Privacy policy

Who operates this service

Yuan Shi develops and operates Bespoke Chore Checklist. Contact shiyuan07@gmail.com for support, privacy questions or requests about your information.

Information the service stores

• Account information: login name, a password hash, account identifiers and an email address if you provide one, along with its verification state.
• Family information: family name, selected icon and time zone; member names, roles, selected icons and colors; and account or profile links.
• Board activity: chore titles, schedules, assignments, instructions, notes and comments; completion dates and the member who checked a chore; and saved schedule history.
• Optional points and rewards: balances, approval submissions and feedback, reward names and costs, and reward requests and their status.
• Access and request records: sign-in sessions, hashed family codes and private-link tokens, expiration dates, and request identifiers used to prevent duplicate changes.

These records are stored in the service's database on the operator's hosted NAS server. The app uses them to sign you in, maintain your family board, sync changes between devices and provide the features you select.

Who can see family information

Accounts in the same family can see that family's board and its shared activity. Parents have additional controls for profiles, chores, access links, approvals and family exports. A person with a valid family code can join that family as a regular member. Parents can revoke codes and manage access.

The operator administers the hosted database and backups. If you export a family record, share a QR code or copy a private link, the recipient or destination you choose receives that information. A downloaded or shared copy is outside the app's account-deletion controls.

The current app has no advertising, advertising identifier, cross-app tracking SDK, paid subscription or payment processing. Family information is not sent to an advertising or analytics service by the application.

Information on your device

The website uses a necessary sign-in cookie. The official iPhone app stores its sign-in token in the iOS Keychain and uses it to authenticate requests to the hosted service. Browser or app web storage remembers your display language and pending request records used to prevent duplicates. A saved reward request can include its title, cost and identifiers.

Scanning a family QR code uses the camera only when you choose that feature and allow access. A QR image selected through the iPhone photo picker is processed on the device. Camera frames and the selected QR image are not uploaded by the app; the decoded family code is sent to the service to check or join the family.

Connecting to the service exposes ordinary network information, such as your IP address, to the hosting and network services. The app stores family member names and relationships that you enter on your board. It does not read your device's address book or request your precise location or date of birth.

Email and support messages

When outgoing email is enabled, the configured email provider handles recipient addresses and messages for invitations, verification, password recovery and test emails. These messages may contain private, expiring links. Email features can be unavailable when the service has no outgoing email configuration.

If you contact support, your email provider and the operator's Gmail inbox process the address and message you send. Send only the information needed to explain your request.

Security

The public service uses HTTPS. Passwords are stored as salted hashes, and sign-in and private-link tokens are stored as hashes in the server database. Access checks separate families and restrict parent actions. These controls do not make the database, backups or shared files end-to-end encrypted.

Deletion and retention

You can delete your account in Setup → Account → Delete account by confirming your current password. This removes your sign-in credentials, sessions and account access links, as well as your owned or linked profiles' checklists, history and reward activity and comments you authored. If another account remains, its account, checklist, shared chore templates and shared reward catalog remain. Anonymous references needed for another member's existing approval history can remain.

Deleting the final sign-in account removes the family's active board data. Deactivating a profile or archiving a chore is a separate action that keeps history; it is not account deletion.

Operational backups can contain earlier account and family records. The managed NAS backup system records each snapshot's original capture time and applies a 30-day expiry to supported restores. Deletion records are kept separately from the account database so that restoring an older snapshot removes previously deleted accounts again before the service starts. These records contain internal account, profile and family IDs, a deletion time and restore safeguards; they do not contain names, email addresses, passwords, chores or messages.

Automatic managed NAS backup cleanup is not yet active in this deployment. Existing operator backups can therefore remain until the operator handles them separately. Account deletion still records restore protection. Contact support to request removal of retained operator copies.

Previously exported or shared files are outside the app's deletion controls. Operator-managed offline copies require separate handling. Contact shiyuan07@gmail.com for requests or questions about those copies, or a profile without a sign-in account.

Parents can create member profiles for their family. Use only the names and details needed for the board, and avoid putting sensitive information in chore notes or comments.

Changes to this page

The updated date above identifies this policy version. Changes to the service's data handling will be reflected on this page.