← Back to TreatJar
Privacy Policy
Effective: July 15, 2026
Overview
TreatJar ("we," "us," or "our") is a family chore and reward management app owned and operated by Cubed Ventures. This policy describes how we collect, use, and protect information for parent account holders and the child profiles they create. By creating an account, you agree to this policy.
TreatJar is a parent-directed family app. It is purchased and fully operated by an adult account holder (18 or older). Children do not create accounts or use TreatJar independently; a parent sets up the family, controls whether a child view is available, and approves every action a child takes. Because a parent may provide personal information about their children under 13 when setting up profiles, we handle that information in accordance with the United States Children's Online Privacy Protection Act (COPPA), 15 U.S.C. §§ 6501–6506, and the implementing FTC rule at 16 CFR Part 312.
Operator
TreatJar is owned and operated by Cubed Ventures, an S-corporation registered in the State of Texas. You can reach the operator at:
Who Can Create an Account
You must be at least 18 years old to create a TreatJar account. Only parents, legal guardians, or authorized caregivers may create accounts and manage child profiles. By creating a child profile, you represent that you are the child's parent or legal guardian and consent to our collection of the child's information as described below.
What We Collect
TreatJar collects the minimum information needed to provide our service:
- Account information: Parent email address, display name, and authentication credentials (password or Apple Sign In token)
- Family data: Children's first names, age ranges (age tiers: 3–4, 5–6, 7+), and avatar preferences (icon and color selections)
- App usage: Stars earned, jobs completed, rewards redeemed, goals set, and activity history
- Product photos: Photos a parent uploads to represent reward-store items, stored securely in our backend (Supabase). These are parent-provided product images, not photos of children.
- Device information: Device type, OS version, and push notification tokens (if opted in)
Children's Privacy
TreatJar is designed for parents to use with their children. We take children's privacy seriously and comply with COPPA:
- No direct collection from children. We do not collect personal information directly from children. All child profiles are created and managed exclusively by the parent account holder.
- Limited child data. For children, we store only: first name, age tier (not exact date of birth), avatar preferences, and in-app activity (stars, jobs, rewards). We do not collect children's email addresses, phone numbers, physical addresses, photos of children, precise location, or persistent device identifiers. (The only images TreatJar stores are product photos a parent chooses to upload for reward-store items.)
- No third-party sharing of children's data. Children's personal information is never shared with third-party advertisers, analytics providers, or data brokers. Children's data is used solely to provide the TreatJar service to your family.
- No behavioral advertising. TreatJar does not display advertisements and does not use children's data for any form of targeted advertising.
- Parental controls. Parents can view, modify, or delete any child profile and all associated data at any time from within the app. Parents may also request complete account deletion, which removes all family data including all child profiles.
Verifiable Parental Consent
Because TreatJar uses children's personal information solely to provide the in-family service and does not disclose it to any third party for the third party's own use, we rely on the "email plus" verifiable parental consent method recognized under 16 CFR § 312.5(b)(2). Our consent flow works as follows:
- Account verification. The parent creates an account using a verified email address (via Apple Sign In, or via email-and-password with confirmation). During account creation, the parent affirms they are at least 18 years old and the legal parent or guardian of any child whose profile they create.
- Direct notice at child-profile creation. Before a child profile can be created, the parent is shown a direct notice in the app describing what information TreatJar will collect about the child, how that information will be used, that no personal information about the child will be shared with any third party, and how the parent can review, modify, or delete that information.
- Confirmation to the parent's verified email. After a child profile is created, we send a confirmation message to the parent's verified email address acknowledging the new profile and reminding the parent of their rights to review and delete the child's information at any time.
- Revocation of consent. The parent may revoke consent at any time by deleting the child's profile from the app, which permanently removes all personal information associated with that child within 30 days.
We will notify parents directly of any material change to our information practices affecting children and will obtain renewed consent where required by COPPA.
