reviewed automatically. Personal identifiers are removed from them before the review.
Technical data on our server
| Information | How long we keep it |
|---|---|
| IP addresses in server logs, including requests from children's devices (the app's own log does not record IP addresses) | At most 15 days (logs rotate daily) |
| Rate-limit records that stop people guessing pairing codes (an IP address or network) | About 1 day |
| A garden you no longer use | Until you delete it |
| Database backups | 30 days, then deleted automatically |
On your phone
- The optional evening reminder is a notification scheduled on your phone; our server is not involved, and its text names no child or chore.
- Your sign-in token is kept in the phone's secure storage, and a few on/off settings (reminder, sound) in the app's preferences.
- Nothing about your children is stored on your phone.
Security
Every connection uses TLS. Every request checks the session and the signed-in family. Pairing codes, PIN attempts and sign-in are rate-limited. Server logs contain no children's nicknames or chore titles. The database is not reachable from the internet, only by our operators over the local network. Passwords and PINs are stored hashed, and purchase tokens encrypted.
Changes
If a future version of the app changes what is described here, we will update this policy and the date above before that version is released.
Contact
Nikmesoft Company, Ltd., Da Nang, Viet Nam. Phone: +84 938 765 299.
Questions or requests about your or your children's data: [email protected].