Privacy Policy

Last updated: 22 September 2026

This policy explains what personal data we collect, why, and what rights you have over it. It covers both apps we make — Chore Scape and DocuScape — since they're built and run by the same small operation and share the same underlying account system. It applies whether you use either app as a parent, carer, support worker, or the person a task or record is about.

Who we are

We are the data controller for the personal data described in this policy, for both Chore Scape and DocuScape. You can contact us at support@chorescape.co.uk about anything in this policy, including to exercise any of the rights listed below.

What we collect

Across both apps:

• Account details: display name, email address, and a password (stored as a secure one-way hash, never in plain text).
• Which accounts yours is linked to (in Chore Scape, a "Warrior" and their linked "Strategist"; in DocuScape, a Strategist and the Chore Scape Warrior they're linked to, where relevant).

Chore Scape specifically:

• Task ("quest") data you or a linked family member create: titles, descriptions, due dates, rewards, and completion status.
• Photos submitted as proof a task was completed, where that feature is used.
• In-app progress data: points, virtual currency balances, and unlocked collectible cards.
• Payment details are handled entirely by our payment processor, Stripe — we never see or store your card details ourselves (see "Who we share it with" below).

DocuScape specifically:

• Source documents a Strategist uploads to create a template (e.g. a council or employer form) — a Word document or PDF.
• The structured questions and answers drafted from that document, and every answer a Strategist submits when filling one in — which may include information about a Chore Scape Warrior linked to that Strategist (see "Data about someone other than the account holder" below).
• The email addresses a Strategist configures as recipients for a completed record (e.g. a council caseworker's or employer's email address).

Why we process your data

We rely on the following lawful bases:

• Contract — most processing (account creation, task tracking, generating and sending a completed record) is necessary to provide the service you've asked us for.
• Consent — for optional features, such as enabling photo proof of task completion or biometric login, which you can decline or turn off at any time in the app's settings.
• Substantial public interest / health & social care purposes — where a DocuScape record includes special category data (see below), this is the basis that applies, reflecting that these records exist to support a genuine care or support relationship, not for any other purpose.

Special category data in DocuScape records

DocuScape exists to turn genuinely repetitive council and employer paperwork into something faster to fill in. Depending on the document a Strategist uploads, the questions and answers in a record may include special category data under UK GDPR — for example, information about someone's health, care needs, or support requirements. We don't ask for this deliberately; it's a direct reflection of whatever questions are on the source document itself. We process it only to generate the record you've asked for and send it to the recipients you've configured — never for any other purpose, and never combined with other users' data.

Data about someone other than the account holder

A DocuScape record is submitted by a Strategist, but it's often about someone else — the Chore Scape Warrior they support. That person doesn't sign in to DocuScape or submit the record themselves. If you're a Warrior linked to a Strategist using DocuScape, records may be created that reference your name and, where a template asks for it, details about your day. If you have questions about a specific record submitted about you, contact us at the email above.

Who we share it with

We use a small number of specialist providers ("processors") to run our apps. None of them may use your data for their own purposes.

• Supabase — hosts our database, file storage, and user authentication for both apps. Our project's data is hosted in Supabase's EU (Frankfurt) region.
• Resend — sends transactional emails on our behalf: sign-in verification codes and password resets (both apps), and a DocuScape record's completed PDF to the recipients a Strategist has configured for it.
• Anthropic — when a Strategist uploads a source document to create a DocuScape template, its text is sent to Anthropic's Claude API to draft the list of questions the app will ask each time the form is filled in. This happens once per template, not once per submission. Anthropic processes this text to generate that response; it is not used to train their models.
• Google Firebase — delivers push notifications (e.g. "your quest was approved", "a new app update is available") to both apps. This uses a device-level token, not your name or email.
• Stripe — handles subscription and payment processing for Chore Scape. We never see or store your full card details; Stripe shares back only what we need to know your subscription is active.

Resend, Anthropic, and Google Firebase are US-based. Where your data is transferred outside the UK, we rely on the data protection safeguards each provider commits to in its own terms (such as the EU-U.S. Data Privacy Framework or standard contractual clauses) to ensure it stays protected to UK standards.

We do not sell your data, and we do not share it with anyone else for marketing purposes. The only other recipients of a DocuScape record are whichever email addresses a Strategist has personally configured for that specific template (e.g. a named council caseworker) — we never choose or add recipients ourselves.

Children's data

Chore Scape is designed for anyone who wants a gamified way to manage chores and routines, whether that's an adult using it independently, an adult linked to a support person for accountability, or a child using it under a parent or carer's supervision (a "Strategist" account). Where a Warrior account does belong to a child, it's set up and linked by their parent or carer, who retains oversight of the data associated with it. In every case, we collect no more data than is needed for the app to function, and we don't use any user's data for marketing or profiling.

How long we keep it

• Account and task data: kept for as long as your account is active.
• DocuScape completed records (the submitted answers and generated PDF): automatically deleted 7 days after submission. A Strategist's own copy is sent to their own email at the time of sending, since that's the point after which we no longer hold it ourselves.
• DocuScape source documents (the file a Strategist originally uploaded to create a template): kept for as long as that template exists, and deleted when the template is deleted.
• Chore Scape proof photos: kept for as long as the related quest exists, and deleted if the quest is deleted.

Both apps have a "Delete My Account" action in Settings. Requesting it marks your account for deletion straight away and shows you the exact date it will happen; you can cancel the request at any point before then. 30 days after the request, an automated process permanently deletes your account, every record tied to it, and any files you've uploaded (such as proof photos or DocuScape documents). You can also request deletion by emailing us instead, if you'd rather not use the in-app option.

How we protect it

• All traffic between our apps and our servers is encrypted in transit.
• Data at rest is encrypted by our hosting provider's infrastructure.
• Access to your data is restricted by row-level security policies, so one family's — or one Strategist's — data is never visible to another's.
• We don't embed administrative credentials in the apps themselves.
• We send third-party processors only what each one genuinely needs to do its job — for example, Anthropic sees a template's source text once, never a submitted record's actual answers.

Your rights

Under UK GDPR, you have the right to:

• Ask what personal data we hold about you, and get a copy of it (right of access).
• Ask us to correct inaccurate data (right to rectification).
• Ask us to delete your data (right to erasure), subject to any legal reason we may need to keep it — use the "Delete My Account" action in either app's Settings, or email us.
• Ask for a portable copy of data you've provided to us (right to data portability).
• Object to certain kinds of processing.

To exercise any of these rights, email support@chorescape.co.uk. If you're not satisfied with our response, you have the right to complain to the UK Information Commissioner's Office (ico.org.uk).

Changes to this policy

If we make significant changes to how we handle your data, we'll update this page and, where appropriate, notify you in the app.