Privacy Policy

Who we are

Jarful is run by [Business name]. We’re responsible for the personal information described here. If you have questions, our contact is [hello@yourdomain.com].

What we collect

About parents

• Your name (as you’d like the kids to see it, like “Mom”) and email address.
• Your password and optional PIN, stored only as one-way scrambled hashes. We can’t see them.
• When you last signed in.

About your family

• Your family name and time zone, and your parent-mode lock setting.

About kids (entered by a parent)

• A first name or nickname, an emoji avatar and a colour.
• An optional 4-digit PIN, stored as a hash.
• Chores, whether they were done and approved, short notes, chore ideas they suggest, money requests, and the jar history (amounts and memos).

Technical information

• One sign-in cookie that keeps a device connected to your family (see Cookies).
• The IP address of failed sign-in and PIN attempts, kept briefly to block password guessing.
• Like every website, our hosting provider’s server logs record IP addresses and pages requested.

What we don’t collect

No kids’ emails, phone numbers, photos, birthdays or locations. No bank or card details. No contacts, advertising IDs or browsing history.

How we use it

• To run Jarful: show each family its chores, approvals and balances, and keep the right people signed in.
• To keep it secure: block repeated wrong passwords and PINs, and investigate misuse.
• To help you: answer your emails and reset access if you’re locked out.
• To tell account holders about important changes to Jarful or these policies.

We don’t use anyone’s information for advertising, we don’t build profiles, and we don’t send marketing unless you ask for it.

Kids’ information

A parent decides what goes into Jarful about their kids, and can edit or remove it at any time. We keep it to what the app needs, use it only to show it to that family, and never use it for advertising or share it for anyone else’s purposes.

Kids can’t create accounts or give us information directly. If you believe a child’s information was added without a parent’s or guardian’s permission, email us and we’ll delete it.

Who we share it with

We don’t sell, rent or trade personal information. We only share it:

• With service providers who run Jarful for us: [your hosting company] stores the site and database. They may only use the information to provide that service.
• Google Fonts: pages load their typefaces from Google, so your browser sends Google its IP address when fetching them. No account information is sent.
• If the law requires it, or to protect someone’s safety.
• If Jarful is sold or merged, with the new owner, who must keep protecting it under this policy. We’ll tell you first.

Where it’s stored

Jarful’s data is stored in [Canada]. If our providers process it elsewhere, it’s protected by contract and may be subject to the laws of that country.

How long we keep it

• Family information is kept while the family account exists. Removing a kid in the app hides them but keeps their jar history so the family’s records stay complete.
• Deleting a family permanently removes its parents, kids, chores and history right away.
• Failed sign-in records are cleared after about a day.
• Backups, if our host keeps them, roll over within [30] days.

How we protect it

Passwords and PINs are stored as strong one-way hashes. Jarful runs over an encrypted (HTTPS) connection, limits repeated guesses, signs devices out when needed, and keeps each family’s information visible only to that family. Site administrators can see family, parent and kid names and balances to run the service, but not chores, notes or jar history.

No system is perfectly secure. If a breach ever puts your information at real risk, we’ll tell you and the authorities as the law requires.

Your choices and rights

You can see and correct most of your information yourself in the app. You can also ask us to:

• give you a copy of the information we hold about you or your family;
• correct anything that’s wrong;
• delete your family account and everything in it.

Email [hello@yourdomain.com] from the address on the account. We’ll answer within 30 days. If you’re not happy with our answer, you can contact the Office of the Privacy Commissioner of Canada or your local privacy regulator.

Changes to this policy

If we change how we handle information in a meaningful way, we’ll update the date at the top and tell account holders before the change takes effect.

Contact

Privacy questions or requests: [hello@yourdomain.com].