Last updated: October 25, 2026
Free local entries are stored only in your browser or device. If you clear browser storage or change devices, free local data may be lost.
When you create an account, cloud household data is stored with Supabase (our hosting, database, and authentication provider). This includes your account email, household members, person labels, work logs, usage counters, and plan information.
Voice transcription sends your audio through our servers to an OpenAI transcription model for transcription only. Audio is not stored after the request completes. For abuse prevention and cost control, we record usage metadata such as device identifiers, hashed IP or network values, audio duration, and request counts.
Paid subscriptions are processed by Stripe. Stripe handles card and billing information directly. We do not store full card numbers. We retain only the plan status and Stripe customer and subscription identifiers needed to manage subscriptions.
When optional analytics is enabled, we use Google Analytics to measure aggregate usage and conversion events. Google Analytics may set cookies or identifiers. Google Analytics is used only when enabled for the deployment and allowed by your analytics choice.
For our own operational and aggregate analytics we also derive a coarse country (for example, "US") from your network address when you make a request. We do not store your IP address or any finer location. For public information pages, we count aggregate page views and clicks to open the app by page path/title and a coarse referral category (such as an AI assistant, search, other website, or direct/unknown). We do not send or retain referrer URLs, paths, search queries, or conversation identifiers. These public-page counts do not use cookies, localStorage, device IDs, or unique-reader tracking.
If you choose Google sign-in, Google acts as the identity provider and exchanges the account identifiers and profile information you authorize with Supabase so we can authenticate you. Authentication and account emails are delivered through Supabase using Resend as our email delivery provider.
When you create or change a password, our server checks whether it appears in known breaches using Have I Been Pwned's k-anonymity service. Only the first five characters of a one-way SHA-1 password hash are sent; your password, email, and full hash are not sent.
Our service providers include Vercel (application hosting), Supabase (database and authentication), Resend (authentication email delivery), OpenAI (voice transcription — receives the audio you submit and the request metadata needed to convert it to text; audio is not stored), Stripe (payment processing and tax calculation), Cloudflare (Turnstile bot/abuse detection, which receives your IP address and device signals), Sentry (error monitoring, which may receive minimized technical error details), Google (sign-in when selected and Google Analytics when separately enabled with consent), and Have I Been Pwned (k-anonymous breached-password checks). Hosting, security, and delivery providers may receive ordinary request data such as IP address, browser/device information, and timestamps while handling a request, even though we do not store raw IP addresses in our application database.
We use information to operate, secure, improve, support, and provide the service.
Legal Basis (EEA/UK)
Where the GDPR or UK GDPR applies, we rely on the following bases for each purpose:
- Providing the service (accounts, household sync, work logs, voice transcription, billing): performance of our contract with you (Art. 6(1)(b)).
- Security, abuse prevention, and rate limiting (hashed IP/device signals, Cloudflare Turnstile, security event logs): our legitimate interests in protecting the service and our users (Art. 6(1)(f)).
- First-party operational and aggregate analytics (usage events, product health, public-page aggregate view counts): our legitimate interests in understanding and improving the service without using advertising identifiers (Art. 6(1)(f)).
- Tax, accounting, and legal compliance: compliance with a legal obligation (Art. 6(1)(c)).
- Analytics cookies: your consent (Art. 6(1)(a)), which you can withdraw at any time.
International Transfers
We and our service providers process personal information in the United States. Where we transfer personal information out of the EEA or UK, we rely on an appropriate safeguard under Art. 46 GDPR — the European Commission's Standard Contractual Clauses (and the UK Addendum / UK IDTA), supplemented by the EU-US and UK-US Data Privacy Framework where a provider is certified. A copy of the relevant safeguards is available on request via the contact details below.
Data Retention
Account data is retained while your account remains active. Deleting your account starts a 7-day cooling-off period; signing back in during that period cancels the deletion request. After the period, your authentication account, membership, usage counters, MFA data, and work logs you created are removed. If no other member remains, the household and its data are also deleted. If other members remain, ownership transfers and shared household records needed for their service (including the household, labels, and their content) may remain. You may export your data at any time. We retain personal information for the following periods:
- Account and household data (email, membership, labels, work logs, usage counters, plan): while the account is active. Your account-associated records are deleted after the 7-day cooling-off period; shared household records may remain for other members as described above.
- Security and fraud-prevention logs (sign-in and account events): direct user identifiers and nonessential metadata are removed on account deletion, then the rows are hard-deleted no later than 180 days after. An internal household reference may remain during that window if other members still use the shared household.
- Usage analytics events stored by us: direct user, device, and actor identifiers and event metadata are removed on account deletion, then the rows are hard-deleted no later than 180 days after. An internal household reference may remain during that window if the shared household survives. Public-page aggregate view counts do not include user or device identifiers.
- Rate-limit and brute-force throttle records (hashed IP/email): up to 90 days.
- Voice audio: not stored — discarded as soon as transcription completes.
- Billing records: retained by Stripe as required for tax and accounting law; we keep only plan status and Stripe identifiers while the account is active.
- Aggregate, identifier-free counters: may be kept indefinitely as they cannot be linked to you.
Certain security, fraud-prevention, and operational records may be retained where reasonably necessary to protect the service, prevent abuse, comply with legal obligations, or resolve disputes; where practical these are de-identified or aggregated and are not used to recreate your account.
Your Rights
Depending on your location, including the EU, UK, and California, you may have rights to access, correct, export (data portability), or delete your personal information and, where applicable, to object to or restrict certain processing.
You may export core account, household, label, and work-log data from the app (JSON or CSV), request deletion from the account screen, or contact us for access to other personal information and to exercise other rights. We respond to verified requests within the time required by applicable law — generally within one month under the GDPR/UK GDPR and within 45 days under U.S. state privacy laws — and will tell you if we need a permitted extension. We do not charge a fee or discriminate against you for exercising a right.
