ChoreKey is a parental-controls app for families with children ages 8–17. We do not sell data. We do not run ads. We do not use analytics SDKs. We do not let third parties track your family.
What we do with your data depends on which app you use:
From version 1.3.2 of the iPhone app, photos never leave your family's devices and your own iCloud, and are never sent to us. We don't use, sell, or keep your family's chore data or photos. Versions 1.3.0 and 1.3.1 had an optional AI photo check that sent a photo to our server and to Anthropic. The service behind it is shut off once version 1.3.2 is available. Details are under "AI photo check in versions 1.3.0 and 1.3.1" below.
Cloud sync is off by default. It only turns on once a parent pairs the parent app to a child’s iPhone.
Everything stays on your child's device. Nothing leaves the device. This is what you get on iPhone or Android before you pair a parent’s phone. On Android it is free.
On iPhone, ChoreKey uses Apple's Family Controls framework to lock and unlock apps; the framework runs entirely on-device, and selections of which apps are blocked never leave the device. The Android app locks and unlocks apps the same way, on-device, with no equivalent cloud step. On both platforms, a parent approves each chore in person, with the parent PIN, on the child's own device; approving from a parent’s own phone is iPhone only for now.
When a parent pairs the parent app to a child’s iPhone, chore data and photos sync to a cloud backend so the parent can approve chores remotely. That backend is your own iCloud account via Apple CloudKit. The parent app is iPhone only; it is not available for Android devices.
Cloud sync is off by default. It enables only after the parent completes the pairing flow, which requires Sign in with Apple plus a confirmation tap on the child's device.
Nothing about location leaves the device: the home coordinate and the inside-or-outside state stay on the child's phone.
Chore photos are the most sensitive thing ChoreKey handles: they are pictures taken by a child inside your home. We treat where they are stored as something you are entitled to know exactly, not in general terms.
From version 1.3.2, with the parent app the photo never leaves your family's devices and your own iCloud. It never touches our servers, our storage, or our accounts. When your child submits a chore, the image is attached to a record in your own iCloud account and shared to the parent device through Apple's CloudKit sharing. It counts against your iCloud storage, it is governed by your Apple ID, and Apple's private-database model gives app developers no read access to it. We could not retrieve one of these photos if we wanted to, and we could not produce one in response to a request, because we do not hold it.
It stays there until you delete it. Deleting the chore, the child, or the family removes it, and you can delete any individual photo at any time. We do not auto-delete these photos on a timer, because they are not ours to reach into. The copy on the child's own device is cleared automatically seven days after the chore is approved or rejected.
Versions 1.3.0 and 1.3.1 of the iPhone app had an optional AI photo check. It was off by default, a parent turned it on per chore, and the app asked first. Version 1.3.2 removes it, and sets any chore that used it back to manual approval by a parent. The service behind the AI check is shut off once version 1.3.2 is available. After that, the check no longer works in versions 1.3.0 and 1.3.1.
While it was on for a chore (set to Suggest or Auto-approve), a downscaled copy of the photo your child took was sent over HTTPS to our server, a Supabase Edge Function, and then to Anthropic, the company that makes Claude, to judge whether the chore looked done. We sent the photo, the chore title, the description you wrote, and your child's age band. We did not send names, your location, or anything else about your family.
Our server function did not store or log the photo. Anthropic processes it to answer, may hold the request for up to 30 days for abuse monitoring, and does not use it to train its models. The answer, done, not done, or unclear, with one sentence of reasoning, was saved with the chore in your family's iCloud, like the photo itself.
Chores that were left on Off never sent a photo to us or to Anthropic.
No other third party receives data at this tier. From version 1.3.2, Anthropic receives nothing from ChoreKey.
Pair as many children as you need in the parent app; each child sees only their own chores. Each approval records which parent account approved it.
ChoreKey is designed for children ages 8–17. We apply additional protections specifically for our youngest users:
For US families with children under 13, we collect only what is necessary to operate the service the parent purchased, with verifiable parent consent via Apple's account systems and the in-app pairing flow for the parent app. The standalone ChoreKey app, on iPhone or Android, collects nothing beyond what stays on the child's device.
If you believe we have collected information from a child without parent consent, or you want to review or delete information about your child, email [email protected]. We'll act within 30 days.
At any tier you can:
Residents of California (CCPA/CPRA), the EU/UK (GDPR), and other jurisdictions with similar rights laws have the rights named in those laws. Email us from your sign-in email and we will honor them. We do not sell data, so the "right to opt out of sale" is already the default.
If we change this policy in a way that materially expands what we do with data, we will:
We will not roll out a material change quietly via a buried link.
KyrosWorks LLC, Texas, USA
[email protected]
For privacy-specific questions, including data-access and deletion requests, use the same email with "privacy request" in the subject.