Privacy Policy
WishJar works differently from most habit apps: parents and kids each use their own device, so family data syncs through a secure cloud database instead of staying on a single phone. This page explains exactly what that means.
What we collect
- Parent account: your email address and password. The password is stored only as a secure hash by our authentication provider — we never see it.
- Parent display name: what your kids call you (e.g. “Mom”, “Papa”, “Sam”).
- Family data you enter: children’s first names and ages, tasks, rewards, wishes, goals, task history, approval notes, and reward redemptions.
- Push tokens: an Apple device token per parent device, used only to deliver notifications such as “Maya finished Brush teeth”.
We do not collect location, contacts, photos, browsing history, advertising identifiers, or any analytics that track you across apps or websites.
Children’s privacy
WishJar is built for parents. Children never create accounts: a child joins by typing a six-letter family code, and their device receives an anonymous identifier linked to the profile their parent created (a first name and age only).
A child using the app can mark tasks done, redeem rewards, and make wishes — activity that is visible to their parents at all times. We collect no contact information from children, show no advertising to anyone, and build no profiles of anyone.
Where your data lives
Family data is stored in a cloud database operated on our behalf by Supabase, encrypted in transit and at rest. Access is enforced server-side: only the parents of a family, and the kid devices linked to it, can read that family’s data. SteadyLife staff do not browse your family’s data.
How your data is used
Only to run the app:
- show each family member their tasks, rewards, and points
- calculate points (approved tasks minus redeemed rewards — never edited by anyone)
- notify parents when a kid finishes a task, makes a wish, or redeems a reward
Your data is never sold, shared for advertising, or used to train anything.
Third-party services
Supabase (database and sign-in) and Apple (App Store, push notifications). That’s the whole list — no trackers, no analytics SDKs, no ad networks.
Deleting your data
- Individual items — tasks, rewards, kids, and devices can be removed in the app.
- Your whole account — in the app: Home → house icon → Delete account. If you are the only parent, this erases the entire family — kids, tasks, points, history — immediately and permanently. If a co-parent remains, your account is erased and the family stays with them.
- A kid’s device — unlink it from the kid’s detail screen, or the kid can leave the family from their own menu.
You can also email us and we’ll do it for you.
Contact
Questions about this policy: support@steadylife.app