How We Use Your Data
- To provide and maintain the TreatJar service
- To sync your family's data across devices in real time
- To send notifications you've opted into (streak reminders, approval requests)
- To process account management requests (password resets, data exports, account deletion)
- To improve the app experience
We do not sell, rent, or trade any user data (adult or child) to third parties.
Data Storage & Security
Your data is stored securely on Supabase (hosted on AWS in the United States) with row-level security policies ensuring each family can only access their own data. All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Authentication is managed through Supabase Auth with secure token handling.
Third-Party Services
We use the following third-party services to operate TreatJar:
None of these services receive children's personal information for their own use. Data shared with these services is limited to what is necessary for their specific function (e.g., Supabase stores family data; Resend delivers emails to parent addresses only and does not receive any child personal information).
Parent Rights Under COPPA
As the parent or legal guardian of a child with a TreatJar profile, you have the following rights under COPPA:
- Right to review. You can review the personal information we have collected from or about your child at any time, directly from within the app or by emailing us.
- Right to refuse further collection. You can refuse to permit any further collection or use of your child's information by deleting the child's profile.
- Right to request deletion. You can request that we delete your child's personal information at any time, which we will do within 30 days of the request.
- Right to consent without third-party disclosure. TreatJar does not disclose your child's personal information to any third party for the third party's own use. Your consent to our collection and internal use of your child's information does not extend any right of disclosure, because we do not disclose that information externally.
Your Rights (All Users)
In addition to the parental rights above, all TreatJar users have the following rights regarding their own data:
- Access & Export: You can export all of your family's data in JSON format at any time from Profile > Preferences > Export My Data.
- Correction: You can edit any child profile, behavior, job, or reward directly within the app.
- Deletion: You can delete your account and all associated family data from Profile > Delete Account. Deletion includes a 30-day grace period during which you can cancel the request. After 30 days, all data is permanently and irreversibly removed.
- Withdraw consent: You can remove any child profile at any time, which deletes all data associated with that child.
California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- The right to know what personal information we collect, use, and disclose
- The right to request deletion of your personal information
- The right to opt out of the sale of personal information (we do not sell personal information)
- The right to non-discrimination for exercising your privacy rights
To exercise these rights, contact us at hello@treatjarapp.com.
Data Retention
We retain personal information only as long as reasonably necessary to provide the TreatJar service to your family or as required by law. Specific retention rules:
- Parent account data: Retained while the account is active. Upon account-deletion request, permanently removed within 30 days (after a 30-day grace period during which deletion can be cancelled).
- Child profile data: Retained only as long as reasonably necessary to provide the TreatJar service to the child's family. Permanently removed within 30 days of child-profile deletion or account deletion, whichever occurs first.
- Activity logs (stars, jobs, rewards, goals): Retained while the account is active to enable history views in the app. Removed with the account under the same 30-day rule. We do not retain identifiable child activity after deletion.
- Anonymized aggregates: We may retain anonymized, aggregated statistics (for example, total count of stars awarded across all users in a month) for product-improvement purposes. These aggregates cannot be linked back to any individual parent, child, family, or device.
- Inactive accounts: If an account has no login activity for 24 consecutive months, we will email the parent account holder. If there is no response within 30 days of that email, the account and all associated family data will be deleted.
Changes to This Policy
We will notify you of significant changes via email or in-app notification at least 14 days before they take effect. If a change materially affects our practices around children's information, we will seek renewed parental consent where required by COPPA. Continued use of TreatJar after changes take effect constitutes acceptance. The "Effective" date at the top of this page reflects the most recent update.
Contact
Questions about this policy or your family's data? Email us at hello@treatjarapp.com, or write to Cubed Ventures at 2403 McCall Road, Austin, TX 78703, USA.
If you believe we have not adequately addressed a privacy concern, you may also contact the U.S. Federal Trade Commission at reportfraud.ftc.gov or your state's Attorney General.