Privacy Policy

This privacy policy describes how the Bucko mobile application ("Bucko", "the app", "we", "our") handles information. Bucko is published by Thorley Park. It is available on Apple iOS and Google Android.

We designed Bucko to be local-first: the app does not have a user account system and does not include any third-party analytics, advertising, or tracking SDKs.

There are two narrow exceptions. First, the optional Bucko Pro subscription: if you subscribe, the in-app purchase is handled entirely by Apple or Google (described in Bucko Pro subscriptions below). Second, the optional Family Sync feature for Pro subscribers: if you create or join a family, your app data syncs via a Supabase-hosted database so both parents stay in sync (described in Family Sync below).

Information stored on your device

When you use Bucko, the following information is stored locally on your device using the operating system's standard app storage (iOS App Sandbox / Android App-Specific Storage):

• Names you choose for each child profile (first name or nickname).
• An icon and colour you choose for each child profile.
• The name and icon you choose for each child's reward-points currency.
• The chores you configure (name, icon, payout amount, threshold, weekly cap).
• Your tap history per chore per week (which chores have been ticked off, how many points have been awarded).
• Whether each week has been ended and marked as paid.

This information is stored using AsyncStorage, which on iOS is backed by the App Sandbox and on Android by App-Specific Storage. It is included in your device's standard backup (iCloud Backup on iOS, Google Auto Backup on Android) according to your device's backup settings.

We do not have access to this information. It does not leave your device unless you choose to export it (see "Your controls" below) or unless your device's backup system uploads it to your own iCloud or Google account.

Information we do not collect

We want to be explicit. Bucko does not collect, transmit, store on our servers, or share with any third party:

• Your name, email address, phone number, or any contact information.
• Your child's last name, date of birth, school, address, photographs, or biometric data.
• Your device's IP address, advertising identifier (IDFA / AAID), or hardware identifiers.
• Crash logs, usage analytics, performance telemetry, or session recordings.
• Location data of any kind.
• Microphone, camera, contacts, calendar, or photo library data.
• Payment or financial information beyond what's needed for the optional Bucko Pro subscription (see below). The dollar values you assign to chores are local labels for your own household accounting and never leave your device.

Bucko Pro subscriptions

Bucko Pro is an optional auto-renewing subscription that unlocks unlimited child profiles, additional avatars, iCloud Backup (iOS), and Family Sync. The free tier of Bucko works without a subscription.

If you subscribe, the following data flows happen, and none of them touch your chore content:

• Apple App Store (iOS) or Google Play Store (Android) processes your payment. We never see your card number, billing address, or Apple/Google account credentials. Apple's and Google's privacy practices govern this transaction; see apple.com/legal/privacy and policies.google.com/privacy.
• The app uses the store's native subscription APIs (StoreKit on iOS, Google Play Billing on Android) to verify whether your subscription is active. This check happens directly between the app and the store — no subscription data is sent to any third-party service on our behalf.

You can cancel any time in iOS Settings → [your name] → Subscriptions, or in the Google Play Store → Subscriptions. Cancelling stops the renewal at the end of the current paid period; we do not pro-rate refunds (refunds are handled by Apple or Google through their normal channels).

If you never subscribe, none of the above data flows happen.

Permissions Bucko requests

Bucko requests the following runtime permissions:

• Local notifications (optional): used for the weekly pay-day reminder. The app requests this permission only when you enable the reminder in Settings. You can decline or revoke it at any time in your device's notification settings without affecting any other feature.

Bucko does not access your microphone, camera, location, contacts, calendar, photos, or any other sensor. If a future version adds a feature requiring additional permissions, we will update this policy and the app will request your permission at the moment it is needed.

How your data leaves your device

Your data only leaves your device in the following scenarios, all of which are under your control:

1. You export it. The Settings screen includes an export action that produces a JSON file containing your app data. You decide where that file goes (Files app, AirDrop, email, Google Drive, etc.). We do not see it.
2. You import it on another device. If you transfer that JSON file to another device and import it, your data lives on that device too.
3. Your operating system backs it up. If you have iCloud Backup (iOS) or Google Auto Backup (Android) enabled, your app data is included in those backups according to Apple's and Google's policies. Those backups go to your Apple or Google account, not to us.
4. You enable Family Sync (Bucko Pro). If you create or join a family via Settings → Family Sync, your app data is uploaded to and stored on servers operated by Supabase, Inc. (see Family Sync below). This only happens when you actively opt in to this feature.

Family Sync (Bucko Pro)

Family Sync is an optional Bucko Pro feature that lets two parents (or carers) keep their app data in sync across separate devices — including separate Apple IDs and across iOS and Android.

How it works: one parent creates a family link and receives a 6-character code (e.g. KOALA7). They share that code with the other parent, who enters it in the app. From that point, every time either parent saves data (tapping a reward, editing a chore, etc.), the full app dataset is written to a shared row in a database hosted by Supabase, Inc. and delivered to the other parent's device in real time.

