Privacy policy

Achievabee is a family app, and most of the people it celebrates are children. This policy explains what we collect, why, and the choices you have. We have tried to write it so you can actually read it.

The short version

• We collect what the app needs to work: your email, your children’s first names and ages, and the chores, points and rewards your family creates.
• We do not sell your data, we do not share it with advertisers, and we do not use it to train AI models. There is no advertising anywhere in Achievabee.
• The kid app contains no third-party analytics or advertising code of any kind. Nothing your child does in it is sent to another company.
• A child cannot use the app until you confirm you are their parent, by clicking a link we email you. You can withdraw that at any time.
• You can download everything we hold, or delete all of it, from Settings.

Who we are

Achievabee is operated by Achievabee. We are responsible for the information described in this policy.

You can reach us about anything on this page at privacy@achievabee.com, or about the app generally at support@achievabee.com.

What we collect

From you, the parent. Your email address and the name you choose to display. A password, if you set one, stored hashed so we cannot read it. Your household’s name and time zone. If you invite a co-parent, the email address you send the invitation to.

About your children. The first name or nickname you give them, their age, the bee avatar they pick, and a PIN you set for them. The PIN is stored so that it can be checked, and shown back only to you. Then the record of what they do in the app: chores assigned and completed, points earned and spent, rewards requested, badges, streaks, and any photo they take as proof of a chore.

Automatically. Two IP addresses, both for one purpose: stopping abuse. When you set up a device for your child we record the IP it connected from, so nobody can guess setup codes by trying thousands of them. If you ask us for an invite, we record the IP the request came from so nobody can flood the form. We never use either to work out where you or your child are, and we never share them. The first is deleted after about a day, the second after thirty.

We also record that a parent opened the app, and on which day. That is the difference between an app a family is using and one they have quietly given up on, and it is the only reason we collect it.

Payments. If you subscribe, our payment providers take your card details directly. We never see or store a card number. We keep a record that a payment happened, and enough of an identifier to match it to a refund.

If you sign in with Google. Google tells us your name, your email address and your profile picture, and nothing else. We ask Google for no other access: not your contacts, not your calendar, not your files. Children never sign in with Google. The kid app uses a PIN and has no email address at all.

Children’s privacy

This section is our notice to parents under the Children’s Online Privacy Protection Act. It applies to every child in your household, whatever their age.

We ask you first, and we tell you exactly what for. When you add a child, the app shows you the full list of what we would hold about them before you confirm anything. To confirm, you tap “I’m their parent”, we email the address on your account, and consent is granted only when you click the link in that email, not by tapping in the app. A day later we email you again to say it happened, with a link to undo it. That second email exists so that if it was not you who confirmed, you find out.

What is stored in the meantime, and this is the honest version: the name, age, avatar and PIN you typed are saved as soon as you tap Add, because that is what creates the profile you are being asked to confirm. Nothing is collected from your child in that window. Until consent is granted they cannot appear on the kid app, cannot sign in, and cannot do a chore. If you never confirm, we erase their name, age and PIN after fourteen days and the profile with them, automatically, whether or not you tell us.

What we collect from a child, and why. A first name or nickname, an age, an avatar and a PIN, so the app can tell your children apart and let the right one in. Then what they do: chores ticked off, points earned, rewards chosen, and any chore photo. We do not ask a child for anything we do not need to run the app, and we never require a child to disclose more than is reasonably necessary in order to take part.

The kid app asks your child to type nothing at all. There is no message box, no comment field, no name field. Chores are tapped, the PIN is a keypad, and feedback is a choice of faces. That is a deliberate design decision, and it is why there is no route by which a child can disclose something about themselves that we did not ask for.

Nothing about your child goes to anyone else. We do not disclose a child’s information to third parties for their own purposes. The kid app carries no analytics SDK, no advertising SDK, and no tracking of any kind. There is no behavioural advertising in Achievabee, and no advertising at all.

Your rights as a parent. At any time you can review everything we hold about your child, have it deleted, and refuse to let us collect anything more. Downloading and deleting are both in Settings and take effect immediately. Removing a child removes their record. Deleting your household removes every child in it. If you would rather we did it, email privacy@achievabee.com from the address on the account.

Withdrawing consent for a child means we can no longer provide the app to them, because their profile is what the app is made of.

Chore photos

You can ask for a photo as proof on any chore. It is off unless you switch it on, chore by chore, and your child can only photograph a chore you asked them to do.

A photo is only ever visible to the adults in your own household. It is stored privately, it is never public, never used for advertising, never used to train anything, and never shared with anyone outside your household.

We keep it only as long as it is doing its job. The photo exists so you can check the chore before you approve it, so the moment you approve or send the chore back it is removed from the app, and erased from storage within fourteen days. If nobody ever reviews the chore, we remove the photo anyway after fourteen days. Nothing keeps a photo of your child indefinitely.

How we use what we collect

• To run the app and keep your family’s data separate from every other family’s.
• To send you the emails the app depends on: sign-in links, co-parent invitations, and the consent request about your child.
• To take payment, if you subscribe.
• To stop abuse, which is the only reason we touch an IP address.
• To work out whether the app is helping: how families get through setup, which features go unused, whether people come back after the first week.

