ChorePilot Privacy Policy
Effective: 2026-09-02 · Last updated: 2026-09-02
1. Who we are
ChorePilot is made by UNIGATA INC., incorporated federally in Canada under the Canada Business Corporations Act on 21 July 2026 (corporation number 1810454-9), with its registered office in Toronto, Ontario, Canada. In this policy "we", "us" and "our" mean UNIGATA INC., and "you" means the person using ChorePilot.
Questions about this policy or your data: [email protected]
2. The short version
ChorePilot assigns tasks, follows progress, and keeps proof they were done — for households and for teams.
We do not track you. ChorePilot contains no analytics SDK, no crash-reporting SDK, no advertising identifier, and no third-party tracker of any kind. This is checked against the dependency lockfile, not asserted from memory. We do not build a profile of you, we do not sell or rent your data, and we have never done either.
We do not ask for your location or your contacts. The app requests exactly two Android permissions — to show notifications, and to restore your reminders after the device restarts.
3. What we collect, and why
| What | Why | Where it lives |
|---|---|---|
| Email address | Signing you in, and sending a sign-in or reset link | Our database |
| Password | Signing you in. Stored only as a cryptographic hash — we never see it | Our authentication provider |
| Display name | Showing who is who on your household's or team's list | Our database |
| Tasks, schedules and who did what | The product | Our database |
| Proof photos, when a task asks for one | Showing the group the task was done | Our storage, in a private bucket |
| Your settings and reminders | Working the way you set it | On your device |
If you subscribe
Payment is handled entirely by Apple (or Google on Android). We never receive or store your card number. We store only the fact that a subscription exists, its plan, and when it expires.
We use RevenueCat to keep that record in step with the app stores. RevenueCat receives an identifier we generate for your account and the purchase events the store reports — never your name, email, or card details. It is a payment-records processor working on our behalf, not an advertiser and not an analytics service.
What we do NOT collect
No location. No contacts. No advertising identifier. No card number.
Biometric unlock
If you turn on biometric unlock, the check happens on your device, by the operating system. Your fingerprint or face never reaches us and is never stored by us; we only learn whether the device said yes.
4. Proof photos — read this part
A proof photo is a picture of finished work, taken by a member of your household or team, and shown to the others in it.
- It is stored in a private bucket. There is no public URL, and it is served only to people in the same household or team.
- ⚠ A proof photo can show a person, a home, or a workplace. Photograph the work, not people, and do not upload a photograph of someone who has not agreed to it.
- We do not use proof photos for any other purpose. We do not use them to train anything, and we do not show them to anyone outside your group.
An administrator can save a copy, and then remove ours
⚠ NOT AVAILABLE YET. This is written in advance, because the day it is switched on the app starts doing it — and a privacy policy updated afterwards was wrong in the meantime. When it works, this paragraph loses this warning and nothing else changes.
An administrator of your household or team will be able to save the group's proof photos to storage they choose — their own device, or a drive attached to it — and then delete the copies we hold, which is how a group frees up space without losing its record.
- The copy is downloaded to them. It does not pass through us, and once it has left, we cannot see it, reach it, or delete it. It is theirs to keep or destroy.
- ⚠ The copy contains photos of everyone in the group, each carrying the name and time burned into the picture. That is the point of the record, and it means an administrator ends up holding pictures of other people. It is the same responsibility they already have inside the app, in a place we no longer control.
- Only an administrator can do it. A member cannot export or clear the group's photos, because a record somebody can quietly remove themselves from is not a record.
- We check the copy before we delete anything. Every photo is verified against a checksum first, and any that fails is left with us as well as with them. A photo is never removed from our storage on the strength of an export that did not finish.
- ⚠ It is not a backup. It is one copy, on one disk, held by one person. If it is lost after ours has been deleted, we cannot restore it.
5. Where your data is stored
Account, task and photo data is stored with Supabase, our database and storage provider, on servers in the United States (Oregon).
🔴 Your data leaves Canada. We are a Canadian company and you are most likely a Canadian resident, but the data itself is held in the United States and is therefore subject to lawful access requests under United States law. If that is not acceptable to you, please do not create an account.
⚠ ChorePilot is moving to its own database in Canada (Montréal). When it does, this section will say so, and it will say so on the day it happens rather than afterwards.
6. How long we keep things
| Data | Kept for |
|---|---|
| Account and profile | Until you delete your account |
| Tasks and completion history | Until the administrator deletes them, or the account is deleted |
| Proof photos | Until you or your administrator delete them, or the account is deleted |
| Subscription records | As long as needed for billing and tax records |
| Data on your device | Until you delete the app or clear its data |
⚠ Proof photos are not yet deleted automatically. A 60-day automatic purge is built and is not yet running. We would rather tell you that than describe a deletion that does not happen. When it is running, this row changes.
⚠ An administrator will also be able to remove proof photos by saving a copy and deleting ours — see §4. That is not available yet either, and the same rule applies: it will be described here as something that happens on the day it happens.
7. Deleting your account
You can delete your account from inside the app. Deleting it removes your profile, your membership of any household or team, and your proof photos.
8. Children
ChorePilot is a household organiser for the general public. It is not directed at children, it is not offered in the App Store's Kids Category or Google Play's Families programme, and we do not ask for or record anyone's age or date of birth. Because we do not collect age, we cannot and do not knowingly distinguish users by it. If you believe a child has provided us personal information and you are their parent or guardian, contact us and we will delete it.
9. Your rights
Under Canadian privacy law (PIPEDA) you may ask what we hold about you, ask us to correct it, and ask us to delete it. Write to [email protected]. Deleting your account from inside the app does most of this immediately.
10. Changes
If this policy changes we will update the "Last updated" date. A material change will be surfaced in the app rather than left here to be discovered.
11. Contact
UNIGATA INC. · Toronto, Ontario, Canada · [email protected]
UNIGATA INC. · Toronto, Ontario, Canada · [email protected]