01Overview
This Privacy Policy describes how Aych Labs ("we," "us," or "our") collects, uses, and protects information in connection with the Family Rewards mobile application (the "App"). Aych Labs is a software company dedicated to building tools that help families thrive.
Family Rewards is a chore and rewards tracking application designed for use by parents and their children within a supervised family environment. Parents create and manage the account; children participate in earning and tracking points under direct parental oversight.
By using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the App. We encourage parents to read this policy carefully before allowing their children to use the App.
02COPPA & Children's Privacy
No accounts for children under 13. Children under the age of 13 do not create their own accounts. All accounts are created and controlled exclusively by a parent or legal guardian (the "Parent Account Holder"). Children participate in the App only as named family members under a parent-controlled account.
Verifiable Parental Consent. Before any personal information relating to a child under 13 is collected — including the child's name as a family member or any task completion data — we obtain verifiable parental consent from the Parent Account Holder during the account creation process. By creating an account and adding a child's name to the App, you represent and warrant that:
- You are the parent or legal guardian of the child;
- You have authority to provide consent on the child's behalf; and
- You consent to our collection and use of the child's information as described in this policy.
What information we collect from or about children. The only information we collect that is associated with a child under 13 is:
- The child's first name (or a nickname chosen by the parent) as entered by the Parent Account Holder;
- Task completion records (which tasks were marked complete and when), entered or confirmed by the Parent Account Holder;
- Point balances associated with each named child; and
- Optionally, task completion photos uploaded by the parent to document completed chores (see Section 7).
We do not collect from children: email addresses, phone numbers, precise geolocation data, social media identifiers, government identification numbers, payment information, or any persistent identifiers used for behavioral advertising.
No behavioral advertising targeting children. We do not use personal information collected from children under 13 for behavioral advertising or targeted marketing. We do not share such information with third-party advertising networks.
Parental rights under COPPA. As the Parent Account Holder, you have the right at any time to:
- Review the personal information we have collected about your child;
- Correct or update inaccurate information about your child;
- Request deletion of personal information collected about your child; and
- Refuse further collection of your child's information by deleting the family member profile or closing the account.
To exercise any of these rights, contact us at privacy@aychlabs.com. We will respond to verified parental requests within 30 days. We will take reasonable steps to verify that the requestor is the child's parent or legal guardian before disclosing or deleting information.
03Information We Collect
We collect only the information necessary to provide the App's functionality. The categories of information we collect are:
| Category | Specific Data | Who Provides It | Required? |
|---|---|---|---|
| Account Information | Parent's email address; password (stored as a hash, never in plain text) | Parent Account Holder | Yes |
| Family Member Names | First name or nickname for each child or family member added to the account | Parent Account Holder | Yes |
| Task & Chore Data | Task names, descriptions, assigned family member, completion status, completion timestamps | Parent Account Holder | Yes |
| Point Balances | Point values assigned to tasks; current point totals per family member | Parent Account Holder | Yes |
| Task Completion Photos | Photos uploaded to document a completed chore | Parent Account Holder (optional) | No |
| Device & Usage Data | Device type and OS version; App version; crash reports and error logs; general usage analytics (e.g., features accessed — no behavioral profiling) | Collected automatically | Yes (for App function & improvement) |
Information we do not collect. We do not collect Social Security numbers, financial account numbers, payment card data, biometric data, precise GPS location, or data from third-party social networks. We do not use advertising SDKs or track users across third-party apps and websites.
04How We Use Your Information
We use the information we collect solely for the following purposes:
- Providing the App. To authenticate your account, display family member profiles, manage tasks and chores, calculate and display point balances, and enable the full functionality of the App.
- Syncing data. To synchronize your family's data across devices linked to your account via Firebase (see Section 6).
- Improving the App. To analyze aggregate, de-identified usage patterns and crash reports to fix bugs and improve App performance and features.
- Customer support. To respond to your questions, requests, or support tickets.
- Legal compliance. To comply with applicable law, regulations (including COPPA), and valid legal process.
- Safety. To detect, investigate, and prevent fraudulent, abusive, or illegal activity.
We do not use your information for behavioral advertising, sale to data brokers, profiling, or any purpose incompatible with the purposes listed above.
06Firebase & Third-Party Services
Family Rewards uses Google Firebase to power its backend infrastructure. Firebase is a platform developed by Google LLC. The Firebase services we use include:
- Firebase Authentication — to securely manage parent login credentials;
- Firebase Firestore — as our cloud database for storing account, task, and points data;
- Firebase Storage — to store optional task completion photos; and
- Firebase Crashlytics — to collect anonymized crash reports that help us diagnose and fix technical issues.
