Privacy Policy

Last updated: 12 June 2026

roodoo is a family chore tracker. We try to collect as little as possible to make the app work, and we never sell, share, or use your data for advertising.

What we collect

• Apple sign-in identifier — a stable, opaque ID Apple gives us when you sign in. It's how we recognise you on future launches.
• Name + email — only what Sign in with Apple chooses to share. Your email may be Apple's private relay address.
• Family content you create — kids' names + emoji + colors, quests, prizes, points balances, pending approvals, and the activity log.
• Device timezone — captured once at sign-up so daily quests reset at your local midnight.
• An Apple refresh token — used only to revoke your Sign in with Apple authorisation when you delete your account. (Stored when our server-side Apple credentials are configured; without it, account deletion still removes all your data, you just revoke roodoo manually from your Apple ID settings.)
• Subscription status — if you subscribe to roodoo+, Apple processes the payment. We never see your card or billing details; we receive signed transaction records from Apple (transaction identifiers, product, expiry date) and store them to know whether your family's multi-device pairing is unlocked.
• Crash and error reports — if the app crashes or our server hits an error, a technical report (stack trace, device model, OS version, and your account ID for server errors) is sent to Sentry, our error-reporting processor, so we can fix bugs. These reports never include your family's content.

What we don't collect

• No analytics, advertising, or tracking SDKs. (Sentry, above, is crash reporting only — not analytics or tracking.)
• No location, contacts, photos, microphone, or camera.
• No data is sold, rented, or shared with third parties.

Where it's stored

Your data lives on a server we run on Render (managed Postgres + a small web service), in the Oregon, USA region. The connection between your device and our server is encrypted with TLS.

How long we keep it

We keep your data while your account exists. Deleting your account removes everything from our database immediately.

How to delete your data

Open Settings → Account → Delete account inside the app. We confirm twice, then delete your account, your family, and every related record from our database. We also call Apple's /auth/revoke endpoint so roodoo no longer shows up in your Sign in with Apple list.

Subscriptions

roodoo+ is an auto-renewing subscription ($0.99/month or $9.99/year) billed by Apple to your Apple ID. It renews until cancelled; manage or cancel any time in your device's Settings → Apple ID → Subscriptions. Deleting your roodoo account does not cancel the subscription — cancel it there too.

Children

Children appear in roodoo only as profiles a parent creates inside their own account (a name, emoji, color, and points balance). roodoo does not collect any data directly from children.

Changes to this policy

If we make a meaningful change we'll update the "Last updated" date above. For substantive changes we'll surface a notice in the app.

Contact

Questions or requests: hello@roodoo.app.