HabitStats Home Privacy Policy
Effective October 22, 2026.
HabitStats Home is a family calendar and chores board for a kitchen iPad (the HabitStats Home app). Parents set it up and run it from the Home tab of our HabitStats iPhone app. It's operated by Certified Cloud Consulting LLC ("we"). We collect only what the features need, and keep it only as long as they need it.
What we store, and why
| Data | Whose | Why |
|---|---|---|
| Your email address and sign-in identifier | Parents | To sign you in. You sign in with the HabitStats app's emailed code; one sign-in covers both. |
| Family details: name (optional), time zone, waking hours | Family | To run the board and its night mode |
| Family members: first names (or nicknames), emoji avatars, colours, roles | Parents and children | To show whose calendar and chores are whose. Children never have accounts or sign in. A parent enters and controls everything about them. Names are encrypted on your family's devices: we store them but can't read them. |
| Chores, points, rewards and requests, with their history (who did what and when), and parents' notes | Family | To run the board and keep its history. Chore titles, reward names and notes are encrypted on your family's devices: we can't read them. We can see numbers, dates and states (for example that a chore was done at 7:42), which the server needs to add up points and approvals. |
| Calendar events from the Google Calendars you choose and the calendar links you add (for example an iCloud or Outlook calendar): each event's title, times, and whether it's all-day, tentative or recurring. We don't store descriptions, locations or guest lists. Titles and calendar names are encrypted as they arrive so that only your family's devices can read them, and a calendar you set to "busy only" keeps no titles at all. | Family | To show them on the board. We keep events from a week ago to eight weeks ahead. |
| The Google account you connect for calendars: its email address and an encrypted Google refresh token | The parent who connected it | To keep the calendars in sync, and to tell you which account needs reconnecting |
Calendar links you add (iCloud "Public Calendar", Outlook "Publish a calendar", or any calendar's webcal:///.ics link): the link, stored encrypted, plus the name, owner and colour you give it | The parent who added it | To read that calendar (read-only, at most every 15 minutes). Anyone with such a link can read the calendar, so we never show it again, log it or include it in exports: the app shows only its host and last 4 characters |
| Photos you pick from Google Photos, encrypted on your devices: we store data we cannot read. | Family | The screensaver. The parent's phone downloads the photos you pick, shrinks them to display size, removes all metadata (location, camera details), and encrypts them before upload. We store only the encrypted copies (and their sizes); only your family's kiosks and parents' phones hold the key, which they share with each other directly. Your Google Photos access stays on your phone. |
| Each kiosk's and parent phone's public encryption key, and the photo key encrypted to each of them | Family | So your family's devices can share the photo key without us being able to read it |
| Each parent's recovery public key, and the family key encrypted to it (on unless you turn it off) | Parents | So a new iPhone signed in to your Apple Account can get your family's names and photos back if every device is lost. The matching private key is only in your iCloud Keychain, which Apple encrypts end to end: we can't use it. Turn it off in Home → Family. |
| Kiosk devices: name (encrypted on your devices), pairing time, and status check-ins (what the screen is showing and when it last synced) | Family | Kiosk health and "the kiosk is offline" alerts |
| Push notification tokens (of the HabitStats app on your phone) | Parents | To send you approval requests and alerts |
| Habits you choose to share from HabitStats: name, icon, done today, streak | Parents | To show them on the wall, only if you share them |
We don't collect location, contacts, advertising identifiers or analytics profiles. The kiosk app and the Home tab contain no analytics, advertising or crash-reporting code. We don't sell data, show ads, or track you across other companies' apps and websites.
Where it lives and who processes it
- Amazon Web Services (United States, us-west-2 in Oregon) hosts all data. It's encrypted at rest; Google tokens are additionally encrypted with a dedicated key.
- Google provides the calendars and photos you connect. We ask Google only for read-only access: the list of your calendars and the events on them. We read events only from the calendars you select. For photos, only your phone talks to Google Photos: it downloads just the photos you pick, and the Google Photos access never reaches our servers. HabitStats Home can't add, change or delete anything in your Google Calendar or Google Photos.
- Calendar links: if you add one, our servers download that calendar from the service that publishes it (for example Apple iCloud or Microsoft Outlook) at most every 15 minutes. That service sees a request from our servers, not from you, and we send it nothing about your family. Calendar links are read-only: we can't change those calendars either.
