Privacy policy

Family records and pictures

Both apps store child profiles (name, age, avatar and color), tasks, rewards, point balances and history, adjustment notes, custom pictures, editor drafts, and preferences on your device to provide their features. Parents and caregivers manage child-profile information and guide children’s use. Neither app requires a separate app account.

Selected task and reward pictures are cropped and compressed on the device, and source photo metadata is removed. Processed pictures are saved with items and history snapshots; a history snapshot can retain its picture after the item changes or is deleted. Unsaved editor and crop previews are stored privately on the device for recovery until saved or discarded. The iOS iCloud behavior is explained below.

Android preview

The Android app (package me.gordon.pointsdaily) does not send family records to the developer or a third-party server. It has no family sign-in, cloud sync, analytics SDK, advertising SDK, advertising identifier use or AI integration.

Pictures are selected through Android's photo picker or file picker. The app does not request access to your entire photo library or use the camera; source photo paths and picker addresses are not saved. Pictures remain in private app storage and are not uploaded to analytics or AI.

The current Android release is a free preview with in-app billing disabled. It does not start a paid subscription or trial and does not collect payment-card details. Google Play and Android may independently process store-account, download, device and diagnostic information under your platform settings and Google's privacy policy. This is separate from the app's local family records.

Android cloud backup and device-to-device transfer are disabled. We do not provide an Android cloud copy or cross-device recovery service. People who can open the app on your unlocked device can access its records.

Features on iPhone and iPad

Apple purchases

In version 1.1, Apple App Store handles subscription confirmation, introductory-trial eligibility, billing, renewals, cancellations and restoring purchases. The app verifies signed Apple transaction records on your device, including the product, expiration and revocation status, to determine access. These records are not sent to our servers or AI services. We do not receive payment-card details. Apple processes store account and transaction information under its privacy policy. Version 1.0 stores its automatic trial start and latest observed time locally and uses Apple for its one-time permanent-unlock purchase.

Usage analytics on iOS

The app uses TelemetryDeck to understand which features are used and where interactions fail. It sends fixed event names for app launches, adding a child, completing a task, redeeming a reward, adjusting or undoing points, enabling sync, AI editing stages, and trial, purchase or restore outcomes. These events contain no child names or profile identifiers, task or reward content, points values, AI messages or replies, transaction identifiers, receipts, or payment details.

The SDK also sends session and usage statistics, a hashed device-derived identifier, and technical metadata such as device model, operating system, app version, language, time zone and accessibility settings. We do not supply an email, account ID or child ID to analytics, or use these events for advertising. Events may be queued on the device and sent when connectivity is available. Analytics starts when the app launches; there is currently no in-app analytics switch.

Our current plan makes three months of analytics available in the dashboard; this is not a three-month deletion promise. TelemetryDeck states that it does not currently guarantee a deletion schedule for its cold-storage events. See its privacy FAQ for processing and retention details.

Optional iCloud sync and family collaboration

Sync sends your family records to Apple iCloud. If you enable family collaboration, invited participants can access and edit shared records. This is a separate choice from cloud AI and is subject to Apple's iCloud privacy and service terms.

Task and reward pictures follow the same private or shared CloudKit family permissions. Photos are not included in AI catalog requests or analytics events.

Optional cloud AI editing

The iOS app does not contact the cloud AI service until you choose “Agree and use OpenAI.”

Manual editing does not require AI. On-device AI processes editing requests locally when the device supports it. The cloud AI flow described next is a separate choice.

App AI Gateway forwards your message, the selected child's task and reward list (item identifiers, names, emoji icons, points, and item types), and recent editing conversation to OpenAI to propose changes. The app does not automatically attach the child's profile name, profile identifier, points history, or another child's list. Personal details you put in a message or list are still included, so please avoid sensitive information about children.

Your choice is remembered. Once you agree, the app may authenticate with the gateway before you send a message. The gateway processes an installation identifier, request usage, and authentication records for security, usage limits, billing, and service reliability. Every proposed list change still requires your confirmation.

Cloud AI service retention

According to its policy, App AI Gateway does not store prompts or replies. It keeps authentication records for 90 days and usage records while our developer gateway account exists; operational logs are kept for a short diagnostic period. Its primary database is in the United States.

OpenAI states that API content is not used for training by default unless the API customer opts in. We request store:false, but this is not a promise of zero retention: OpenAI may keep content in security logs for up to 30 days, or longer when legally required or necessary for safety, and supported models may use temporary prompt caching. These services process data under their respective policies: App AI Gateway and OpenAI API data controls.

Your choices and deletion

In both apps, you can edit or delete tasks and rewards and remove a child when another profile remains. Deleting a task or reward does not erase its past point history. The developer cannot remotely view, recover or delete records stored only on your device.

Android: Records remain in private app storage until removed through the app or Android. The app keeps at least one child profile. To remove all local records, including the final profile, clear the app's storage in Android Settings or uninstall it. These actions remove local family data and cannot be undone through our service.

iPhone and iPad: To stop future cloud AI requests, open AI editing, choose Change in the current provider card, and select on-device AI. During an active trial or subscription, manual editing remains available even if on-device AI is unavailable. Changing providers does not erase service records already retained. iCloud data, shared copies and device backups are separate from local app storage; disabling sync or removing the app does not by itself erase every copy.

For retained service data, iCloud records or a privacy/deletion request, email sunshi0123@gmail.com. We will help identify relevant data, explain available deletion options and any required retention. Do not include sensitive child information with your initial request.

Support correspondence and public webpages

If you email us, we receive your address, message and any attachments you choose to send. We use them to answer and troubleshoot your request, and keep necessary support records while resolving it and as needed for applicable legal obligations. Our email provider processes correspondence to deliver and store it. You can request deletion of support correspondence at the same address.

These public privacy and support pages are hosted on Vercel, which may process normal web request information such as an IP address and browser information to deliver and secure them. We add no analytics scripts or advertising cookies to these pages.

Contact and scope

Developer: Shi Sun. Support and privacy contact: sunshi0123@gmail.com. This policy covers Points Daily Kids for iOS and Android; the separate Web application uses a different storage system and has its own policy. Material changes will be reflected here with an updated date.