How TodoQuest holds your family's data.

1. What we collect

1.1 Information you give us

• Account email and name — via Sign in with Apple. We see only the attributes you choose to share.
• Family name — a label you set for your household (e.g. "민호네").
• Kid profile data — name, grade, avatar, current coin balance, streak count. You enter these and can edit or delete them at any time.
• Missions and rewards you create — title, icon, coin value, time slot, recurrence.
• Mission completions — timestamps, coin awarded, and an optional photo if the mission has photo proof turned on.
• Reward redemptions — when your kid spent coins on a reward you defined, and whether the IOU has been fulfilled.
• Daily review entries — kid's star rating and optional message, parent's star rating and optional message.
• Family settings — notification times, IOU overdue threshold, theme choice, language preference, parent-lock state.
• Subscription receipts — when you purchase Premium, Apple sends us a transaction receipt and entitlement state.

1.2 Information collected automatically

• Anonymous installation ID — used to sync your data to your iCloud account and prevent duplicate accounts.
• Diagnostic data — crash reports and basic performance metrics, anonymized. Apple-provided unless you opted out in iOS Settings.

1.3 What we do not collect

• We do not collect your location.
• We do not access your contacts, your camera roll beyond the photos you intentionally attach to a mission, or your microphone.
• We do not include advertising SDKs and do not perform cross-app tracking.
• We do not collect HealthKit data.
• We do not use mission completions, photos, reviews, or any kid-generated content to train AI models.
• We do not sell, rent, or share your data with third parties for advertising.

2. How we use your information

We do not sell or rent your data. We do not use your photos, missions, completions, or kid messages to train any AI model.

3. Photos & other sensitive data

Photo proof is per-mission opt-in, off by default. When you turn it on for a specific mission, your kid attaches a photo when completing it. We handle those photos as follows:

• Photos are stored as binary attachments to the Completion record in your family iCloud only, accessible to the admins (parent / grandparent) you have invited.
• Photos are auto-deleted after 30 days, even if the mission still exists.
• Photos are never sent to our servers, to an AI inference provider, to an advertising network, or to any other third party.
• The coin reward is granted at the moment the kid taps complete, not after parent review. Photos are evidence, not a gate.
• Daily review messages (kid and parent) are similarly stored only in your family iCloud, blind to the other side until both sides have submitted.

4. Children's data — PIPA + COPPA alignment

TodoQuest is designed for parents of children ages 7-9. The kid is not a separate account holder; the kid is a profile inside the parent's family on the parent's Apple ID. All data about the kid is collected by the parent on the kid's behalf.

• Under Korean Personal Information Protection Act Article 22-2, processing of personal data for children under 14 requires legal-guardian (parent) consent. The parent provides this consent during onboarding before any kid profile is created.
• Under the US Children's Online Privacy Protection Act (COPPA), we treat kid profiles as guardian-managed. We do not collect personally identifiable information from the child directly; the parent enters profile data and reviews any photos.
• We do not show advertising to kids. We do not run analytics that identify or track kids individually.
• The parent can delete the kid's entire profile and all associated data from Family → Edit kid → Delete at any time.

If you believe a child's data has been collected without proper guardian consent, contact us at support@vibeland.app and we will delete it within 30 days.

5. Third-party services

We rely on a deliberately small set of processors:

We do not use third-party advertising networks, analytics SDKs that track users, or any AI inference provider. Family data does not leave Apple's infrastructure.

6. How long we keep your data

• Family profiles, missions, rewards, completions, daily reviews — kept while your account is active. Deleted within 30 days of account deletion.
• Photo proof — auto-deleted 30 days after the completion that attached it.
• Diagnostic data — handled by Apple per their retention policy; we do not store it ourselves.
• Subscription receipts — kept as long as required for tax and audit (typically 7 years).

7. Your rights

You can, at any time:

• See what data lives in the app — every screen in TodoQuest shows your data directly. You can also request an export by emailing support@vibeland.app.
• Delete your account and all associated data — go to Settings → Sign out → Delete account in the app, or email us. We delete within 30 days.
• Correct inaccurate data — directly in the app, or via email.
• Object to specific uses — explain in your message which use and we will explore alternatives.

EU/UK residents have additional rights under GDPR/UK GDPR including the right to lodge a complaint with your data-protection authority. California residents have CCPA rights to know, delete, correct, and limit sharing of personal information; we do not sell or share personal information for advertising. Korean residents have rights under PIPA including access, correction, deletion, and the right to withdraw consent.

8. International transfers

Family data lives in your iCloud account; the storage region follows Apple's default for your Apple ID. We do not transfer data to other regions ourselves. If you use the app outside the US, your data is processed under Apple's data-protection framework with appropriate safeguards (Standard Contractual Clauses where required for EU/UK users).

9. Security

We use industry-standard encryption in transit (TLS 1.3) and at rest (CloudKit). Your family data lives in your private CloudKit database and the shared zone, accessible only to your iCloud account and the admins you invited via Apple Family Sharing-style CKShare invitation. No system is perfect — if you suspect a breach, please contact us immediately.

10. Changes to this policy

We may update this policy as the app evolves. Material changes are announced inside the app and via the email on file at least 30 days before they take effect. The "Effective date" at the top reflects the version currently in force.

11. Contact

Codeful
110, Misagangbyeonhangang-ro
Hanam-si, Gyeonggi-do 12904
Republic of Korea

Email: support@vibeland.app
For data-protection inquiries: support@vibeland.app