Fetchlist Privacy Policy

DRAFT for review. This is not legal advice and is not in force yet.

Effective date: [DATE, once approved]

Fetchlist is a family app for chores, rewards and the family calendar. It runs on the Family Board, a shared screen for the household that can be a wall display, tablet, computer or phone, and on parents' phones. It's published by PawForged LLC, a Washington limited liability company.

Questions or requests: [email protected]

The short version

• A parent sets up Fetchlist and controls everything in it.
• Kids don't have accounts, logins or email addresses.
• We don't show ads, we don't sell your data, and the app has no third-party tracking, analytics or crash reporting.
• You can download your family's data, or delete all of it, from the app at any time.

What Fetchlist keeps

Parents

• From Google, when you sign in: your name, your email address and your Google account ID. We use your last name to suggest a family name. We don't get your Google password, and we don't read your Gmail, contacts or Drive.
• What you add: your color, an optional photo and your board code. The board code is kept only in a scrambled form (a hash) that can't be turned back into the code.

Kids

Kids have no accounts. A parent adds each kid with:

• a name or nickname, a color and a theme
• an optional photo

We don't ask for a birthday, last name, school or email.

Fetchlist also keeps what happens in the app for each kid: tasks and whether they were done, points, rewards, paid chores, money owed, trades of points for money, and notes sent to them.

Photos and notes

Notes and photos that parents send to the Family Board are stored so the family's boards and phones can show them. Before a photo leaves your device, the app removes the information a camera saves in it, such as where and when it was taken and the camera's details. Our server checks again and removes anything left, so a photo from an older version of the app is cleaned too.

Calendars

If you add a calendar by its private link, the link is stored encrypted. Fetchlist reads that calendar every 15 minutes and keeps a copy of events from 7 days ago to 60 days ahead: their titles, times and locations. Those event details aren't encrypted by us.

Spend & Save

Fetchlist doesn't connect to any bank, card or allowance service. The Spend & Save balances you see are numbers a parent types in. We never see bank or card logins or details.

Your devices

We keep each paired Family Board's name and when it was last online. We don't collect advertising IDs or your contacts.

Notifications

If a parent turns on notifications, we keep a device token for that parent's device, so we can reach it. The token goes when the parent signs out or turns notifications off, or when Google tells us it no longer works. We keep each parent's notification choices too. Notifications go to parents only, never to a Family Board or a kid.

Recipes and settings

We keep the recipes you add, your feature choices, themes, routines and Family Board settings, including your time zone and the town you choose for weather.

Our website and the early access list

Our website, fetchlist.app, has no cookies, analytics or tracking code.

If you join the early access list there, we keep your email address, when you joined and which of the page's two sign-up boxes you used. We use your email only to tell you when Fetchlist opens up. We don't share or sell it, and we don't add it to anything else. To be taken off the list, email [email protected] and we'll delete it.

The website loads its fonts from Google Fonts, so Google sees your browser's request for them.

Services Fetchlist uses

• Cloudflare runs our server and stores your family's data and photos. Our database and photo storage are set to Cloudflare's Western North America region. Requests can pass through whichever Cloudflare location is closest to you, which may be outside the United States.
• Google handles sign-in. Google's Firebase Cloud Messaging also delivers notifications, if a parent turns them on. Each notification passes through it with its text, which can include a kid's first name or nickname and the name of a chore, reward or routine, along with the device token. On an iPhone it would also pass through Apple. We don't use Firebase's analytics.
• National Weather Service (weather.gov). Your Family Board asks for the forecast directly, using the coordinates of the town you chose. The Weather Service sees that request and your device's internet address.
• Open-Meteo. When a parent searches for a weather town, the phone sends what was typed to Open-Meteo's town search, which also sees the device's internet address.
• Your calendar provider. Our server fetches the calendar links you add. The provider sees our server, not your device.
• JokeAPI. Our server collects kid-safe jokes from it. Nothing about your family is sent.
• On the web version only: notifications also use your browser maker's push service, which carries them in encrypted form. Google's sign-in button loads from Google, and your browser may fetch fonts from Google to draw unusual characters.

What we don't do

• No ads.
• No selling or renting your data.
• No third-party analytics, advertising or tracking code, and no crash-reporting service.

Logs

Like most online services, our server keeps short-lived technical logs through Cloudflare, including internet addresses, the addresses of pages requested and the time. We use them to fix problems. To slow down password-guessing and spam, we also keep a scrambled form of the internet address behind repeated failed sign-ins, pairing attempts or early access sign-ups, for up to a day.

Who can see your data

• Your family. Parents can see everything in the family. Anything shown on a Family Board can be seen by anyone standing near it, so think about where you put it.
• Our service providers, as described above, to run the service.
• PawForged. As the people running the service, we can reach the database. We only do so to run, fix or support it, or if the law requires it.

We don't share your data with anyone else unless the law requires us to.

How it's protected

Data travels over encrypted connections. Sign-in sessions, Family Board connections and codes are stored as hashes, and calendar links are encrypted. Notes, photos, calendar events and backups aren't encrypted with a key of our own; they rely on our provider's storage protections. No system is perfectly secure. If you think something's wrong, tell us at [email protected].

How long we keep it

• We keep your family's data until you delete it. Points and money history are kept on purpose, so totals stay right.
• We keep an early access email until you ask us to remove it.
• We keep a backup of the database every week and hold the newest 8, so about two months' worth.
• A phone's sign-in lasts 90 days. After that, you sign in again.
• A Family Board or phone may keep a copy of your family's data and photos so it can work offline. Removing the app removes that copy.

Download or delete your data

In the parent app, go to Settings, then Your data.

• Download our data gives you a file with everything Fetchlist keeps for your family. Photos are listed in it, not included.
• Delete our family permanently removes every person, task, point, note and photo, signs out every device, and removes your family from our backups.

To delete one kid, go to Settings, then Family, and tap the kid.

Kids and families (COPPA)

Fetchlist is meant to be used by families, with a parent in charge. We know kids under 13 use the Family Board.

• A parent sets up everything. Only a parent can create a family, add a kid or change settings, and a parent chooses whether a kid can change their own theme. Kids can't create accounts, and we don't ask kids for personal information.
• What we keep about a kid is listed under "Kids" above. A parent provides the name, color and any photo. What a kid does on the Family Board, like checking off a task, is recorded for that family.
• How it's used. Only to run the app for your family. Never for ads, and it's never sold.
• Review it. A parent can see a kid's tasks, points and history in the app at any time, and can download all of it from Settings, then Your data.
• Change it. A parent can change a kid's name, color or photo, or remove the photo, by tapping the kid in Settings, then Family.
• Delete it. A parent can delete one kid and all their data in the app: tap the kid in Settings, then Family, then choose Delete and type their name. That permanently removes their points, money, history, tasks, chores, rewards, trades, notes and photos sent only to them, and takes them out of our backups. A photo that's also in the family's photo frame stays until a parent removes it. Remove is the gentler choice: it takes a kid off the Family Board but keeps their points, money and history, and a parent can still delete them later from the same screen. Deleting the whole family is also immediate, from Settings, then Your data.
• Stop collection. A parent can remove a kid or delete the family at any time. Fetchlist then stops collecting anything about them.

Changes to this policy

If we change this policy in a way that matters, we'll update the date above and tell you in the app before it takes effect. The current version is always at https://app.fetchlist.app/privacy.

Contact

PawForged LLC, a Washington limited liability company

[MAILING ADDRESS, once chosen]

[email protected]