Privacy Policy
Who this is for
Tidiest is operated by Tidiest LLC ("we", "us"). This Privacy Policy explains what information we collect, why, and your rights as a household manager. Tidiest is set up and controlled by an adult household manager who is at least 18 years old. Household members may be any age. Members use scoped profiles rather than separate accounts. For a member under 18, their parent or legal guardian must authorize use.
Privacy for members under 13 (COPPA)
Tidiest supports adult-managed households with members of any age, including children under 13. For members under 13, the U.S. Children's Online Privacy Protection Act (COPPA) applies. Before we collect a member's nickname/profile information or enable member photo submission, the household manager must review the member-data, photo, and AI-verification notice and give verifiable consent and authorization. For members under 18, this authorization must come from their parent or legal guardian. Only after that consent may the household manager create a member profile with a nickname and required private non-photo display symbol that defaults to a star, and pair the member's device. During an active trial, paid subscription, or Billing Grace Period, Auto Mode requires the additional notice version 2026-07-30-auto-mode-v1 and a separate verifiable household manager authorization before a member may send a before photo for chore suggestions. Free households cannot enable Auto Mode. We collect the minimum information needed to run manager-assigned chores, bounded Auto suggestions, AI-assisted chore verification, household manager review, and rewards.
Adult Tidiest Composer
An adult may choose a separate solo workspace under notice 2026-08-30-composer-v1. Composer creates no member profile or credential and has no points, rewards, review queue, public profile, social sharing, or member data. The first sanitized camera capture remains only in app memory until Sign in with Apple, the adult notice, and verified Free or paid Composer access succeed. Full sanitized before and after evidence is private and short-lived after a batch resolves. Reduced private before/after Activity thumbnails are retained for up to 90 days unless the adult deletes the item, deletes all Activity, converts the workspace, or deletes the account sooner. Text Activity metadata remains until its item, workspace, or account is deleted. Optional unfinished-batch reminders are local iOS notifications and are cancelled when the batch resolves.
What we collect from the household manager
• Identity: Sign in with Apple supports household manager accounts. We retain your Apple account identifier and minimal email relay information when Apple provides it to authenticate you and maintain your account. • Family access status: whether your household has Free, trial, paid, grace, expired, or revoked access. Apple processes payments; we never see your card details. Free activates after consent and household authorization; Tidiest verifies Apple purchases before applying paid access. • Household manager-supplied reward codes: single-use codes are encrypted and stored with optional descriptive value and currency. Tidiest does not sell, purchase, fund, validate, or track gift-card balances. • Household manager-captured room photos: Photos are processed on your device to remove location metadata and reduce image size before upload. Raw originals are not uploaded. AI captures are sent to OpenAI for chore suggestions. New household managers accept the room-photo notice during onboarding; existing household managers review it before their next photo-backed save. After consent, the processed photo is retained with saved chores so the household manager and members assigned an active linked chore can view it. If AI verification is enabled, it may be compared with that chore's completion photo.
What we collect about a member
• After manager notice and verifiable consent, a member profile UUID, a nickname you choose, such as "Member 1", and a required private non-photo display symbol that defaults to a star the member may change. • Chore photos the member submits after manager authorization, member-profile creation, and pairing. For separately authorized Auto Mode, this can include one sanitized before photo shared by up to six chores and one separate sanitized after photo for each completed chore. A photo of a member under 13 is personal information under COPPA, which is why the camera path stays locked until the household manager consent stack is complete. Photos may include incidental personal information; keep people and sensitive material out of chore photos. • Chore results: the AI verification result, any household manager review or override, and the points earned. • Chore titles, finish rules, reward values, reward menu items, and redemption history that you create for the household. We do not collect a member's real name, email, phone number, precise location, profile photo, public profile, advertising identifier, or tracking identifier. Chore details are not used to build an AI profile of a member, and the private display symbol is not sent to AI providers, public records, or evidence metadata. Photo location metadata (EXIF/GPS) is stripped on the device before a chore photo is uploaded as evidence.
How we use chore photos
Photos are processed on your device to remove location metadata and reduce image size before upload. Raw originals are not uploaded. Photos are stored privately and made available only to authorized family members. We retain operational information such as submission identifiers, purpose, processing status, approximate size, and deletion dates to manage review and retention. After household authorization, active access, and consent are verified, OpenAI may process photos only for chore-completion verification or separately authorized Auto suggestions. A chore linked to a retained room photo may compare that before photo with its completion photo; otherwise verification uses only the completion photo. Auto Mode can use one before photo for up to six accepted chores, each requiring its own after photo. Unsafe results cannot become chores or rewards; unclear evidence requires household manager review. Auto rewards are disabled per member by default.
Third parties we share with
• Apple: supports household manager identity, processes App Store subscriptions, and delivers app notifications. Members do not use Sign in with Apple. • Cloudflare: hosts Tidiest's service and privately stores household information, reward codes, and processed photos. It supports authentication, access restrictions, chore and reward records, AI request delivery, and deletion. • AI service providers: OpenAI processes new AI requests. Amazon Web Services may finish requests already in progress from our previous AI service; it is not selected for new requests. These providers receive processed photos only for household manager room planning, separately authorized Auto suggestions, or chore-completion verification. Tidiest does not permit these inputs or outputs to be used for model training, model improvement, member profiling, personalization, or unrelated purposes. They do not receive a member's nickname or real name from Tidiest. AWS states that its AI service does not use inputs or outputs to train models or share them with model providers. • OpenAI retention and processing: Tidiest does not opt API inputs or outputs into training or model improvement. Requests include a non-identifying safety reference rather than names, emails, or account identifiers. OpenAI abuse-monitoring logs may contain inputs and outputs for up to 30 days, and longer where legally required or necessary to prevent harm. Images classified as potential child sexual abuse material may be scanned and retained for manual review and legally required reporting. Global processing is not limited to the United States. We do not sell personal information, share it for advertising, or use third-party advertising or tracking services.
