Privacy Policy

Last updated: August 17, 2026

15-Minute House Hero is an app for planning short household chore sessions, tracking progress, and earning achievements such as XP, streaks, titles, and badges. This policy explains what personal data the app processes and why.

Who is responsible

The data controller is Robin Viken, an individual developer established in Norway. You can reach us at robinviken@gmail.com for any privacy question or request.

Accounts

On first launch the app creates an anonymous account for you automatically. This account is identified only by a randomly generated identifier — it contains no name, email address, or contact details.

You may optionally add an email address and password so you can sign in on another device and recover your data. If you do, your email address is stored by our authentication provider and is used for sign-in and account recovery only. We do not send marketing email.

Data we store when you use the app

• Profile and progress — your display name, total XP, current title, current and best streak, personal-best session score, and session and chore totals.
• Sessions and chores — your personal chore list, the sessions you run (start and end time, duration, status, XP earned, and your device's time-zone offset), which chores you completed, and the badges you have earned.
• Settings — theme, language, sound and haptics preferences, celebration and cosmetic choices, reminder settings, and your diagnostics consent choices.
• Reminders — if you enable chore reminders or streak alerts, the schedule needed to deliver them.
• Household data — if you create or join a household: the household name and time zone, your membership and role, the display name you use there, and which shared modes are enabled.
• Subscription status — whether House Hero Pro is active, which product and plan, expiry and grace-period dates, and the identifiers our subscription provider uses to link the purchase to your account. We never receive or store your payment card details — payment is handled entirely by Apple or Google.

What other people can see

The app is private by default. Your chores, sessions, and progress are visible only to you, and are protected by row-level security rules that restrict every record to the account that owns it.

The one exception is households. If you create or join one, the other members of that household can see your household display name and your shared progress — such as your XP, streaks, leaderboard position, and live session activity when those modes are enabled. Only join households with people you know, and pick a display name you are comfortable sharing. You can leave a household at any time from within the app.

Bug reports

If you choose to send a bug report from inside the app, we receive the description you write, what you were doing, basic device and app-version diagnostics, and a screenshot if you attach one. If you tick the option to be contacted, we also receive the email address you provide. Bug reports are filed as issues in our private source-code repository hosted by GitHub so we can track and fix them. Please do not include sensitive personal information in the description.

Optional diagnostics

Usage analytics and crash reports are off by default and require your separate consent. If enabled, only bounded aggregate activity, safe buckets, platform and app version are sent. Chore titles, free text, email addresses, identifiers, invite codes, URLs with query data, and local file paths are rejected before storage. A SHA-256 installation identifier is used so that deletion is possible; opting out deletes that installation's rows. Analytics are retained for 90 days, crash reports for 30 days, and abuse-prevention fingerprints for 24 hours. You can change these choices at any time in Settings.

Why we process this data, and on what legal basis

• To provide the app — accounts, progress, chores, sessions, households, and reminders. Legal basis: performance of our contract with you (GDPR Art. 6(1)(b)).
• To provide and protect paid features — verifying subscription entitlements and preventing abuse of them. Legal basis: contract and our legitimate interest in preventing fraud (Art. 6(1)(b) and (f)).
• To fix problems you report — handling bug reports you choose to send. Legal basis: legitimate interest in maintaining the app (Art. 6(1)(f)).
• Optional analytics and crash reporting — only where you have turned them on. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time in Settings.

We do not sell personal data, we do not use it for advertising, and we do not track you across other apps or websites. There is no advertising SDK in the app.

Service providers

We use a small number of providers who process data on our behalf, under contract and only on our instructions:

• Supabase — authentication and the database where your account, progress, household, and settings data are stored.
• RevenueCat — management of subscription entitlements on top of the app stores' billing systems.
• Apple (App Store / StoreKit) and Google (Google Play Billing) — processing of purchases. They act as sellers of record under their own privacy policies.
• GitHub — hosting of the private repository where bug reports you send are filed.

Some of these providers operate infrastructure outside the European Economic Area. Where personal data is transferred outside the EEA, it is protected by appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

How long we keep data

Account, progress, and household data are kept for as long as your account exists. Analytics, crash reports, and rate-limiting fingerprints are kept for the fixed periods stated above. Unused anonymous accounts are cleaned up automatically. Bug reports are kept as long as needed to resolve the issue.

Deleting your data

You can delete your account and its associated data from Settings → Delete account. For security, deletion requires a fresh confirmation of your credentials. Deletion removes your profile, chores, sessions, completions, badges, settings, and household memberships. Note that deleting your account does not cancel a subscription — cancel that in your Apple Account or Google Play subscription settings.

You can also delete individual personal chores at any time from within the app.

Your rights

If you are in the EU/EEA, you have the right to access your personal data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. To exercise any of these, contact robinviken@gmail.com.

You also have the right to lodge a complaint with a supervisory authority. In Norway this is the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no); in the EU it is the authority in your country of residence.

Children

The app is intended for users aged 13 and over and is not directed to children. We do not knowingly collect personal data from children below that age. If you believe a child has provided us with personal data, contact us and we will delete it.

Security

All traffic between the app and our services uses HTTPS/TLS. Access to your data is enforced in the database itself through row-level security policies tied to your authenticated account, so one account cannot read another's data.

Changes to this policy

We may update this policy as the app changes. The "last updated" date above shows when it was last revised, and material changes will be communicated in the app or through the app store listing before they take effect.

Contact

Questions about this privacy policy can be sent to robinviken@gmail.com.