Privacy policy

Who provides the app

Family Motivator is provided by Heathrow Digital. For privacy questions or a request about your information, use the contact details on our support page.

Information we collect

• Your sign-in email, account identifier and authentication information. Our authentication provider stores a password hash, not a readable copy of your password.
• Family and child profile names, optional photos, goals, reading entries, chores, activity notes, parent feedback, points, rewards and change history you choose to enter.
• Family invitations, caregiver and child access permissions, connected-device information and notification preferences. Browser notifications use a push subscription if you enable them. When iPhone notifications are available and enabled, we store an Apple device token linked to your signed-in account and family.
• Technical information needed to run and protect the service, such as request timestamps, IP addresses, browser or device information and error logs. Support messages include the information you send us.
• When subscriptions are enabled, Apple transaction identifiers, subscription dates, trial status and refund or revocation status linked to a random family purchase identifier. Apple processes payments; we do not receive your full card details.

You can use initials or nicknames. Avoid entering sensitive information that the app does not need.

How we use information

We use information to sign you in, synchronize family activities across devices, manage permissions, deliver requested invitations and notifications, provide support, and keep the service reliable and secure. We do not sell personal information or use family content for advertising. The app does not include advertising or cross-app tracking.

Who can see it

People you connect to your family can see information allowed by their role. Parents and caregivers can manage the family; child accounts can see family progress, including sibling information, while changes to other children and parent controls are restricted. Only invite people you trust.

We use Supabase for accounts, database and private photo storage, Vercel to host the website and server, and Resend to deliver family invitations. Browser push providers and Apple Push Notification service deliver notifications when enabled. Push messages contain generic updates, without child names, activity details or parent comments. These providers process information needed to provide their services. Authorized operators may access information to provide support, maintain the service or investigate problems. We may disclose information when required by law or to protect people and the service.

Storage and security

Family records and photos are stored on our hosted services, currently in the United States. Family Motivator does not require space in your iCloud account. Connections use HTTPS; access checks separate families and restrict changes. Photos are private and use temporary viewing links. iPhone sign-in credentials are held in device-only Keychain storage.

On your device, we keep unfinished book, chore and points-request drafts, and temporarily keep submitted changes until their save is confirmed. This helps recover from closing the app or losing a connection. Drafts can be restored for up to seven days. Signing out or deleting your account clears these local records on that device. Unfinished drafts are not sent to our service until you submit them.

The service does not provide end-to-end encryption. No system can guarantee perfect security. Keep your password private, sign out on shared devices, and remove caregivers or connected devices that no longer need access.

Children and parent control

This is a family service intended to be set up and supervised by a parent or guardian. Parents choose what child profile information to enter and whom to invite. Child accounts connect to a parent-managed profile. A parent can ask us to review or delete a child’s information through support. A child with their own login can also initiate deletion from Account.

Your choices and account deletion

You can edit family information, remove optional photos, manage family access, and turn browser notifications off. To delete your account, open Account, review the consequences and confirm with your password. No support message is required.

• If you own a family, deletion removes that family, its children’s profiles, activities, points, rewards, photos, invitations and history for everyone in it. The confirmation screen lists each affected family.
• If you are a child account, deletion removes your linked child profiles and their activities, points, photos and related history. Sibling profiles and unrelated history remain.
• If you are an additional caregiver, deletion removes your membership, invitations and connected devices. Family records managed by the remaining caregivers stay with that family.
• If the same sign-in is used by our separate softball app, that app’s records and shared sign-in remain. The confirmation screen tells you when this applies. Your Family Motivator access and records are removed.

How long information stays

We keep active family records while the family uses the service. Account deletion removes the affected family records immediately and schedules remaining photo and sign-in cleanup, normally within a few minutes. Allow up to 24 hours; your private confirmation link shows completion. Contact support if it still shows pending after that.

Photos referenced by current records or Undo history stay available with those records. Unused photos with no such references are removed after 30 days. Completed deletion receipts contain no account identifier and expire after 30 days. Short-lived technical logs and provider recovery copies may remain under the providers’ retention schedules and are not used to restore a deleted account for ordinary use. If recovery from a backup becomes necessary, deletion requests must be reapplied.

Subscriptions and deletion

When you subscribe through Apple, we share a random purchase identifier so the subscription can be connected to your family. Apple handles billing under its own privacy terms. Deleting a family removes its subscription-access records from our database, but does not cancel billing with Apple. Cancel separately in Apple Subscriptions. Apple may retain its own transaction records.

Policy changes

We will update the date on this page when the policy changes and explain material changes through the app or another appropriate notice.