Features Tidiest does not provide
Tidiest has no public member profiles, profile pictures, open chat, member messaging, public leaderboards, advertising, behavioral tracking, sale of personal information, face recognition, biometric identification, or member-facing AI/paywall surface. A private display symbol is not a profile picture and is never public.
How long we keep information
We keep each kind of information only as long as reasonably necessary for its stated purpose, then delete it. The summary below is supplemented by our complete Data Retention Policy, which forms part of this Privacy Policy. • Chore photos (the review copy): approved evidence is deleted after roughly 72 hours. Rejected or disputed evidence may be retained for up to 30 days unless you delete it sooner. Abandoned or unconfirmed uploads are deleted after 24 hours. That window allows you to review a member's work. Photos are stored privately and available only to authorized family members. Auto Mode before photos remain only while suggestions or linked chores need them for verification or household manager review, then follow the same 24-hour, roughly 72-hour, or up-to-30-day rule. This Tidiest photo-retention policy is separate from the provider abuse-monitoring disclosure above. • Household manager-captured room photos: retained after a consented photo-backed save as private photos and related information. Paid expiry or revocation downgrades the household to Free and does not delete retained references. They are deleted after their final chore link is removed, when their member or household is deleted, or after 24 hours if an upload is never linked. Unsaved captures stay only temporarily on your device until discarded, sign-out, or the household manager workspace closes. • Structured household data—including member profiles, chores, ledgers, balances, rewards, pairing credentials, and consent records—remains available while the household has Free or paid access and is deleted only through the applicable member/household/account deletion path. Member or account deletion immediately revokes the applicable access and starts permanent deletion without a recovery window. Private-photo cleanup may finish afterward, and failed deletions are retried. Account deletion requires fresh Sign in with Apple authentication, revokes every session, and lets that same verified Apple identity start again with an empty workspace while private-media cleanup finishes. When Apple is still billing compatible active access, Tidiest retains only a protected account reference and original Apple transaction reference until that same identity restores the subscription; no prior workspace data is transferred. • Device pairing codes become unusable 24 hours after creation. The stable paired-device credential remains while the member is paired unless the household manager revokes pairing or deletes the member or account. • Your version-stamped consent record remains while the household exists as proof that consent was given and is deleted with the applicable member or account data. • The age-verification signal at setup: never stored - reduced to a yes/no result and immediately discarded. A member's nickname and private display symbol remain while the member profile exists and are deleted when the member or account is deleted.
Optional Screen Time authorization
Screen Time Rewards preserve two Apple authorization paths: voluntary individual approval on the member device, and guardian-controlled approval for a child account in Apple Family Sharing. Apple’s parent or guardian approval requirements and device permission boundaries apply. Tidiest cannot bypass these requirements. Screen Time setup is optional and does not block ordinary chores or rewards.
Your rights as a household manager
You can review every member photo and decision, correct decisions subject to the displayed spent-points limitation, choose Off, Auto, or Auto-trusted separately for each member, keep Auto rewards off, disable AI chore verification, or revoke Auto Mode authorization. Revocation turns every member's Auto policy off and blocks new Auto capture, suggestions, commits, and verification. Room-photo retention is always on after its separate notice, but you can remove a reference from an individual chore. You can also remove a member and related app rows and private photos, delete member data, or revoke member-photo consent to disable future member photo submission. Contact support@tidiest.app for assistance.
Household managers may opt each member into one routine reminder using selected weekdays and a half-hour local-time choice after confirming the household timezone. Member-device reminder text is generic. Household manager notifications may include member nicknames and item titles for reviews, rewards, and Auto Mode activity, plus household manager-only subscription status. The household manager app badge counts pending reviews and requested rewards up to 99; member sessions clear it. Tidiest uses iOS Notification Center and does not maintain an in-app notification inbox. Notification delivery metadata is operational data and does not introduce a new member-data or AI-processing purpose.
Security
We use access restrictions and encryption to protect household information, photos, and household manager-supplied reward codes. A member's device can access only information permitted for that member and cannot authorize its own points or rewards. Retained room photos are visible only to the household manager and members assigned an active linked chore. Reward codes are revealed to the authorized member only after household manager approval. No system is perfectly secure; we apply reasonable safeguards appropriate to the sensitivity of members' information. Our Security Safeguards describes those commitments.
Changes & contact
If we make a material change to how we handle members' information, we will ask the household manager to review and consent again before the change applies to your household. Questions or requests, or to reach the operator: Tidiest LLC, 12851 Tilden Dr., Rancho Cucamonga, CA, United States · +1 (909) 646-2488 · support@tidiest.app. This policy is governed by the laws of the State of California, United States.
Updated apps use the same photo-grounded generation and verification stages for Solo Composer and authorized Auto Mode. Each photo may support up to six selected chores. Generation and verification do not request numeric confidence scores; verification checks the visible target and the chore’s required criteria. Older apps and existing three-chore sets keep their original limits. Consent, household manager authorization, access, private evidence, review, deletion, and reward controls continue to apply.