Data stored in Firebase is housed in Google's cloud infrastructure. Google processes this data as our data processor, subject to a Data Processing Agreement and Google's applicable terms of service. For more information about how Google handles data, please review the Firebase Privacy & Security documentation.
We do not use any other third-party analytics, advertising, or tracking SDKs in the App at this time. If this changes, we will update this Privacy Policy and obtain any required parental consent before activating such services.
07Task Completion Photos
Parents have the option to attach a photo to a completed task to document that a chore was done. This feature is entirely optional and disabled by default.
If you choose to upload photos:
- Photos are stored securely in Firebase Storage, associated with your family's account.
- Photos are accessible only to the Parent Account Holder within the App.
- We do not use photos for any purpose other than displaying them within your account.
- Photos are not shared with third parties, used to train AI/ML models, or analyzed for any purpose beyond storage and retrieval.
- Photos are deleted when you delete the associated task, remove the family member profile, or close your account.
Photos of children: If task completion photos include images of children, those images constitute personal information about the child. By uploading such photos, the Parent Account Holder consents to their storage on our behalf as described in this policy. We strongly recommend that parents review any photos before uploading and avoid sharing images they would not want stored in the cloud.
08Data Retention
We retain your information for as long as your account is active or as needed to provide the App's services. Specifically:
- Account and family data are retained until you delete your account or request deletion.
- Task and points history is retained within your account so you can review past activity. You may delete individual task records within the App at any time.
- Photos are retained until you delete them within the App or delete your account.
- Crash logs and technical data are retained for up to 90 days for debugging purposes and then automatically deleted.
When you delete your account, we will delete or anonymize all personal information associated with your account — including all child-related data — within 30 days, except where retention is required by law or for legitimate fraud prevention purposes.
To request account deletion, use the "Delete Account" option in the App settings, or contact us at privacy@aychlabs.com.
09Security
We take the security of your family's information seriously and implement reasonable technical and organizational safeguards, including:
- Encryption in transit: All data transmitted between the App and our servers is encrypted using TLS (Transport Layer Security).
- Encryption at rest: Data stored in Firebase is encrypted at rest by Google's infrastructure.
- Authentication: Account access is protected by password authentication managed through Firebase Authentication. We encourage you to use a strong, unique password.
- Access controls: Only authorized Aych Labs personnel with a legitimate need may access account data, and such access is logged and audited.
- Firebase Security Rules: We use Firebase Security Rules to ensure that users can access only their own family's data.
No method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately at privacy@aychlabs.com.
10Your Rights
Depending on your jurisdiction, you may have additional rights regarding your personal information. These may include:
- Access: The right to request a copy of the personal information we hold about you or your child.
- Correction: The right to request correction of inaccurate personal information.
- Deletion: The right to request deletion of your personal information (including all data about your child) — subject to certain exceptions required by law.
- Portability: The right to request a machine-readable export of your data.
- Objection or restriction: The right to object to or restrict certain processing of your data.
- Withdrawal of consent: Where processing is based on consent, the right to withdraw consent at any time without affecting prior processing.
To exercise any of these rights, please contact us at privacy@aychlabs.com. We will respond within 30 days. We may need to verify your identity before processing your request. We will never discriminate against you for exercising your privacy rights.
California residents may have additional rights under the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA). We do not sell or share personal information for cross-context behavioral advertising. California residents may submit requests to know, delete, or correct their data as described above.
EEA/UK residents: If you are located in the European Economic Area or United Kingdom, you may have rights under the GDPR or UK GDPR. Our legal basis for processing your data is performance of a contract (to provide the App), compliance with legal obligations, and — for children's data — your explicit parental consent. You may lodge a complaint with your local data protection authority.
11Policy Changes
We may update this Privacy Policy from time to time to reflect changes in our practices, the App's features, or applicable law. When we make material changes, we will:
- Post the updated policy within the App and on our website at aychlabs.com;
- Update the "Last Updated" date at the top of this policy; and
- Notify Parent Account Holders via the email address on file for significant changes — particularly any changes that affect the collection or use of children's personal information, for which we will obtain fresh parental consent if required by COPPA.
Your continued use of the App after the effective date of a revised policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you may close your account as described in Section 8.
12Contact Us
If you have questions, concerns, or requests relating to this Privacy Policy or our privacy practices — including requests to exercise parental rights under COPPA — please contact us:
For urgent matters relating to the safety or privacy of a child, please mark your email with the subject line "URGENT — Child Privacy." We will prioritize such requests.