What we collect
Sign-in identity from Google (name, email, avatar). Family data you create inside the app: family name, member names and ages, chores, rewards, routines, points, streaks, calendar entries, and uploaded images for chore proof or homework.
Hub kiosk pairing produces a device token tied to your family. That's it.
What we never collect
We don't collect kid email addresses, phone numbers, or geolocation. Kids sign in with a PIN against a row we already have, so there is no separate kid account.
We don't run third-party analytics or ad trackers. No Google Analytics, no Meta Pixel, no session-replay tools.
What we never send to AI providers
Chicknz uses Claude (Anthropic) for chore parsing, weekly summaries, story generation, and homework extraction. Two hard rules:
- Journal entries and mood notes never leave our database. They are not sent to any LLM.
- Kid PINs, photos, email addresses, and avatar URLs are never included in prompts.
Prompts contain only the structured fields needed for the feature: chore titles, schedules, points, streak counts, rotation slots.
Google Calendar and Sheets access
If you connect a Google account, chicknz requests two read-only scopes. Here is exactly what each one does.
- Google Calendar (read-only). We read your calendar events so they show up alongside your family events on the calendar dashboard, and so the AI homework scheduler can treat busy calendar blocks as unavailable time. We never create, edit, or delete anything in your Google Calendar.
- Google Sheets (read-only). If you choose to import a spreadsheet, we read the values from the sheet you select to bring your existing chore or schedule list into chicknz. We never write to the sheet.
OAuth access and refresh tokens are encrypted at rest with AES-256-GCM (a random initialization vector and authentication tag per token, stored as a single encrypted value) before they touch our database. Calendar event data is cached transiently and cleared when you disconnect.
You can disconnect anytime from Settings → Integrations → Google. Disconnecting revokes the token at Google and deletes what we stored for it.
Google API Limited Use
Chicknz's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Where data is stored
Postgres on a managed provider in the United States. Uploaded images are stored in Vercel Blob with public-by-default URLs scoped to long random paths.
Your data, your call
Email hello@chicknz.app to export everything we have on your family or to delete it permanently. Account deletion is permanent and cascades to every family member, chore, reward, and uploaded image.
Changes to this policy
We'll update this page when the answer to any of the above questions changes. The "last updated" date at the top reflects the most recent material change.