Privacy Policy

TickBucks is designed for parents (or other responsible adults) to manage chores and virtual pocket money for their children. Only the parent holds an account. Child profiles are created by the parent inside that account; children do not register themselves and we do not collect personal data from children directly.

Because the parent is providing information about a child, the parent is responsible for ensuring they have the right to do so and for explaining TickBucks to the child in age-appropriate terms.

The data controller for personal data processed through TickBucks is Nunlimited. You can contact us by emailing help@tickbucks.app.

Information about the parent (account holder)

• Your email address, name, and any profile information you provide to our identity provider when you sign up.
• Authentication metadata such as sign-in timestamps and the device you used (handled by our identity provider, Clerk).
• Any content you create inside the app: chore templates, default rewards, settings, and approvals.
• Optional email preferences for the weekly review email.

Information about each child profile

• First name (or nickname), avatar selection, theme colour, and an emoji PIN you set so the child can open their own dashboard.
• Activity inside the app: chores assigned to them, ticks, virtual balance, transaction history, savings goals, badges, and streaks.

We do not collect a child's real name, date of birth, address, phone number, photo, email, or any precise location. We do not ask children to type anything other than tapping their emoji PIN.

Technical data

• Server logs containing IP addresses, user agents, and request paths, retained for a short period for security and debugging.
• Aggregate, cookie-less usage statistics from Umami (see our Cookie Policy).

• To provide the service — accounts, chore tracking, virtual balances, savings goals, and dashboards. Lawful basis: performance of a contract (the Terms of Service you accept on sign-up).
• To keep the service secure — authentication, session management, fraud prevention, and abuse monitoring. Lawful basis: legitimate interests (running a secure service) and legal obligation.
• To send service emails — for example, your weekly review summary or a security notification. Lawful basis: legitimate interests and, where you have explicitly opted in, consent.
• To improve the product — using cookie-less aggregate analytics from Umami. Lawful basis: legitimate interests.

We do not sell personal data. We share data only with the sub-processors that make TickBucks work:

• Clerk — authentication and parent account management.
• Vercel — application hosting and edge networking.
• Resend — transactional email delivery (weekly review, security notifications).
• NocoDB (self-hosted by Nunlimited)— the database that stores your family's data.
• Umami — cookie-less, anonymised product analytics.

We may also disclose data when required by law, to enforce our Terms, or to protect the rights, property, or safety of TickBucks, our users, or others.

Some of our sub-processors operate outside the UK. Where personal data is transferred outside the UK, we rely on appropriate safeguards such as UK adequacy regulations, the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses combined with the UK Addendum.

We keep parent account data for as long as your account is active. If you delete your account, we delete or anonymise your family's data within 30 days, except where we are legally required to retain it for longer (for example, financial or tax records — which do not apply to TickBucks today because no real money flows through the service).

Server logs are retained for up to 90 days. Analytics data is aggregated and is not tied to identifiable individuals.

You have the right to:

• access the personal data we hold about you and your family;
• have inaccurate or incomplete data corrected;
• have your data erased (this includes profiles of children in your account);
• restrict or object to certain processing;
• request a copy of your data in a portable format;
• withdraw any consent you have previously given;
• complain to the UK Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, email help@tickbucks.app. We aim to respond within 30 days.

We use TLS in transit, encryption at rest where our infrastructure supports it, scoped API tokens, and access controls limited to a small number of authorised maintainers. No system is ever 100% secure, but we treat security as a first-class concern and will notify affected users without undue delay if a breach occurs.

TickBucks is intended to be used by parents on behalf of their children, with no age limit on the child profile. We do not knowingly collect personal data directly from children. Child profiles contain only the limited information the parent chooses to provide (nickname, avatar, theme, emoji PIN) and the activity recorded inside the app.

Parents can edit or delete a child's profile at any time from inside the app.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, we will notify you by email or through the app before the changes take effect.

For any privacy question or to exercise your rights, email help@tickbucks.app.