Certain security and fraud-prevention records are maintained separately and may not be included in user exports where disclosure would impair the security or integrity of the service.
Automated decisions. We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects about you.
Withdrawing consent. Where we rely on your consent (for example, analytics cookies), you can withdraw it at any time using the "Cookie settings" control or your browser's GPC signal, without affecting the lawfulness of processing before withdrawal.
Complaints (EEA/UK). You have the right to lodge a complaint with your local data protection supervisory authority. In the EEA you can find your authority via the European Data Protection Board; in the UK, the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to address your concern first.
EU/UK Representative
We do not currently maintain an Article 27 representative in the EU or UK. If you are in the EEA or UK and need to reach us about your personal information, contact us using the details below and we will respond directly.
Cookies and Analytics Consent
We use only the cookies and local storage strictly necessary to run the service (for example, to keep you signed in, remember free local app state, and enforce free local usage limits). We do not set optional analytics or advertising cookies until you agree. When optional analytics is enabled, a consent banner asks you to accept or decline before Google Analytics or any analytics cookie is loaded; if you decline, Google Analytics and optional analytics cookies are not loaded.
You can change or withdraw your optional analytics choice at any time using the "Cookie settings" control on the account screen, which reopens the consent banner. We also honor the Global Privacy Control (GPC) browser signal: if your browser or extension sends GPC, we treat it as a decline and do not load optional analytics. You can additionally manage cookies through your browser settings.
The technologies we use are: strictly-necessary Supabase session data in browser local storage that keeps you signed in across visits until you sign out, sign out other devices, clear browser storage, or the session is invalidated; local storage for free local app data, device-scoped usage limits, and your cookie choice; short-lived bot/abuse-detection storage set by Cloudflare Turnstile during authentication and sensitive-action security checks; and, only if you accept, Google Analytics cookies (typically up to about 2 years) to measure aggregate usage.
Data Sharing
We do not sell your personal information and do not share it with third parties except as necessary to provide the service, process payments, comply with legal obligations, protect rights, or prevent fraud and abuse.
California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to know, access, correct, delete, and obtain a portable copy of your personal information, and to be free from discrimination for exercising these rights — we will not deny service, charge different prices, or provide a different level of quality because you exercised a privacy right.
Do Not Sell or Share My Personal Information. We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined by the CPRA — so no separate opt-out link is required. Analytics, where enabled, runs only after you opt in. We honor the Global Privacy Control (GPC) signal as a valid opt-out of any sale/sharing; you can also use the "Cookie settings" control to decline analytics.
Retention. We keep each category of personal information only as long as described in the Data Retention section above (for example, account data while your account is active and then through the 7-day deletion window; security and analytics logs no more than 180 days after deletion; throttle records up to 90 days).
Categories of personal information. Over the past 12 months we collect: identifiers (account email, hashed IP, device identifiers); customer records and commercial information (plan, subscription status, Stripe customer/subscription IDs — no card numbers); internet/network activity (usage counters, analytics events); audio (voice recordings, transcribed in real time and not stored); and the household/task content you enter. Sources are you and your device and, when applicable, the identity, payment, hosting, and security providers involved in your request. We use these to provide, secure, support, and improve the service and to comply with law, and we disclose them only to the service providers listed above for those business purposes.
Sensitive personal information. Voice audio and your account email may be considered sensitive personal information. We use them only to provide and secure the service (audio is transcribed and discarded, never stored), and not for inferring characteristics or for advertising; you may direct us to limit the use of sensitive personal information, though we already use it only for these permitted purposes.
Exercising your rights. Submit a request from the account screen or by contacting us below. We verify requests by confirming control of the account email associated with the data; we may ask for additional information to match you to your records. You may use an authorized agent (with proof of authorization and verification of your identity) to submit a request on your behalf.
Other U.S. State Privacy Rights
If you are a resident of Virginia, Colorado, Connecticut, Texas, Utah, Oregon, Montana, or another U.S. state with a comprehensive consumer-privacy law, you have similar rights to access, correct, delete, and obtain a portable copy of your personal data, and to opt out of targeted advertising, the "sale" of personal data, and profiling that produces legal or similarly significant effects. We do not sell personal data, engage in cross-context or targeted advertising, or conduct such profiling, so those opt-outs do not apply. To exercise a right, use the account screen or contact us below.
Right to appeal. If we decline your request, you may appeal by replying to our decision or writing to chore-tracking-support@f13foundry.com within a reasonable time; we will respond with our decision and reasons. If we deny the appeal, you may contact the Attorney General in your state.
Security
We use reasonable administrative, technical, and organizational measures to protect personal information. However, no method of transmission or storage is completely secure.
Data breach notification. If a security incident compromises your personal information, we will notify the relevant supervisory authority and affected users without undue delay where required by applicable law (for example, under GDPR/UK GDPR Articles 33–34 and applicable U.S. state breach-notification laws).
Children
ChoreTracking is not intended for children under 13, and we do not knowingly collect personal information from children under 13.
In the EEA and UK, the age at which a child can consent to online services is 16 in some countries (and as low as 13 in others). Where you are below the applicable digital-consent age in your country, you may use ChoreTracking only with the consent and involvement of a parent or legal guardian.
Changes
We may update this Privacy Policy from time to time. Continued use of the service after changes become effective constitutes acceptance of the updated policy.
Contact
The data controller is Fireborne XIII Foundry LLC, 5900 Balcones Drive STE 100, Austin, TX 78731, United States. Privacy requests and questions: chore-tracking-support@f13foundry.com