Privacy
Last updated 21 September 2026
This is how It's Chore Time handles family data. It is this site's policy, written to match how the product works. It is not personalized legal advice, and it is not a substitute for a lawyer in your state.
Questions, a copy of your data, a deletion request, or a children's-privacy inquiry: hello@itschoretime.com.
Who we are
It's Chore Time is the family chore and allowance web app at https://itschoretime.com. A parent or guardian creates the household. Kids check off lists and see what they have earned. The operator of this site can be reached at the address above.
Who this is for
The customer is a parent or legal guardian setting up a household. You must be 18 or older to create a parent account. Kids do not get email accounts, public profiles, or a way to register on their own.
Children's privacy (COPPA)
It's Chore Time is meant for families. Some kids who use the lists may be under 13. We treat the parent or guardian who creates the family as the adult in charge of that household.
Consent
By creating a parent account, confirming the email on that account, and adding a kid, you represent that you are the child's parent or guardian (or have authority from one) and that you consent to that child's use of the kid tools in your household. We confirm we can reach you by sending a link to the email you typed. We do not use a credit-card consent step because we do not charge today.
What kids do not get
Kid mode has no email, no social features, no public profile, no comments for the open internet, and no behavioral advertising. Kids unlock with the family code plus their own 4–6 digit code. We store that code hashed, not as plain digits. There is no app-store app to install.
What we collect about a child
Only what a parent types or what the household needs for the list and money picture: a name or nickname, optional emoji and color, hashed unlock code, chore assignments and check-offs, and the allowance ledger in integer cents. We do not take photos, file uploads, precise geolocation, or contacts from a child.
Use of a child's information
We use it to run the household list, the money picture, and optional notices to the parent. We do not sell it. We do not use it to market to the child. We do not share it with advertisers. We do not condition a child's use on extra data beyond what the list needs.
Parent rights
A signed-in parent can review household data on the site, download a copy from Settings → Export, hide or delete a kid, or delete the whole family from Settings. If you cannot sign in, email hello@itschoretime.com from the parent address on the account. If we learn a child created a parent account, we will delete that family.
What we store
We keep the household data a parent enters so the lists and money picture work:
- parent name, email, hashed password, and optional authenticator secret
- whether that email has been confirmed, and hashed confirm or reset tokens while they are active
- chore lists, assignments, completions, and frozen past-day lists
- the allowance ledger in integer cents, payouts, and goal names
- household schedule, including two-house weeks if you use them
- an optional co-parent invite email
- handoff notes, packing-list items, and similar family text a parent types
- hashed session tokens and hashed IP addresses used to rate-limit abuse and bind sessions
We do not take file uploads. There are no ads on the site. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
How we use it
- to run the family, kid, and kitchen-kiosk screens
- to credit paid chores to the right house's parent
- to send the emails listed below, when mail is on
- to keep the service secure (rate limits, optional two-factor, operator support)
- to operate and improve the product, including aggregate counts in the operator console
When mail is on, we may send:
- a welcome message with a link to confirm the parent email
- a password reset
- a co-parent invite
- chore and payout notices
- an optional evening nudge or Monday weekly recap, if the site's scheduled job is running
We do not email kid unlock codes. Confirming your email does not stop you from adding a kid the first night; it is so resets and notices can reach you.
Cookies and IPs
We set HttpOnly session cookies for a parent, a kid, and a short-lived operator session. On HTTPS those cookies are marked Secure. They are needed to stay signed in. We do not use third-party advertising cookies or a marketing pixel.
IP addresses are stored hashed, not raw, so we can rate-limit abuse and bind sessions. We do not keep the original address.
Hosting, operators, and sharing
The site is hosted on Hostinger. Hostinger processes data as our hosting provider so the site can run. Outbound mail, when enabled, is sent through our mailbox provider (currently Titan Email) as the From address on those messages.
People who operate the platform may view a family to help with support. That view-as mode is look-only. They may pause, lock, or delete a family for abuse or operational reasons. They may clear a parent's two-factor setting if you are locked out.
If you invite a co-parent, that household's data is shared with them. We may disclose information if the law requires it, or to protect a child or the service from harm.
We do not sell personal information. We do not share it with advertisers. There is no public kid leaderboard.
Security
Passwords and kid codes are hashed (Argon2id, or bcrypt if the server cannot use Argon2id). Session tokens are stored hashed. Forms use CSRF checks. The site sends security headers, including a content security policy. No method is perfect; if you think something is wrong, email us.
Retention
We keep household data while the family account exists. Confirm and reset tokens expire (confirm links last two days; password resets last one hour). Sessions expire on a fixed TTL. If you delete the family, we remove parents, kids, chores, money records, and sign-ins for that account. Operator audit records of the deletion may remain so we know that the request was handled. Backups held by the host are overwritten on the host's backup cycle.
Your choices
- Confirm or resend the parent email from the banner in the app
- Optional authenticator app for parent sign-in, in Settings
- Export a JSON copy from Settings
- Hide a kid (keeps history for two-house books) or delete that kid's data
- Delete the whole family from Settings
If you cannot sign in, email hello@itschoretime.com and we will work a copy or a deletion by hand.
US state privacy rights
Depending on where you live (for example California under the CCPA/CPRA), you may have the right to know what we have collected, to receive a copy, to correct it, to delete it, and to opt out of the sale or sharing of personal information. We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is no “Do Not Sell or Share” toggle. We will not discriminate against you for asking. To use these rights, sign in and use Export or Delete, or email hello@itschoretime.com. We may need to check that the request comes from the parent on the account. Authorized-agent requests should include proof of authority.
People outside the United States
The site is hosted in the United States. If you use it from another country, you understand that household data is processed in the US.
Changes
If this policy changes in a way that matters, we will update the date on this page. For a material change to how we handle children's information, we will also say so on the site and, where we can, email the parent address on the account.
Contact
Email hello@itschoretime.com. Put “Privacy” or “COPPA” in the subject if that is what you need. We do not publish a mailing address on this page today; if a regulator or parent needs one, ask at that address and we will provide it.