The short version, in large type.

Doozy operates the Doozy iOS app and the website meetdoozy.com. You can reach us at any time via the contact form.

[Company identity and jurisdiction — to be completed by counsel.]

• From parents: your account email, your household configuration, the chores and prizes you create, and your subscription status (handled by Apple — we never see your payment details). You sign in with Sign in with Apple; if you choose Apple's Hide My Email, the email we receive is an Apple private relay address, not your real one — that's fine with us.
• From kids: nothing. Kids are profiles you create — a display name and an age band, both entered by you, the parent. There is no email, no birthday, no location, and no name a child types in themselves. Kids' devices pair with a short code issued from your device; kids hold no accounts and no credentials.
• Proof photos: taken by your family's devices so you can approve one chore. Location metadata is stripped, and the photo is encrypted on the device before it is ever stored. Photos are readable only inside your household's app and are automatically and permanently deleted within one hour of your approve-or-reject decision.

• No advertising — in the app or aimed at your family.
• No sale or sharing of your data with data brokers, ever.
• No third-party SDKs in the app — zero. No trackers, no analytics, no advertising code.
• No behavioral profiling of parents or children.
• No collection of precise location — from anyone, including kids.

Doozy is parent-directed. The account holder is always a parent, and every child profile is created by that parent. We do not knowingly collect personal information from children under 13 — the architecture makes it impossible: a display name and an age band, both parent-entered, are the entire footprint of a child in Doozy.

Your parental rights to review or delete any information associated with a child are exercised simply: delete the profile or the household, and everything associated with it is gone.

meetdoozy.com runs no analytics and no tracking at launch — no tracking cookies, no advertising pixels, no session recording, nothing. If we ever add measurement, it will be privacy-preserving only (Plausible or Fathom), decided in the open, and this page will be updated first — never a quiet addition.

Your family's content — chores, prizes, and proof photos — is stored with Apple, on Apple's CloudKit infrastructure, not in a Doozy database. Photos and every free-text field are encrypted on your family's devices with a key that belongs to your household before they are stored, and everything is encrypted in transit.

Doozy operates one small coordination service that referees the game: it issues pairing codes, decides spin outcomes, and enforces deletion schedules — including the one-hour photo purge. It holds only what that job requires: household identifiers, timezones, hashed pairing codes, device registrations, and household keys. No Doozy server holds your family's content at rest — no photos, no chore text, no prizes.

Providers: Apple (CloudKit, in Apple's data centers) stores your family's content; the hosting provider of our coordination service holds only the pairing and scheduling data described above.

You can delete your household and all associated data from within the app, or by messaging us via the contact form. Deletion is complete — including any proof photos not yet purged.

This policy is dated and revised in the open. Material changes are announced in the app to parents before they take effect.

Questions, requests, or concerns about privacy: the contact form.