Privacy Policy

PrettySure brings family tasks, learning practice, and rewards into one place. This policy explains the information used to do that. The service is operated by PrettySure. Adults manage family accounts; children use a parent-selected profile on the web or a paired Kids device. The Children's Privacy notice gives additional information about children under 13.

The short version

• We do not sell personal information or use it for advertising.
• We use activity records to show progress and personalize practice and supported task suggestions. This is information about your child, even when it contains no surname.
• Parents control family membership, task expectations, rewards, and optional sharing.
• Reading aloud means audio playback, not microphone recording.
• Photo quests are for parent review. They are not a family photo archive.

Information you provide

• Adult accounts: email address, name, family name, sign-in credentials handled by our authentication provider, policy acceptance records, invitations, and notification preferences.
• Child profiles: a first name or nickname, age in years, avatar and color, and school/pre-reader settings entered during setup. We do not ask for a child email address or exact birth date. Please use a nickname if you prefer.
• Family plans: tasks, schedules, reading goals, skills, reward descriptions, allowance tracking amounts, chore steps, and your family time zone. Free-text fields may contain personal details you choose to enter.
• Optional sharing: caregiver invitation addresses, class membership, shared week cards, and a reward sponsor name and email address when you use those features.
• Support: messages and any attachments you send us. Please avoid sending unnecessary information about a child.

Information from using the app

• Practice and progress: quiz answers and results, reading and typing sessions, books and lessons completed, check-ins, task attempts, timestamps, parent reviews, streaks, and reward history.
• Adaptive features: recommendations shown, acceptance or dismissal, partial and completed steps, parent-approved changes, completion timing, and estimates derived from those events. The particular records depend on which features are enabled.
• Quest photos: images submitted for a photo task and the associated review status. Photos may contain a person or private background details; photograph the completed task and keep identifying details out of the frame.
• Device and service data: account and child identifiers, paired-device tokens, notification registration tokens where configured, browser storage, IP addresses, request metadata, and performance measurements. These support access, delivery, troubleshooting, and security.
• Billing: subscription and transaction identifiers and status when billing is enabled. Payment providers handle payment details; PrettySure does not store full card numbers.

How personalization works

Activity helps select practice difficulty and, where enabled, suggest manageable chore steps or reminder times. A child completing part of a task is recorded as partial progress; the system cannot know whether a pause means distraction, frustration, tiredness, or something else. These are task-planning estimates, not diagnoses or judgments about a child.

Learned reminder times use recorded activity and your family time zone within parent-approved hours. They do not require GPS or knowing where a child is. The profile does include parent-entered school and pre-reader settings; that is different from monitoring school attendance or whereabouts.

Parents approve proposed changes to chore steps and progression. A verified starting step does not count as the whole chore or unlock its full reward. Optional adaptive features have their own controls. Pausing suggestions does not erase work already accepted.

Current chore personalization uses the child's own history. Cross-household learning is not activated for this feature. Removing names from activity does not by itself make it anonymous. Any future sharing of learning signals across households needs its own privacy review, notice, and any required consent before activation.

We do not send children's photos or task activity to general-purpose AI chat services to generate these recommendations. We do use algorithmic models for the personalization described here; we do not claim that no learning models are used.

Who can see information

• Adults in your family: invited adult accounts can access the family's children, plans, progress, pending photos, and settings. Invite only people you authorize to have that access.
• A teacher you choose: joining a class shares the child's first name or nickname, reading minutes, days read, and finished book titles with that class's teacher. Leaving removes the child from the live roster. A teacher may already have downloaded or printed a reading log.
• Recipients of a week-card link: a parent-created card can show the child's first name, avatar, week, progress, reward or allowance amount, reading minutes, streak, and skill highlights. Anyone with the link can view or forward it. It is not a private login-protected family page.
• A reward sponsor you name: a reward notification can include the child's name, earned reward, progress, and a week-card link. The sponsor address is used to send that message, not added to a marketing list.
• Service providers and authorized operations: information is processed as needed to host, secure, support, and deliver the service. It may also be disclosed where legally required or necessary to address abuse or protect safety.