That last one runs mostly inside our own database, on activity like chores created and rewards redeemed. We also use PostHog, an analytics service, in the parent app and on this website. In the parent app it receives only events we name (a chore was created, a reward was approved), never what you typed, never your children’s names, chores or photos. On this website it counts page visits and which buttons get pressed. PostHog has no presence in the kid app.

The page where you confirm consent for your child carries a single-use token in its address, so we turn analytics off on that page entirely and strip the token from the address as soon as it has been read.

What we never do

• We never sell personal information, and we never share it for cross-context behavioural advertising.
• We never show advertising in either app, or allow anyone else to.
• We never use your family’s data, or your children’s photos, to train machine-learning models.
• We never send your family’s data to an email address other than the one on the account.
• We never ask a child for information we do not need, and we never let a child type free text.

Who else touches it

We use other companies to run Achievabee. They may only use what they receive to provide their service to us. They all operate in the United States, which is where your data is stored and processed.

• Supabase. Database, sign-in, and chore-photo storage. Holds everything the app records. United States (AWS us-east-1).
• Vercel. Hosts this website and the parent web app. United States.
• Resend. Sends our email: sign-in links, co-parent invitations, and the consent request we send you about your child. United States.
• Stripe. Takes payment on the web. They receive your card details directly; we never see or store a card number. United States.
• Apple. Takes payment for purchases made inside the iPhone app, under Apple's own terms. United States.
• RevenueCat. Tells us whether an App Store purchase is active. Receives a household identifier and the purchase, not a name or a card. United States.
• Google. Only if you choose to sign in with Google. Gives us your name, email and profile picture, and nothing else. United States.
• PostHog. Counts feature use in the parent app and page visits on this website. Never receives a child's name, chore or photo. United States.
• Cloudflare. Runs the achievabee.com domain name. United States.

Only Supabase, the one that stores the data, receives anything connected to the kid app, and that is because it is the database the app talks to.

We may also disclose information if the law requires it, or to protect someone’s safety. If Achievabee is ever sold or transferred, your data would move with it, and we would tell you before that happened.

How long we keep things

Most of what we hold lasts as long as your account does. Some things go sooner, on a timer, whether or not you do anything:

• A chore photo your child took. Removed from the app the moment you approve or send the chore back, and erased from storage within 14 days either way, even if nobody ever looks at it.
• The IP address recorded when you set up your child's device. About 24 hours.
• Messages the app generated for your child. About 90 days.
• A used device setup code. About 30 days.
• The record that a parent opened the app on a given day. About 365 days.
• A child added but never confirmed by a parent. Their name, age and PIN are erased after 14 days, and the profile with them.
• An invite request, if you asked for one. Deleted 90 days after we last hear from you; the IP address is cleared after 30.
• Everything else: your household, your children, chores, points, badges, rewards. For as long as your account exists. Erased when you delete it, with no copy kept.

We say “about” because these run as a daily tidy-up, so something can outlast its date by a day.

One thing outlives your account, and we would rather say so than let you discover it. Records of payments are kept for seven years, because tax and accounting law requires it. They are kept by us, with your household no longer attached to them, and by our payment providers, who keep their own record of the card and email used. Nothing else survives.

Your choices

These are yours wherever you live. We are not offering them because a particular law makes us; the app is built to do all three.

• See everything. Settings has a download that produces everything we hold about your household, every child included, as a single file.
• Correct it. Names, ages, avatars, chores, points and rewards are all editable in the app. Anything you cannot reach, email us.
• Delete it. Settings deletes your account. It takes effect straight away: your household, every child in it, their chores, points, badges and photos, and every sign-in are erased. There is no grace period and nothing to restore afterwards. Download first if you want a copy.
• Stop us collecting more about a child. Remove the child, or delete the household.

If you are paying, your subscription is cancelled before anything is removed, so you are not billed again. We do not refund the remainder of a month you have already paid for.

We will not charge you for any of this, and we will not ask you to explain why.

If you can’t get into your account

Downloading your data and deleting your account both live in Settings, which is no help if you cannot sign in. Email support@achievabee.com and we will sort it out, usually by getting you back into your account, which is quicker than anything we can do by hand.

If you cannot receive email at the address on the account, we will ask you a few questions only the account holder would be able to answer. We will not ask for your child’s PIN and we will not ask you to send identity documents. One thing we hold to firmly: we will never send your family’s data to an address that is not the one on the account. It is your children’s information, and that rule is what protects it from someone pretending to be you.

We aim to reply within three days and to finish within thirty.

Security

Data is encrypted in transit and at rest. Every request is checked against the household it belongs to at the database itself, so one family cannot reach another’s data even if the app has a bug. Passwords and PINs are hashed. Chore photos are stored privately and served only through short-lived links.

No system is perfect, and we would rather say that than claim otherwise. If you find a security problem, email support@achievabee.com and we will take it seriously.

Where your data is

Achievabee is operated from the United States and all data is stored and processed there. The apps are currently offered in the United States only.

California

We do not sell personal information and we do not share it for cross-context behavioural advertising, as those terms are used in California law, and we never have. California residents can exercise the access and deletion rights described above; the app provides both directly, and we will not treat you differently for using them.

Changes to this policy

If we change this policy we will update the date at the top. If a change materially affects what we collect about a child, we will email you and ask for your permission again before it takes effect. We will not treat consent you gave for one thing as consent for another.

How to reach us

Questions about this policy, or to exercise any right in it: privacy@achievabee.com. Anything else: support@achievabee.com.