Privacy Policy

Last updated: October 17, 2026

Summary

Gritling is a chore and rewards app for families with children about 6 to 10 years old. It is for families in the United States.
A parent creates the account. Children don't have accounts, email addresses, or passwords. They use kid mode on a device the parent controls.
We collect what the app needs to work. We don't show ads, use analytics tools that follow what you do in the app, or track you across other apps or websites. We don't sell your information or share it for advertising.
Only your family can see your family's information, and only the parents can see chore photos.
You can delete your account at any time, in the app or on the web. Deletion is immediate.

Who we are and how to reach us

Gritling is operated by Schiller Technologies LLC ("we" or "us"). We are the only company that collects or keeps children's information through Gritling. The service providers listed below handle it only on our behalf. For any privacy question or request, including a request about your child's information, contact us:

Email: privacy@gritling.com
Mail: 4473 Wind Chime Way, Cottage Grove, WI 53527
Phone: (608) 212-6939

What we collect

From parents

Your email address and password. Our sign-in provider stores the password as a hash, and we never see it.
A hash of your parent PIN. The mobile app asks you to set a PIN before kid mode can start, and the PIN is needed to leave kid mode.
Family settings: the family name, your timezone, point rates, and whether the weekly digest is on. If you don't name your family, we name it after the part of your email address before the "@".
Your children's profiles: a display name, an avatar emoji, an optional birth year, and a hash of the child's PIN if you set one. We never ask for a child's full name, address, phone number, or email address.
What you set up and decide: chore titles and descriptions, approvals, rejection reasons, point grants and deductions, and notes on allowance payouts.
The email address of anyone you invite to your family.
Your subscription status: the plan, the store, the renewal or end date, and the purchase records that RevenueCat sends us. We never see your card number.
Messages you send us.

From children, in kid mode

Chore completions: which chore, and when the child marked it done.
Chore photos, when a chore requires one. The child takes the photo with the camera. A photo can show your child or the inside of your home.
Point redemptions: points traded for screen-time minutes or for an allowance request, and the minutes used on the timer.
Achievements and streaks, which the app works out from this activity.
PIN entries, which we check against the stored hash.

A child can't type messages or notes in kid mode, post anything publicly, or contact anyone through Gritling.

Automatically

A push-notification token and a device identifier for each phone or tablet where a parent signs in. The identifier is Apple's identifier for vendor on iPhone and iPad, and the Android ID on Android. We use them only to deliver notifications to the right device.
The device's IP address with each PIN attempt, in kid mode and in parent mode. We use it only to limit PIN guessing, and we delete it within 2 days.
Crash reports, through Sentry. A report has the error, the app version, and the device model and operating system. It can include internal record IDs, such as a child's profile ID, but never a child's name. In parent mode a report includes your account ID. In kid mode the app sends reports without your account ID. In parent mode, Sentry also receives performance timings from a sample of sessions. We set Sentry not to store IP addresses.
Request logs at our hosting providers, with IP addresses, times, and the pages or functions requested.

How we use it

To run Gritling: show your family's information to your family, keep point balances, work out streaks and achievements, and send the notifications and emails you have turned on.
To keep Gritling secure, for example by limiting PIN guesses and invite emails.
To manage your subscription.
To find and fix bugs, using crash reports and logs.
To answer your questions and requests.
To meet our legal obligations.

We don't use children's information for advertising, marketing, or profiling. We don't use anyone's information to train AI models. We don't sell personal information or share it for cross-context behavioral advertising.

Who can see it

Parents in your family can access all of the family's information. That includes every child's activity and photos, the PIN-attempt log, and each other's email addresses.
Children in kid mode see their own chores, points, minutes, streaks, and badges. The profile picker shows every child's display name and avatar.
Anyone you invite becomes a parent in your family, with the same access as you. Invite only another parent or legal guardian of your children.
Our service providers, listed in the next section, handle information only on our behalf.
Legal and safety. We disclose information when the law requires it, such as for a valid subpoena or court order, or when we need to protect the safety of a child or anyone else.
A change of ownership. If another company acquires Gritling, your information moves to it under this policy. The new owner must get your consent before using children's information in a materially different way.