No child-to-stranger chat or searchable child directory is offered. Optional class, sponsor, and link sharing are exceptions to family-only visibility. Consider what a recipient can keep before sharing; revoking access cannot erase their screenshots or downloaded copies.

Providers and connected services

• Supabase: authentication, database records, server functions, and private quest-photo storage.
• Vercel: web hosting and content delivery. Optional Web Analytics and Speed Insights components are disabled in this revision. Hosting and security services still process technical request information; this does not mean that no logs exist.
• Resend: transactional email delivery, including family notifications and sponsor messages when configured. Message content may include names and progress.
• Stripe and app stores: adult subscription processing where available. Store distribution and billing are subject to the relevant store's terms.
• Apple and Google notification services: device tokens and notification payloads where mobile delivery is enabled. Delivery also depends on device permissions and platform configuration.
• Voice assistants: if a supported integration is enabled and linked, the assistant provider processes your spoken request under its own policy. PrettySure receives the request information needed to answer it, not the microphone recording.

Read-aloud uses prerecorded app content or device speech synthesis. A child's name and personalized spoken lines use the device voice. Playing a story does not record a child. The service does not request precise device location, address-book access, or biometric templates; device Face ID authentication does not send us a face scan.

Parent notice and consent

Account setup asks an adult to accept the policies, and family access is controlled through sign-in and pairing. These safeguards are distinct from COPPA verifiable parental consent. An email confirmation or checkbox alone is not evidence that every required verification step has been completed. Our Children's Privacy notice explains this distinction and the choices parents have.

Retention and deletion

Profile, plan, practice, and reward records support your family's account and progress history. Retention must be tied to that purpose rather than keeping child information indefinitely simply because an account exists.

Photos: the review-and-destroy design removes an image at parent review and expires unreviewed images at weekly rollover, with a maximum intended lifetime of one week. The approval or rejection record remains for progress history. This depends on successful storage deletion and scheduled cleanup; photos are not intended for long-term records.

Adaptive history: some completed intervention and chore records have 90-day cleanup rules. Open offers, current settings, model summaries, and ordinary progress records have different purposes; the 90-day rule is not a promise that all family data disappears after 90 days.

Family deletion: removing a child is intended to remove associated child records and photos. If another adult remains in the family, deleting your adult account leaves the family with that adult. The last adult's account deletion is intended to remove the family and its photos. Contact us for a child-data request if simply leaving a shared account would not achieve what you need.

Provider backups and records that must be retained for legal obligations require separate handling. Contact us for details about your request; we do not promise that a button instantly removes every backup or a recipient's copy.

Your choices and requests

Use Data & privacy to download the available account export or request account deletion, and child settings to manage a profile. Contact us to review, correct, delete, or stop further collection or use of your child's information, including information not included in the downloadable export. We may verify your authority before fulfilling a request. Do not send identity documents in an ordinary support email.

You can leave a class, revoke a shared week card where offered, unpair devices, and change optional notification and adaptive settings. Some functions cannot work without the information they need. Children should not have to provide more information than is reasonably necessary for an activity.

Security, regional rights, and updates

Family access checks, database row-level security, private photo storage, and scoped device credentials help protect information. They do not make any service immune to errors or unauthorized access. See Security for more detail.

Depending on where you live and which laws apply, you may have additional rights to access, correction, deletion, portability, restriction, objection, withdrawal of consent, or a complaint to your regulator. Contact us to exercise them. Service providers may process information outside your country; applicable transfer arrangements and local launch requirements need to be confirmed for the regions served.

See our Cookie Policy for browser storage and analytics. Material changes to these practices require notice and, where required, new parental consent before the changed collection, use, or disclosure begins.

Contact

Privacy requests: privacy@prettysure.io. Account help: support@prettysure.io.