Privacy Policy

Sparrows (“the app”) is made by NG Hive, an independent studio run by Natalia Gurevich in the United States. This policy explains exactly what the app stores, where, who can see it and how to get rid of it. Questions: [email protected].

There is no sign-up

Sparrows has no accounts in the usual sense. You never give us an email address or a password. When the app first opens, it creates an anonymous identity for that phone on our server, and the key to it is kept in the iOS Keychain on your device. Inside the family you are a member — a name and an avatar you choose yourself.

You may optionally link Sign in with Apple to protect your profile. If you do, we receive only Apple's stable identifier for your Apple ID — not your name, not your email address, not anything else. It exists so that you can get your own profile back on a new phone.

What is stored on our server

What	Why
Family name and when it was created	To group everyone, and to count the 14 free days
For each member: the name and avatar chosen, role (parent or child), language, time zone, quiet hours, points balance, and whether notifications are switched on for that phone	To show the family, address people by name, send reminders at sensible hours and let a parent see that a child's notifications are off
Tasks: title, details, deadline, how often to remind, points, status, who gave it and who has to do it	This is the app
Comments inside a task, and the note attached when a task is finished or sent back	So the conversation about a task stays with the task
Photos attached as proof (optional, up to 5 MB each)	To show the job is done. Kept in private storage that only your family can read
Rewards, their cost in points and the history of points earned or spent	To run the rewards
Invite codes	To let people join; they expire on their own
Push token of the device and its platform	To deliver notifications
Apple's stable identifier, only if you linked Sign in with Apple	To restore your profile on a new phone
For a purchase: Apple's transaction identifier, the product identifier and whether it came from the sandbox or the real store	To confirm the family is unlocked and to restore the purchase later
If you paste a shopping-list link from our ShopPing app into a task, that link is stored as part of the task	So the task can open the list

The server is Supabase, hosted in the United States. Everything travels over encrypted connections.

What we never collect

• No advertising identifiers, no advertising networks, no ad SDKs — there are no ads in the app.
• No analytics or crash-reporting SDK. We do not know how often you open the app or what you tap.
• No location, no contacts, no calendar, no microphone.
• No email addresses, passwords or phone numbers.
• Camera and photo access are asked for only when you attach a photo to a task, and only the photo you pick is uploaded.

On your phone

The key to your anonymous identity lives in the iOS Keychain. The app also keeps a small technical log on the device to help with support; it stays on your phone unless you decide to send it to us.

Notifications

A notification contains the name of the person who gave or finished the task and the task's title — the same text you would see inside the app. Since it can appear on a lock screen, keep that in mind when naming a delicate task.

Notifications are delivered through Expo's push service and then Apple's Push Notification service. Undelivered items are removed from our queue after seven days.

Who can see what

• A task is private by default. Only the person who gave it and the people it was given to can see it — not the other parents, unless the author turns on sharing. Children have that switch too.
• These rules are enforced by the database itself, not just hidden in the interface.
• Everyone in the family sees the family's members, their names, avatars and point balances, and the rewards list.
• Nobody outside your family can see any of it. We do not read your tasks, and we have no interest in them.

Children

Sparrows is built for families and is meant to be set up by a parent, who then invites the children. A child's record holds only the name and avatar chosen for them, their tasks, points and any photos they attach. There is no profiling, no advertising and no marketing directed at anyone, children included, and children cannot be contacted through the app by anyone outside their family.

A parent can remove a child from the family at any moment; that deletes the child's tasks, points and photos. If you believe a child's data reached us in a way you did not intend, write to [email protected] and we will delete it.

Deleting your data

• Leave the family (Settings → Leave the family) and your member record, your tasks and your points are deleted.
• A parent removing a member deletes that person's data the same way.
• When the last member leaves, the family itself is deleted along with its tasks, photos, rewards and history.
• Or simply write to us and we will delete the family for you.

We keep the record of a purchase after that, because Apple ties it to your Apple ID and it is what lets you restore the purchase later.

Who else is involved

• Supabase — database, private file storage and the server functions, in the United States.
• Expo — relays push notifications to Apple.
• Apple — delivers notifications, handles purchases, and provides Sign in with Apple if you use it.

That is the entire list. There are no advertising or analytics companies in it.

Your rights

Ask us what we hold about you, ask for a copy, or ask us to delete it: [email protected]. Since we hold no email address, please write from an address we can answer, and tell us the family name and your name in the app so we can find the right records.

Changes

If this policy changes, the date at the top changes with it. If a change matters, we will say so in the app.