What is stored on Supabase servers:

• Child profile data: first name or nickname, chosen icon and colour, points-currency name and icon.
• Chore configuration: chore names, icons, payout amounts, streak thresholds.
• Weekly tap history: which chores have been completed, how many points awarded, whether the week has been paid out.
• The 6-character family code (used as the row identifier and shared access key).

What is NOT stored on Supabase servers: payment information, IP addresses, device identifiers, your name or email, children's last names, dates of birth, location data, photos, or any data other than the app state listed above.

Access control: the 6-character code is the only credential protecting this data. Any device that knows the code can read and write the family's data. Treat it like a shared password and only share it with people you trust.

Data retention and deletion: your family data row persists on Supabase's servers as long as Family Sync is active. You can permanently delete it at any time directly from the app: go to Settings → Family Sync → Delete Family Sync. This immediately removes all shared family data from Supabase's servers and disconnects both devices. Your local data on each device is not affected. If you prefer, you can also request deletion by emailing hello@getbucko.com with your family code.

Supabase as a data processor: Supabase, Inc. acts as a data processor on our behalf. Supabase stores data in data centres that may be located in the United States or other regions. See supabase.com/privacy for Supabase's privacy practices.

If you never use Family Sync, none of the above applies and no chore data is sent to any server.

Your controls

• View your data. Everything is visible inside the app.
• Export your data. Settings → Export Data produces a JSON file.
• Delete your local data. Settings → Reset Data wipes everything stored by the app on the device. Uninstalling Bucko also removes all its local data.
• Leave Family Sync. Settings → Family Sync → Leave Family Sync disconnects your device from the family. Your partner can still use the code and your data stays on our servers.
• Delete Family Sync data from our servers. Settings → Family Sync → Delete Family Sync permanently removes all shared family data from Supabase's servers immediately. The family code stops working, both devices disconnect, and no data remains on our infrastructure. Your local data on each device is preserved.
• Cancel a subscription. iOS Settings → [your name] → Subscriptions, or Google Play → Subscriptions.
• Opt out of OS backup. You can exclude Bucko from iCloud Backup or Google Auto Backup in your device's system settings.

Children's privacy

Bucko is designed for parents and guardians to manage household chores. It is not directed to children under 13 (or under 16 in jurisdictions where that is the relevant age). We do not knowingly collect any personal information from children, because we do not collect any personal information from anyone.

A parent using the app may type in a child's first name or nickname as a profile label. By default, that text stays on the parent's device and we never see it. If Family Sync is enabled, child profile data (first name or nickname, icon, chore configuration) is included in the app state synced to Supabase-hosted servers and is readable by any device that has joined the same family. You can remove this data from our servers at any time using the Delete Family Sync option in the app.

Security

Because Bucko stores chore data only on your device using standard operating system storage, the security of that data depends on the security of your device (passcode, biometric lock, OS-level encryption). We recommend keeping your device's operating system up to date and using a passcode. Subscription transactions are protected by Apple's and Google's billing infrastructure.

Changes to this policy

If we change how Bucko handles information — for example, by adding an optional cloud sync feature — we will update this policy and update the "Last updated" date at the top. For material changes (anything that would expand what data leaves your device), the app will surface the change to you before the new behaviour takes effect.

Contact

If you have questions about this policy, email us at hello@getbucko.com.

Jurisdiction-specific notes

California residents (CCPA/CPRA)

We do not "sell" or "share" personal information as those terms are defined under California law. Because we do not collect personal information about app usage, the rights to access, delete, correct, or opt out of sale do not have any data to act upon — but if you believe we hold information about you, you may contact us at the address above.

EU/UK residents (GDPR/UK GDPR)

By default, Bucko does not process your chore data on our infrastructure and we are not the data controller for on-device storage. One exception applies when you use Family Sync (Pro): Supabase, Inc. acts as a data processor under our instructions, storing your app data in data centres that may be located outside the EU/EEA; see supabase.com/privacy. Subscription transactions are handled directly by Apple or Google — no third-party subscription service is used. For GDPR data subject requests (access, erasure, portability), you can delete your Family Sync data directly in the app (Settings → Family Sync → Delete Family Sync), or email hello@getbucko.com.

Australian residents (Privacy Act 1988)

This policy is intended to comply with the Australian Privacy Principles. For users who do not use Family Sync, we do not collect personal information about app usage and APP 1–13 obligations are met by the absence of collection. For users who enable Family Sync, child profile nicknames and chore data are transmitted to Supabase-hosted servers; we handle this data in accordance with APP 8 (cross-border disclosure). You can delete your data from our servers at any time directly in the app, or submit access and correction requests to hello@getbucko.com.