- Apple delivers push notifications. Only generic text (for example "A chore is waiting for approval") and random ids pass through Apple's (and Amazon's) push service: no children's names, chore or reward names, kiosk names or email addresses. The HabitStats app on the parent's phone fills in the words (for example "Alex finished Tidy desk") from what it already stores, without contacting anyone.
- HabitStats, our sister app, is where parents manage the family (the Home tab talks to HabitStats Home directly; HabitStats' own servers don't store your family's data). It is also linked if an adult shares habits to your household there: it then learns your family's name and time zone (never its members) and receives check-offs tapped on the kiosk.
How long we keep it
- While your family uses HabitStats Home, for the data in the table above. Calendar events outside the eight-week window are dropped as time moves on.
- Short-lived records expire on their own: kiosk status check-ins after 7 days; pairing codes after 10 minutes; unused co-parent invites after 7 days; encrypted photo uploads that were never finished after 24 hours; records of deleted items (which hold only an id, not the content) after 35 days; records that let the apps safely retry a request after 30 days.
- Operational logs are kept for 14 days. They're designed to contain only ids and error codes, not your family's content, email addresses, IP addresses or tokens.
- Encrypted backups expire within 35 days.
- Household data exports (below) are deleted from our servers after one day.
Deleting your data
In the HabitStats app, go to Settings → Delete account. It deletes your HabitStats Home data first, as below, then your HabitStats data and your sign-in.
- If another parent remains, your sign-in is unlinked from the family, your push tokens are deleted, and you become "Former parent" (your name and avatar are removed). Chores and points you recorded stay as family history. Google Calendar accounts you connected are disconnected: we delete the stored Google token, ask Google to revoke HabitStats Home's access, and remove that account's calendars from the wall. Calendar links you added are removed the same way (the stored link is deleted and its events leave the wall). Calendars connected or added by other parents are not affected. Your phones' photo keys are deleted too, and photos added after that use a new key your phones never get. The same happens if another parent deactivates you.
- If you're the family's last parent, the whole family's data, including the children's, is deleted with your account: members, chores, points, rewards, calendar copies, Google tokens (we also ask Google to revoke our access), calendar links, encrypted photos and photo keys, kiosks and push tokens. Kiosks reset to their pairing screen.
- Deletion is immediate. Encrypted backups age out within 35 days, and retry records within 30 days.
Children
HabitStats Home is used by families that include children, but children do not create accounts and we don't collect information directly from them. A parent adds a child's first name or nickname, an emoji and a colour, and sets up chores and rewards. We never ask for a child's birthday, email, photo or location. A child's name, their chore titles, reward names and the notes parents write are encrypted on your family's own devices before they reach us, so we store them but can't read them. Your history is kept in full. On the kiosk, a child can mark their own chores done and ask for a reward, which a parent approves. Parents can edit or remove this at any time, and deleting the family deletes it. Contact us at info@certifiedcloudconsulting.com with any question about your child's data.
Your choices and rights
In the HabitStats app's Home tab you can edit or remove family members, disconnect Google accounts, remove kiosks and deactivate a co-parent; parent mode on the kiosk also manages chores, rewards and photos. In HabitStats you can delete your account and family (Settings → Delete account). You can turn notifications off in iOS Settings.
Getting a copy of your household's data. Any parent can download it in the HabitStats app: Home tab → Family → Export household data. You get one file (JSON, readable by a computer or a text editor) with your family's details, members and each child's points, chores and their history, the points ledger, rewards and requests, the Google accounts and calendars you connected, the calendar links you added (by name and host; the links themselves are secrets and aren't included) and the events we copied from them, your kiosks, and a list of your screensaver photos. Photos themselves aren't in the file: they're encrypted on your devices and we can't read them (your originals stay in Google Photos). Secrets such as the kiosk PIN, access tokens and encryption keys are left out. The file is kept on our servers for one day so you can download it, then deleted, and it is deleted at once if you delete your account. A household can export up to 3 times a day. Your HabitStats data (habits and history) has its own export in HabitStats: Settings → Export my data.
For anything else, or if you'd rather ask us, email info@certifiedcloudconsulting.com. We answer within 30 days.
Changes
We'll post changes here and update the effective date. Material changes will be announced in the app.
Contact
Certified Cloud Consulting LLC, info@certifiedcloudconsulting.com