An invite link shows your family name and the invited email address to whoever holds it. Apart from that, no one outside your family can see your family's information in Gritling.

Our service providers

These companies run parts of Gritling for us. Each one may use your information only to provide its service to us, under its data processing terms.

Supabase. Runs our database, sign-in, chore-photo storage, and the server functions behind the app. It may also send account emails, such as sign-up confirmations and reset codes. It holds all account and family information, including chore photos and the logs described above.
Cloudflare. Hosts the parent web dashboard and these pages. It also forwards the email you send to our privacy and support addresses on to our inbox. Its request logs include IP addresses. It passes along the messages you send us.
Resend. Sends invite emails, the weekly digest, and account emails. It receives each email's recipient and contents. An invite names your family and your email address. The digest lists each child's display name, chores done, minutes earned, streak, and new badges.
Expo. Passes push notifications to Apple and Google for delivery. It receives push tokens and the notification text, which can include a child's display name, a chore title, points, an allowance amount, or a rejection reason.
Apple and Google. Run the App Store and Google Play, process in-app purchases under their own privacy policies, and deliver push notifications to your devices. They receive purchase details and the notification text. We never receive your card number.
RevenueCat. Keeps track of subscription status across the App Store and Google Play. It receives your account ID and your store purchase records, such as product, price, country, and transaction IDs.
Sentry. Collects crash reports. It receives the crash reports described above.
SiteGround. Hosts the privacy@gritling.com and support inboxes. It stores the messages you send us.

Children's privacy (COPPA)

The U.S. Children's Online Privacy Protection Act (COPPA) applies to kid mode, and we treat everyone who uses kid mode as a child under 13. This section is our COPPA notice to parents. The rest of this policy is part of it.

What we collect from children is listed above under "From children, in kid mode". Children can't make any information public.
How we use it. Only to run kid mode and the parent screens as described in "How we use it", never for advertising.
Disclosure. We don't disclose children's information to third parties. Our service providers process it only to support Gritling, and only your family can see it in Gritling.
Device identifiers. Kid mode sends the device's IP address with every request, and crash reports carry device details. We use these only to keep Gritling working and secure. They are never used to contact or profile a child, or for advertising. Gritling contains no advertising software and no analytics tools that follow what people do in the app, and we delete PIN-attempt IP addresses within 2 days.
Your consent. Before kid mode collects anything from a child, we need your consent. When you add a child, we email you a notice that says what kid mode collects and how we use it, with a link to this policy. Kid mode stays off for that child until you give consent through that email. We then send a second email confirming your consent and explaining how to withdraw it.
Review. The parent screens show chores waiting for review with their photos, plus balances, streaks, badges, and allowance requests. For everything else, including past completions, reviewed photos, and the PIN-attempt log, email us for a copy.
Delete or stop collection. Deleting a child's profile deletes everything collected from that child, and kid mode can't collect anything more from them. Copies in crash reports, logs, and backups expire on the schedule in "How long we keep information". To delete a single item, such as one photo, email us. To withdraw your consent, email us. We then turn kid mode off for that child and delete what we collected from them.
Retention. "How long we keep information" below is our data retention policy.

Before we act on a request about a child, we confirm it comes from the email address on the family's account.

