ToDoLoo is designed for children ages 4-12 and complies with the Children's Online Privacy Protection Act (COPPA).
We take children's privacy seriously. This policy explains what information we collect, how we use it, and what rights parents have regarding their children's data.
Information We Collect from Children
When a parent creates a child profile, we collect the following information:
Username: A display name chosen by the parent (not the child's real name)
Birth Month and Year: Used to verify age and customize the experience
Profile Avatar: A cartoon avatar image selected from our library
Color Theme Preference: Visual theme selection for the app
Information Collected Automatically
When children use the app, we automatically collect:
Task Completion Data: Records of which chores/tasks were completed and when
Achievement Data: Badges and achievements earned through the app
Usage Statistics: Completion rates and streaks (used for gamification)
This data is used solely to provide the core functionality of the app and is visible only to the parent account holder.
Information We Do NOT Collect from Children
Real names (only parent-chosen usernames)
Email addresses
Phone numbers
Physical addresses
Photos of children (only cartoon avatars)
Location data
Voice recordings
Biometric data
How We Use Children's Information
We use the information collected to:
Display the child's profile within the family account
Track task/chore completions
Award achievements and badges
Show progress to parents
Provide a personalized color theme
We do NOT use children's information for advertising, marketing, or any commercial purposes beyond providing the app's core features.
Third-Party Services
We use the following third-party services:
Sentry: For error tracking and app stability monitoring. Session replay is disabled, and all personally identifiable information is stripped from error reports.
Authentication Providers (Google, Apple, Facebook): Used only for parent authentication. Children do not interact with these services.
We do not sell, rent, or share children's personal information with third parties for their marketing purposes.
Parental Consent
Before any child profile becomes active, we require verifiable parental consent:
Parents must authenticate with a verified account (Google, Apple, or Facebook)
Parents must explicitly consent to the collection of their child's information
Child accounts remain inactive until parental consent is confirmed
Parents can withdraw consent at any time by deleting the child profile
Parental Rights
Parents have the right to:
Review: View all information collected about their child through the app
Export: Download a copy of their child's data in a portable format
Delete: Permanently delete their child's profile and all associated data
Refuse: Decline further collection of their child's information
Withdraw Consent: Revoke previously given consent at any time
To exercise these rights, parents can use the Settings page within the app or contact us directly.
Data Security
We implement reasonable security measures to protect children's information:
All data is transmitted over encrypted connections (HTTPS/TLS)
PINs are cryptographically hashed before storage
Access to child data is restricted to the authenticated parent account
We regularly review and update our security practices
Data Retention
We retain children's information only as long as necessary to provide the service. When a parent deletes a child profile, all associated data is permanently removed from our systems within 30 days. Task history and achievement data are deleted immediately.
Parent Information
For parent accounts, we collect:
Name and email address (from OAuth provider)
Profile picture (optional, from OAuth provider)
Parental settings and preferences
This information is used to authenticate parents, manage family accounts, and communicate important updates about the service.
Changes to This Policy
We may update this privacy policy from time to time. If we make material changes to how we collect or use children's information, we will notify parents via email and require renewed consent before the changes take effect.
Contact Us
If you have questions about this privacy policy or wish to exercise your parental rights, please contact us:
Email: privacy@todoloo.co Subject Line: COPPA Privacy Request