KidsEarnIt App Privacy Policy

Effective Date: October 24, 2026

This Privacy Policy describes how Courtet Labs ("we," "us," or "our"), trading as the creators of KidsEarnIt, handles information in connection with your use of the KidsEarnIt mobile application (the "App").

Our core philosophy is to empower families while ensuring the highest standard of data privacy. We achieve this through client-side encryption, deliberate data minimization, and a "Zero-Knowledge" architecture regarding your personal family records. Sensitive information is encrypted directly on your device before it is transmitted to or stored on cloud infrastructure, making it unreadable to us.

We handle information across five distinct categories:

The following information is always encrypted on your device using keys accessible only to authorized family members. We cannot read or decrypt this data. It is synchronized via Google's Firebase Realtime Database exclusively to keep your authorized family devices up to date:

• Family and user display names
• Payee (child) names
• Financial ledgers (balances, savings, allowances, goals)
• Task and activity records (descriptions, reward values, completion statuses)

To provide authentication, handle support, and ensure reliable app delivery, we use the Google Firebase platform. Firebase administrative consoles make a minimal amount of operational data visible to us:

• Account Email Address: Visible within the Firebase Authentication console to verify account status, assist with account recovery or deletion requests, and troubleshoot sign-in failures.
• User Identifier (UID): A unique, pseudonymous alphanumeric identifier generated by Firebase Authentication. Visible in administrative consoles and used when you submit a support or credential reset request to identify the correct account node.
• Device Push Token (FCM Token): An anonymous, rotating token assigned by Firebase Cloud Messaging used solely to route system push notifications (e.g., chore approval alerts).

• Account Sign-In Password: Handled entirely by Firebase Authentication. We never receive, process, or store your cloud account password in plaintext.

To support shared household devices—such as a wall-mounted or kitchen-table tablet running Family Hub Mode—parents may configure access protections directly on the hardware:

• Parental PIN & Local Recovery Password: To restrict parent-only controls and approve chores, parents can create a local Parental PIN and an optional offline PIN Recovery Password.
• Hardware-Backed Device Encryption: These credentials are encrypted using AES-256-GCM with a dedicated cryptographic key generated and isolated inside your device’s hardware-backed Android KeyStore (Trusted Execution Environment / StrongBox). Encrypted payloads are stored strictly within local app storage (SharedPreferences).
• Zero Cloud Transmission: These credentials and keys are never transmitted, uploaded, or synchronized to Firebase or any cloud infrastructure.
• Device Isolation: Keys generated in the hardware KeyStore cannot be extracted or transferred off the physical device. A PIN set on a Family Hub tablet exists exclusively on that physical hardware and does not sync to parents' personal phones.
• Assisted Emergency PIN Reset: If an account holder forgets both their Parental PIN and recovery password, they may submit a verification request via their registered email address including their Firebase UID. Upon verification, an administrator can set a temporary, one-time administrative reset flag within your family’s secure account node. This operational signal authorizes your local device to clear its locked KeyStore preferences so a new PIN can be created. This process never exposes, transmits, or decrypts your private family data or credentials.

• No Task or Environment Photography: KidsEarnIt is intentionally architected to exclude visual surveillance of your home. We do not support, collect, process, or store photographs of your physical environment, personal belongings, or "proof of work" images.
• Restricted Camera Scope: Camera access, if granted, is used strictly and ephemerally on the local device for scanning family setup QR codes. No photos, camera feeds, or visual media are ever uploaded to cloud servers.

To maintain, monitor, and secure the KidsEarnIt service, designated administrators have access to Google Firebase infrastructure. We operate under three strict commitments:

1. Purpose Limitation: We access backend systems solely for operational necessities—including system health monitoring, debugging platform faults, complying with statutory legal obligations, or executing explicit account-holder support requests (such as setting an authorized one-time credential reset flag upon explicit request).
2. Data Minimization: Backend systems are architected so that administrative personnel cannot access, view, or reconstruct your decrypted family data.
3. Confidentiality: We will never attempt to circumvent client-side encryption or access user cryptographic keys.