How long we keep information

Your account, family settings, children's profiles, chores, chore history, points, achievements, and allowance records. We keep these to run Gritling and keep point balances correct. We delete them as soon as you delete the child, or when the last parent in your family deletes their account.
Chore photos. We keep these so a parent can check a chore before approving it. We delete them as soon as you delete the child, or when the last parent in your family deletes their account. Deleting a chore does not delete the photos taken for it.
Invites, including the email address of each person invited. We keep these to let the invited parent join and to show who was invited. We delete them when your family is deleted.
The log of invite emails sent, with the invited address. We keep it to limit how many invites one account can send. We delete each entry within 2 days.
The log of PIN attempts, with IP addresses. We keep it to limit PIN guessing. We delete each entry within 2 days.
Purchase records that RevenueCat sends us. We keep these to handle refunds, chargebacks, and billing questions, which can arrive after an account is gone. They contain your account ID and store transaction details, not your name or email address. We delete each record 2 years after we receive it, even if you delete your account.
Push tokens and device identifiers. We keep them to send notifications to your devices. We delete a device's token when you sign out on it, and all of yours when you delete your account.
Copies of emails we send. Resend keeps them to report whether each email was delivered. Resend deletes them within 30 days.
Push notification text. Expo holds it only to pass the notification to Apple or Google. Expo does not store it after handing it on.
Messages you send us. We keep them to answer you and to keep a record of what we agreed. We delete them 2 years after your last message.
Crash reports. We keep these to find and fix bugs. Sentry deletes them within 90 days.
Hosting request logs. Our providers keep these so we can keep Gritling secure and fix problems. They delete them within 30 days.
Database backups. We keep these to recover from a failure, and we restore from one only for that reason. Deleted information stays in a backup until the backup expires, within 30 days.

Security

All traffic between the app and our servers is encrypted with HTTPS.
We store PINs only as salted hashes. Our sign-in provider hashes passwords.
Database access rules let each parent reach only their own family's information.
Chore photos sit in private storage. The app opens each one through a link that expires after 2 minutes.
We limit failed PIN attempts.

No system is perfectly secure. If a breach affects your information, we will tell you as the law requires.

Your rights and how to delete your account

See and correct. The parent screens show chores waiting for review, balances, streaks, badges, and allowance requests. You can edit a child's name, avatar, and birth year, and your family settings.
Get a copy. Email privacy@gritling.com from the email address on your account, and we will send your family's information within 30 days.
Delete your account. In the Gritling app, open Family settings and choose Delete account. On the web, sign in at parent.gritling.com, open Family settings, and choose Delete account. If you are the only parent, this immediately deletes your family, every child's profile, history, and chore photos, and your login. If another parent shares the family, only your login is deleted, and the family stays with them. If you joined that family through an invite, the invite record with your email address stays with the family.
If you can't sign in, email privacy@gritling.com from the email address on your account, and we will delete the account within 30 days.
What we keep after deletion is listed in "How long we keep information": purchase records for 2 years, crash reports for up to 90 days, and backups and logs for up to 30 days.
Subscriptions. Deleting your account doesn't cancel an App Store or Google Play subscription. Cancel it in the store.
Delete a child. Open the child's page and choose Delete. This deletes the child's profile, history, and chore photos.
Emails and notifications. Turn off the weekly digest in Family settings. The setting covers every parent in the family. Turn off push notifications in your device settings.

Some state laws give residents the right to access, correct, delete, or get a copy of their personal information. We give these rights to every user, wherever you live. Email privacy@gritling.com and we will answer within 30 days. If we turn down a request, reply to our answer to appeal, and we will respond within 45 days.

Do Not Track

Gritling doesn't track you across other websites or apps, and doesn't let anyone else do that through Gritling. So we treat every visitor the same, whether or not their browser sends a Do Not Track or Global Privacy Control signal.

Where we operate

Gritling is for families in the United States. We store your information in the United States, and we choose US data regions for the providers that hold it for us.

Changes to this policy

We post every change on this page and update the date at the top. Before a material change takes effect, we email the parents on every account. If a change affects how we collect, use, or disclose children's information, we ask for your consent again before it applies to your child.

Contact

Write to privacy@gritling.com or to Schiller Technologies LLC, 4473 Wind Chime Way, Cottage Grove, WI 53527.