Privacy Policy | Chorebound

1. Introduction

Liskion LTD ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use the Chorebound mobile application and related services (the "Service").

We are the data controller for the personal data we process. We are registered in the United Kingdom and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using the Service, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

Account information: Email address, name, and authentication credentials when you create an account
Profile information: Hero names, avatar selections, and other profile customisations
User content: Quest names, realm names, shop items, and other content you create within the Service
Communications: Information you provide when contacting our support team

2.2 Information Collected Automatically

Device information: Device type, operating system, unique device identifiers, and mobile network information
Usage data: Features used, actions taken, time spent in the app, and interaction patterns
Crash reports: Technical information about errors and crashes to help us improve the Service
Analytics data: Aggregated statistics about how the Service is used

2.3 Information from Third Parties

Authentication providers: Basic profile information (such as email address and name) when you sign in using a third-party service
Payment processors: Transaction confirmation and subscription status (we do not receive or store your payment card details)

3. How We Use Your Information

We use your personal data for the following purposes:

Provide the Service: Create and manage your account, enable features, and deliver the core functionality
Process transactions: Manage subscriptions and verify purchases
Communicate with you: Send service-related notifications, respond to enquiries, and provide customer support
Improve the Service: Analyse usage patterns, diagnose technical issues, and develop new features
Ensure safety and security: Detect and prevent fraud, abuse, and security incidents
Comply with legal obligations: Meet legal requirements and respond to lawful requests

4. Legal Basis for Processing (UK GDPR)

We process your personal data based on the following legal grounds:

Contract: Processing necessary to perform our contract with you (providing the Service)
Legitimate interests: Processing necessary for our legitimate interests (improving the Service, ensuring security, marketing our services), where those interests are not overridden by your rights
Consent: Where you have given specific consent for certain processing activities
Legal obligation: Processing necessary to comply with our legal obligations

5. Data Sharing and Disclosure

We may share your personal data with:

5.1 Service Providers

We use third-party services to help operate the Service. These providers process data on our behalf and are contractually bound to protect your information:

Clerk: Authentication and user management
RevenueCat: Subscription and payment management
Convex: Database and backend infrastructure
Analytics providers: Usage analytics and crash reporting

5.2 Other Realm Members

When you join a realm, certain information (such as your hero name, avatar, level, and activity) is visible to other members of that realm. This sharing is essential to the collaborative nature of the Service.

5.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you of any such change.

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside the United Kingdom, including the United States, where our service providers are located.

When we transfer personal data outside the UK, we ensure appropriate safeguards are in place, such as:

Transfers to countries with adequate data protection laws as determined by the UK government
Standard contractual clauses approved by the Information Commissioner's Office (ICO)
Other lawful transfer mechanisms under UK data protection law

7. Data Retention

We retain your personal data for as long as necessary to provide the Service and fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specifically:

Account data: Retained while your account is active and for a reasonable period afterwards to allow for account recovery
Usage and analytics data: Retained in aggregated or anonymised form for analytical purposes
Communications: Retained as necessary to resolve enquiries and for our records

When you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or legitimate business purposes.

8. Your Rights

Under UK data protection law, you have the following rights regarding your personal data:

Right of access: Request a copy of the personal data we hold about you
Right to rectification: Request correction of inaccurate or incomplete personal data
Right to erasure: Request deletion of your personal data in certain circumstances
Right to restriction: Request restriction of processing of your personal data
Right to data portability: Request transfer of your personal data in a structured, commonly used format
Right to object: Object to processing based on legitimate interests or for direct marketing
Rights related to automated decision-making: We do not make decisions based solely on automated processing that significantly affect you

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your personal data properly.

9. Account Deletion

You can delete your account at any time using the self-serve deletion feature within the app (Settings → Delete Account).

When you delete your account:

Your personal profile and hero data will be permanently deleted
Your contributions to shared realms (such as completed quests) may be retained in anonymised form
Any active subscriptions should be cancelled through your app store to prevent further charges

10. Children's Privacy

The Service is not intended for children under 16 to use independently. Users must be at least 16 years old to create an account.

Managed Profiles: Account holders may create managed profiles for children under 16. These profiles:

Do not have independent account access
Are controlled entirely by the parent or guardian account holder
Contain only the information provided by the account holder (such as a display name)
Do not directly collect personal data from the child

The account holder is responsible for ensuring they have appropriate parental authority to create managed profiles for minors.

For users in the United States: We comply with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information directly from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

Encryption of data in transit and at rest
Secure authentication mechanisms
Regular security assessments
Access controls limiting who can access personal data

However, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.

12. Cookies and Tracking

The Chorebound mobile app does not use cookies. However, our website and third-party services may use cookies and similar technologies for:

Essential functions: Enabling core functionality like authentication
Analytics: Understanding how our services are used

You can control cookies through your browser settings. Note that disabling cookies may affect certain features of our website.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

Posting the updated policy on this page
Updating the "Last updated" date
Sending a notification through the app for significant changes

We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Liskion LTD
Email: [email protected]

For data protection enquiries, you can also contact us at the above email address with "Data Protection" in the subject line.