Information collected is processed solely to operate the App's core services:

• To Deliver App Functionality: Encrypted records are decrypted locally in-memory on your device to display family chores, balances, and profiles.
• To Authenticate Account Holders: Firebase Authentication validates your email address and primary account credentials.
• To Synchronize Family Devices: Firebase Realtime Database securely routes encrypted payloads between devices registered to your Family ID.
• To Send Administrative Alerts: Serverless cloud functions dispatch generic push alerts (e.g., notifying parents of a submitted chore).
• To Protect Administrative Features: Hardware-backed credentials verify parent authority locally on the device before unlocking Family Hub parent controls. Session authentications exist purely in volatile memory and expire automatically after periods of inactivity.

We do not sell, rent, monetize, or trade your personal or family information. We share or disclose data only under these narrow conditions:

• Infrastructure Providers: We rely on Google Cloud / Firebase for database hosting, cloud compute functions, and user authentication. Use of these underlying services is governed by Google’s Privacy and Terms.
• Authorized Family Members: When an account administrator generates an "Invite to Family" code, authorized family members joining via that code gain access to the shared, encrypted family database.
• Legal Compliance & Safety: We may disclose the limited data visible to us (such as your account email or UID) if required to comply with a valid court order, subpoena, or applicable statutory law, or to protect the vital safety of individuals.

• End-to-End Client-Side Encryption: Sensitive family data is encrypted before leaving the device and remains encrypted at rest on cloud servers.
• Hardware-Enclave Credential Security: Parental PINs and recovery passwords are encrypted with AES-256-GCM via the Android KeyStore, isolated in device hardware, and protected against automated brute-force attacks via exponential backoff lockouts.
• Granular Database Rules: Firebase database rules strictly enforce Family ID isolation, ensuring no family group can read or write to another family's data.

• Active Family Accounts: Encrypted family data is maintained for the operational duration of your account.
• Family Account Deletion: An account holder can permanently delete their family account at any time within the App. This action immediately and irreversibly wipes all synchronized family data from cloud databases and deletes the associated authentication record.
• Activity Log Pruning: To enforce data minimization, activity logs are automatically purged after 6 months.
• Local PIN & Credential Erasure: Local encrypted credentials remain on the physical device until changed in settings, wiped by clearing the app's local data cache, reset via an authorized administrative recovery flag, or permanently erased by uninstalling the App.

• Family Administration: Account holders retain full control to add or remove members, or decommission the family profile entirely.
• PIN & Security Management: Parents can reset or clear their Parental PIN and recovery password directly within local app settings on each device.
• System Permissions: You may adjust device-level permissions—such as notifications and camera access (used solely for family QR-code invites)—via Android system settings.

KidsEarnIt is built specifically for household use under direct parental supervision:

• Parental Management: Accounts and child profiles can only be created and configured by an adult account holder. We do not solicit or knowingly collect personal information directly from children.
• Full Data Obfuscation: Child profile names and task records are fully client-encrypted, meaning we have no access to a child’s identity or habits.
• No Visual Profiling or Household Imagery: To safeguard child safety and domestic privacy, our system prohibits and omits image-based task submissions. We will never solicit or host digital imagery capturing a child's surroundings, habits, or likeness on our servers.
• No Behavioral Profiling or Ads: We do not track children across third-party apps, run targeted advertising, or profile child activity for commercial purposes.
• Parental Deletion Rights: Parents retain the unmitigated right to review, edit, or purge any profile or historical task entry associated with their children at any time.

We may update this policy to reflect application enhancements or regulatory changes. Any modifications will be published directly within the App alongside an updated "Effective Date."

If you have questions, feedback, or data privacy requests, reach out to us:

Quartet Labs

Email: support@kidsearnit.com