Privacy

What we store

• Your household. Everything you type in: the household name, members’ names, colours and emoji, rooms, chores and their settings, and when chores were done, planned or skipped.
• Signed-in devices. For each phone or computer that’s signed in: a hashed sign-in token, an optional label (“Pieter’s phone”), the browser’s user agent, and when it was last used. You can see and sign out devices from the Household tab. A device that signs out or isn’t used for a year is deleted 30 days later.
• Recovery code and invite links. Stored only as hashes, so we can check them but can’t read them back. Invite links are deleted 30 days after they expire or are used.
• Reminders. If you turn on reminders, your browser gives us a push endpoint and keys, which we use only to send Tidy Tempo reminders, and delete them when you turn reminders off, sign the device out, or the push service says they no longer work. We also log which reminders were sent and when, so you never get the same one twice; that log is deleted after 90 days.
• Abuse protection. To rate-limit creating households and redeeming codes, we keep a counter per IP address: the address, a count and when the count started. It holds nothing else, and is deleted within 24 hours. Our host also keeps ordinary server logs for a short time.

Cookies

Two, both first-party and both needed to sign in. tt_sess keeps this device signed in to your household. tt_csrf protects your household from forged requests. There are no tracking, advertising or third-party cookies.

What we don’t do

We don’t sell or share your data, run analytics or tracking scripts, show ads, or ask for your name, email or phone number. Fonts are served from our own domain.

Where it lives

In one database on Fly.io servers in the United States (Ashburn, Virginia), with Fly’s daily volume snapshots as backups. Reminders go out through your browser’s push service (Apple, Google or Mozilla), which sees only the encrypted message and when it was sent.

Your data, your call

Export everything as JSON from the Household tab at any time. To have your household deleted, email fly@pieterg.com from any address and include your household name; we’ll confirm with you in the app before deleting. Backups roll off within a few days after that.

Contact

Questions about privacy: fly@pieterg.com. See also the terms.