Security Safeguards
Purpose & responsibility
This is a public summary of our safeguards, not our detailed internal information security program. Tidiest LLC maintains a written program appropriate to the sensitivity of members' information and the size and activities of our service. Zachary Amith coordinates the program, risk assessments, incident response, and regular reviews.
Data minimization and consent
Member profiles use a household manager-chosen nickname, private identifier, and required non-photo display symbol that defaults to a star. Member data collection and photo submission require parental notice, verifiable consent, and parent-controlled setup. Photos are processed on your device to remove location metadata and reduce image size before upload. Raw originals are not uploaded. We do not provide public member profiles, member messaging, advertising, behavioral targeting, face recognition, biometric identification, or unrelated AI profiling.
Access and protection
We restrict access to authorized family members. A member's device is limited to the selected member profile and cannot approve its own rewards or authorize changes to points. Retained room photos are visible only to the household manager and members assigned an active linked chore. Photos are not public. We protect information with encryption in transit and appropriate storage safeguards; household manager-supplied reward codes are encrypted and revealed to the authorized member only after household manager approval. These safeguards reduce risk, but no system is perfectly secure.
AI and household manager control
Photo-based AI use requires applicable consent and active access. Auto Mode additionally requires separate verifiable household manager authorization and paid-tier access, is off by default, and allows up to six suggestions per before photo and up to 30 accepted chores per household-local day. Each completed Auto chore requires its own after photo. Auto rewards are disabled per member by default. Unclear evidence requires household manager review; unsafe results cannot authorize rewards. Household managers retain review and correction control and may disable AI verification or revoke Auto authorization. Revocation turns every member's Auto policy off and blocks new Auto processing.
Retention and deletion
Abandoned or unconfirmed uploads are deleted after about 24 hours, approved evidence after about 72 hours, and rejected or disputed evidence within 30 days unless you delete it sooner. Before photos may remain while linked chores need them for verification or review. Retained household manager room photos are deleted after their final chore association is removed, the related member or household is deleted, or after 24 hours if an upload is never associated with a chore. Member or account deletion immediately revokes the applicable access and starts permanent deletion without a recovery window. Private-photo cleanup may finish afterward, and failed deletions are retried. See our Data Retention Policy for all data categories and retention periods.
Adult Composer
Composer information is private to the adult workspace and does not create member profiles, points, or rewards. Full photos are short-lived after the batch resolves; reduced Activity thumbnails remain for up to 90 days unless deleted sooner. Text Activity information remains until the item, workspace, or account is deleted. Subscription lapse downgrades the workspace to Free access with its monthly AI-action limit and processing buffer.
Service providers
Apple supports household manager sign-in, purchases, and notifications. Cloudflare hosts the service and privately stores app information and processed photos. OpenAI processes new AI requests. Amazon Web Services may finish requests already in progress from our previous AI service; it is not selected for new requests. These providers receive processed photos only for household manager room planning, separately authorized Auto suggestions, or chore-completion verification. Tidiest does not permit these inputs or outputs to be used for model training, model improvement, member profiling, personalization, or unrelated purposes. OpenAI abuse-monitoring may retain inputs and outputs for up to 30 days, longer where legally required or necessary to prevent harm; potential child sexual abuse material may be retained for review and reporting. Global processing is not limited to the United States. See our Privacy Policy for provider disclosures.
Risk assessment, incidents, and review
We review risks across collection, storage, transmission, and service providers before material changes and review the security program at least annually. If we learn of a suspected breach, we investigate, contain the incident, address its cause, and notify affected household managers and authorities as required by law and applicable agreements.
Contact
Security questions or reports: Tidiest LLC, 12851 Tilden Dr., Rancho Cucamonga, CA, United States · +1 (909) 646-2488 · zach@tidiest.app.
Updated apps use the same photo-grounded generation and verification stages for Solo Composer and authorized Auto Mode. Each photo may support up to six selected chores. Generation and verification do not request numeric confidence scores; verification checks the visible target and the chore’s required criteria. Older apps and existing three-chore sets keep their original limits. Consent, household manager authorization, access, private evidence, review, deletion, and reward controls continue to apply.