Privacy

Last updated: [DATE] · Operated by [LEGAL ENTITY], [ADDRESS], Australia

DRAFT for review before publishing. Replace the bracketed fields. This is a plain-English policy written to the Australian Privacy Principles; have it checked against your circumstances (and COPPA if you accept US families).

What VirtueQuest is

VirtueQuest is a family habit and chore board. A parent or guardian creates a family account and adds the people in the household. Children do not create accounts, do not sign in and have no email address, password or profile beyond a first name, a cartoon avatar and a colour.

What we collect

From the grown-up who signs in: their email address (used only to send a sign-in link and to identify their family), the time they last signed in, and a random account identifier.
About the family: the family name you choose, the first names you enter for each person, the tasks, rewards and settings you configure, and the records the board creates as you use it — which tasks were ticked on which day, points, swaps, helps, goals, the weekly virtue and the examples a grown-up types in at check-in, and cash-out records.
Technical: the standard server logs kept by our hosting and database providers (IP address, browser type, time of request) for security and to keep the service running.

We do not collect surnames, dates of birth, photos, school names, locations or any health information, and we ask you not to enter them. The board stores what you type, so please keep the names and notes to what the board needs.

Why we collect it

Solely to run the board for your family: to sign you in, show the same live board on every device in your household, and keep your records so you can review past months. We do not use your data for advertising, we do not sell it, and we do not use it to profile children.

Who can see it

Only the grown-ups you invite to your family account. Access is enforced by database security rules; no other family can read your records. Our staff do not look at family data except to fix a problem you ask us to look at.

Where it is stored

Data is stored with Google Firebase (Firestore and Authentication) in the [australia-southeast1 — Sydney] region, and the site is served by [Netlify]. Both are bound by their own privacy and security commitments. Sign-in emails are sent by Firebase on our behalf.

Cookies and tracking

VirtueQuest uses browser storage only to keep you signed in and to remember small conveniences (which tab you were on). There is no advertising, no analytics script on the board, and no third-party tracking.

Children

The board is operated by a parent or guardian for their own household. A child's first name and activity records are entered and controlled by that parent. If you are under 18 and believe information about you is on a board without your parent's involvement, contact us and we will help.

Your choices

See and export everything: Grown-ups → Family account → Download backup gives you the complete record as a file.
Correct it: everything on the board can be edited or removed by a grown-up in the app.
Delete it: email [CONTACT EMAIL] from the address on the account and we will delete the family's records and account within 30 days. [Or: use the Delete family button under Family account.]

Security

Sign-in is by one-time email link; there is no password to leak. Data is encrypted in transit and at rest by our providers. If we become aware of a breach affecting your data we will notify you as required by the Notifiable Data Breaches scheme.

Contact and complaints

[CONTACT EMAIL]. If you are not satisfied with our response you can contact the Office of the Australian Information Commissioner (oaic.gov.au).