ChorePilot Privacy Policy
Effective: 2026-08-30 · Last updated: 2026-08-30
1. Who we are
ChorePilot is made by UNIGATA INC., based in Toronto, Ontario, Canada. In this policy "we", "us" and "our" mean UNIGATA INC., and "you" means the person using ChorePilot.
Questions about this policy or your data: privacy@unigata.com
2. The short version
ChorePilot assigns tasks, follows progress, and keeps proof they were done — for families and for teams.
We do not track you. ChorePilot contains no analytics SDK, no crash-reporting SDK, no advertising identifier, and no third-party tracker of any kind. This is checked against the dependency lockfile, not asserted from memory. We do not build a profile of you, we do not sell or rent your data, and we have never done either.
We do not ask for your location or your contacts. The app requests exactly two Android permissions — to show notifications, and to restore your reminders after the device restarts.
3. What we collect, and why
| What | Why | Where it lives |
|---|---|---|
| Email address | Signing you in, and sending a sign-in or reset link | Our database |
| Password | Signing you in. Stored only as a cryptographic hash — we never see it | Our authentication provider |
| Display name | Showing who is who on your household's or team's list | Our database |
| Tasks, schedules and who did what | The product | Our database |
| Proof photos, when a task asks for one | Showing the group the task was done | Our storage, in a private bucket |
| Your settings and reminders | Working the way you set it | On your device |
If you subscribe
Payment is handled entirely by Apple (or Google on Android). We never receive or store your card number. We store only the fact that a subscription exists, its plan, and when it expires.
We use RevenueCat to keep that record in step with the app stores. RevenueCat receives an identifier we generate for your account and the purchase events the store reports — never your name, email, or card details. It is a payment-records processor working on our behalf, not an advertiser and not an analytics service.
What we do NOT collect
No location. No contacts. No advertising identifier. No card number.
Biometric unlock
If you turn on biometric unlock, the check happens on your device, by the operating system. Your fingerprint or face never reaches us and is never stored by us; we only learn whether the device said yes.
4. Proof photos — read this part
A proof photo is a picture of finished work, taken by a member of your household or team, and shown to the others in it.
- It is stored in a private bucket. There is no public URL, and it is served only to people in the same household or team.
- ⚠ A proof photo can show a person, a home, or a workplace. Photograph the work, not people, and do not upload a photograph of someone who has not agreed to it.
- We do not use proof photos for any other purpose. We do not use them to train anything, and we do not show them to anyone outside your group.
5. Where your data is stored
Account, task and photo data is stored with Supabase, our database and storage provider, on servers in the United States (Oregon).
🔴 Your data leaves Canada. We are a Canadian company and you are most likely a Canadian resident, but the data itself is held in the United States and is therefore subject to lawful access requests under United States law. If that is not acceptable to you, please do not create an account.
⚠ ChorePilot is moving to its own database in Canada (Montréal). When it does, this section will say so, and it will say so on the day it happens rather than afterwards.
6. How long we keep things
| Data | Kept for |
|---|---|
| Account and profile | Until you delete your account |
| Tasks and completion history | Until the administrator deletes them, or the account is deleted |
| Proof photos | Until you or your administrator delete them, or the account is deleted |
| Subscription records | As long as needed for billing and tax records |
| Data on your device | Until you delete the app or clear its data |
⚠ Proof photos are not yet deleted automatically. A 60-day automatic purge is built and is not yet running. We would rather tell you that than describe a deletion that does not happen. When it is running, this row changes.
7. Deleting your account
You can delete your account from inside the app. Deleting it removes your profile, your membership of any household or team, and your proof photos.
8. Children
ChorePilot is built for households, and a household may include children whose tasks a parent manages. A child does not need an account — a parent can list them and manage their tasks without one. We do not knowingly collect personal information directly from a child under 13.
9. Your rights
Under Canadian privacy law (PIPEDA) you may ask what we hold about you, ask us to correct it, and ask us to delete it. Write to privacy@unigata.com. Deleting your account from inside the app does most of this immediately.
10. Changes
If this policy changes we will update the "Last updated" date. A material change will be surfaced in the app rather than left here to be discovered.
11. Contact
UNIGATA INC. · Toronto, Ontario, Canada · privacy@unigata.com
UNIGATA INC. · Toronto, Ontario, Canada · privacy@unigata.com