Privacy Policy

Effective: March 30, 2026

Overview

TreatJar ("we," "us," or "our") is a family chore and reward management app. This policy describes how we collect, use, and protect information for parent account holders and the child profiles they create. By creating an account, you agree to this policy.

Who Can Create an Account

You must be at least 18 years old to create a TreatJar account. Only parents, legal guardians, or authorized caregivers may create accounts and manage child profiles. By creating a child profile, you represent that you are the child's parent or legal guardian and consent to our collection of the child's information as described below.

What We Collect

TreatJar collects the minimum information needed to provide our service:

Account information: Parent email address, display name, and authentication credentials (password or Apple Sign In token)
Family data: Children's first names, age ranges (age tiers: 3–4, 5–6, 7+), and avatar preferences (icon and color selections)
App usage: Stars earned, jobs completed, rewards redeemed, goals set, and activity history
Device information: Device type, OS version, and push notification tokens (if opted in)

Children's Privacy

TreatJar is designed for parents to use with their children. We take children's privacy seriously:

No direct collection from children. We do not collect personal information directly from children. All child profiles are created and managed exclusively by the parent account holder.
Parental consent. The parent account holder acts as the data controller for their children's information. By creating a child profile, the parent provides verifiable consent for us to store and process that child's data within the app.
Limited child data. For children, we store only: first name, age tier (not exact date of birth), avatar preferences, and in-app activity (stars, jobs, rewards). We do not collect children's email addresses, phone numbers, physical addresses, photos, precise location, or device identifiers.
No third-party sharing of children's data. Children's personal information is never shared with third-party advertisers, analytics providers, or data brokers. Children's data is used solely to provide the TreatJar service to your family.
No behavioral advertising. TreatJar does not display advertisements and does not use children's data for any form of targeted advertising.
Parental controls. Parents can view, modify, or delete any child profile and all associated data at any time from within the app. Parents may also request complete account deletion, which removes all family data including all child profiles.

How We Use Your Data

To provide and maintain the TreatJar service
To sync your family's data across devices in real time
To send notifications you've opted into (streak reminders, approval requests)
To process account management requests (password resets, data exports, account deletion)
To improve the app experience

We do not sell, rent, or trade any user data — adult or child — to third parties.

Data Storage & Security

Your data is stored securely on Supabase (hosted on AWS in the United States) with row-level security policies ensuring each family can only access their own data. All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Authentication is managed through Supabase Auth with secure token handling.

Third-Party Services

We use the following third-party services to operate TreatJar:

Supabase: Database, authentication, and real-time sync. Supabase Privacy Policy
Apple: App Store distribution, Apple Sign In, and StoreKit for subscriptions. Apple Privacy Policy
Resend: Transactional email delivery (password resets, account confirmations). Resend Privacy Policy
Amazon Associates: Parents may add product links to the family reward store. When a product is purchased through an Amazon link in TreatJar, we may earn a small affiliate commission at no additional cost to you. Amazon's own privacy policy governs any purchases made on amazon.com. No children's data is shared with Amazon.

None of these services receive children's personal information for their own use. Data shared with these services is limited to what is necessary for their specific function (e.g., Supabase stores family data, Resend delivers emails to parent addresses only).

Your Rights

You have the following rights regarding your data:

Access & Export: You can export all of your family's data in JSON format at any time from Profile > Preferences > Export My Data.
Correction: You can edit any child profile, behavior, job, or reward directly within the app.
Deletion: You can delete your account and all associated family data from Profile > Delete Account. Deletion includes a 30-day grace period during which you can cancel the request. After 30 days, all data is permanently and irreversibly removed.
Withdraw consent: You can remove any child profile at any time, which deletes all data associated with that child.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

The right to know what personal information we collect, use, and disclose
The right to request deletion of your personal information
The right to opt out of the sale of personal information — we do not sell personal information
The right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at hello@treatjar.app.

Data Retention

We retain your data for as long as your account is active. Upon account deletion, all data is permanently removed within 30 days. We do not retain anonymized or aggregated data derived from your account after deletion.

Changes to This Policy

We will notify you of significant changes via email or in-app notification at least 14 days before they take effect. Continued use of TreatJar after changes constitutes acceptance. The "Effective" date at the top of this page reflects the most recent update.

Contact

Questions about this policy or your family's data? Email us at hello@treatjar.app