Privacy Policy

1. Introduction & Scope

Vellicante Media LLC ("we," "our," or "us") is committed to safeguarding the privacy of families and children who use our mobile applications (the "Apps"), including ChoreQuest, our websites (https://vellicante.com and https://media.vellicante.com), and associated digital services.

This Privacy Policy explains how information is collected, used, synchronized, and safeguarded under the Children's Online Privacy Protection Act (COPPA), GDPR-K (General Data Protection Regulation for Children), and Apple App Store & Google Play Developer Policies.

2. Information Collection and Handling

A. Parent Account & Security

To synchronize household routines across family devices, an adult parent creates an anchor household account using:

• Email Address: Used strictly for secure passwordless magic link authentication and transactional service notices.
• Google Sign-In: Standard OAuth authentication token provided securely by Google.
• Encrypted Parent PIN: A 4-digit PIN used to protect Captain's Quarters (Parent Mode). The PIN is protected using cryptographic salted SHA-256 hashing before being synchronized with your household's private partition in Google Cloud Firestore. It is never stored or transmitted in plain-text format.

B. Child Profile & Routine Data

Child profiles in ChoreQuest are managed exclusively by the authenticated Parent. We collect only the minimum necessary operational data required to deliver core functionality:

• Avatar & Nickname: Chosen nautical portrait avatar and first name or nickname (no full legal names or birthdates required).
• Duty & Landmark Logs: Checkmarks, completion timestamps, and duty status (e.g., pending review, approved).
• Virtual Doubloon & XP Balances: In-app educational game currency and milestone progression points.

Note: Child devices connect via a temporary 6-digit pairing code issued by the Parent, ensuring children never provide contact or personal details.

C. First-Party Aggregate App Improvement Signals

To understand feature adoption and guide continuous app improvements, ChoreQuest records non-personal, aggregated usage counters isolated to your private household partition (/families/{familyId}/insights/usage). These metrics include:

• Feature Engagement Counters: Cumulative count of approved duties, secret sticker unlocks, privilege passes redeemed, and theme switches.
• Session & Retention Cadence: Most recent active calendar date, count of unique active days in the current calendar month, and installed app version.
• Household Topology: Count of crew profiles, count of registered duties, and subscription tier (e.g., Free or Captain's Club).

Privacy Guarantee: These signals contain zero child names, personal notes, duty titles, micro-timestamps, or individual device identifiers. Child devices generate zero telemetry writes. All usage data is permanently erased immediately whenever an account is deleted or reset.

3. Children's Privacy (COPPA & GDPR-K Compliance)

ChoreQuest is designed for family co-use and complies strictly with COPPA and global child privacy regulations:

• Parental Consent & Verification: All account creation and device pairing require verified parental action via email magic link or OAuth.
• No Behavioral Tracking: We do not track children across third-party websites or services, and we never build behavioral or advertising profiles.
• No Third-Party Ad Networks: ChoreQuest contains zero third-party advertising SDKs, data brokers, or advertising trackers.
• Siloed Storage: All household data and usage telemetry are isolated in a secure, encrypted database partition accessible only to the parent's authenticated household unit.

4. Data Storage, Security & Cloud Sync

We partner with trusted, industry-leading infrastructure providers to securely host and synchronize data:

• Google Cloud Platform / Firebase: Encrypted real-time database synchronization (Cloud Firestore) and authentication (Firebase Auth) hosted in secure facilities.
• Technical Diagnostics & Crash Reporting (Firebase Crashlytics): We monitor application stability and debug software crashes using Firebase Crashlytics. When an error or crash occurs, technical diagnostic data (such as device model, operating system version, app version, and stack traces) is collected. This diagnostic data contains no personal information, is strictly anonymized, and is never linked to child crew profiles or family accounts.
• Cloudflare Inc.: DNS, SSL/TLS encryption, and Zero Trust security infrastructure.
• Apple App Store & Google Play: Secure processing of app distribution and optional subscriptions. We never store or handle payment cards.

5. Complete Data Ownership & Instant Account Erasure

In accordance with Apple App Store Guideline 5.1.1(v), Google Play Data Safety standards, and GDPR Article 17 ("Right to Erasure"), parents retain complete, unconditional control over their family's data:

• In-App Deletion: Parents can navigate to Captain's Quarters → Household Settings → Delete Account at any time to instantly delete their entire household.
• Web Deletion Portal: Parents can also initiate verified deletion from any web browser without needing the app installed by visiting our dedicated Web Deletion Portal: https://chorequest-app-prod.firebaseapp.com.

6. Contact Information

If you have questions, feedback, or requests regarding this Privacy Policy or your family's data, please contact our team:

• Entity: Vellicante Media LLC
• Support Email: [email protected]
• Website: https://media.vellicante.com