Privacy Policy

BravoPoints is designed for parent-supervised use. Children should not create accounts. Parents create and manage household profiles, tasks, rewards, point history, and child access.

We do not sell family data. We collect the minimum data needed to run the family reward system, secure the app, respond to privacy requests, and operate the service.

Parent account data may include name, email address, Google sign-in identifiers, household membership, invitation status, parent PIN status, and account settings.

Child profile data may include a first name or nickname, point balance, tasks, rewards, redemptions, point ledger history, avatar choices saved to the child profile, and parent-written encouragement messages. Parents should avoid entering sensitive information in child names, task titles, reward titles, or notes.

Operational data may include request logs, device/browser information, security events, diagnostics, and privacy request records. We also keep a simple internal record of which days an account uses the app; this is used only for aggregate usage statistics (for example, how many families were active this week) and is never shared with third parties or used for advertising.

We use family data to provide the app, show each child their dashboard, help parents manage a household, keep balances and rewards accurate, prevent misuse, troubleshoot issues, and respond to legal or privacy requests.

BravoPoints is intended to be set up by parents or legal guardians. Children should use child mode only with a parent-managed profile. Children should not send contact details, addresses, school names, photos, or other sensitive personal information through task or reward text fields.

Parents can ask to review, correct, delete, or stop further use of child profile information through the privacy request form.

We share data only as needed to operate the service, such as hosting, database, authentication, security, and email providers. We may also disclose information if required by law or to protect the service and users.

Parents sign in with Google or with an email-and-password account. Children never need an account of any kind.

We keep family data while the account is active or as needed to provide the service. Parents may request deletion. Some operational records may be retained for a limited time where needed for security, accounting, legal, or abuse-prevention purposes.

We use reasonable technical and organizational safeguards appropriate for a small family app, including access controls, provider-managed infrastructure security, HTTPS, and limiting collection. No internet service can be guaranteed perfectly secure.

Parents can request access, correction, deletion, consent withdrawal, or a privacy review through the privacy request form or by emailing privacy@bravopoints.ca.