Privacy Policy

Effective October 5, 2026

The short version

Lootsy is a chore-and-reward app for families. Parents hold the account; kids stay anonymous. A kid profile is a first name (or nickname), an age, interests the parent picks, and a cartoon dragon. We show no ads, never sell or share personal data, and collect only what the app needs to work.

1. Who we are

Lootsy is operated by Marquise Works LLC, 5900 Balcones Drive, STE 100, Austin, TX 78731, USA ("we", "us"). Questions, requests or concerns: privacy@lootsy.app. Lootsy is offered to families in the United States.

2. What we collect

Parent account: email address and password (stored only as a secure hash). Optional: the name your kids call you (for example "Mom").
Kid profiles, entered by the parent: first name or nickname, age, interest categories, dragon design, and optionally a short kid code for shared devices (stored only as a hash). No email, photos, location, contact details or last names.
Family activity: quests, rewards, approvals, diamond balances, levels, badges, notes parents write, and items kids wish for from our catalog. This is the data the app needs to work.
Devices: a sign-in token for each device in your family and, if you turn on notifications, that device's push token.
Purchases: whether your family has Lootsy Plus. Apple handles payment; we never see card details.
Usage analytics (parent screens only): see section 5.
Launch email list (website): the email you enter and when you signed up.
Support emails: whatever you send us.

3. How we use it

To run Lootsy (sync your family's devices, show quests, deliver loot, send the notifications you turn on), to keep accounts secure, to process Lootsy Plus, to answer support requests, to fix bugs and improve the app, and to send the launch email you asked for. We do not use any data for advertising, profiling or selling.

4. Children's privacy (COPPA)

Lootsy has a kid side, so we follow the Children's Online Privacy Protection Act (COPPA).

Parents are in charge. Only a parent (18+) can create an account. The parent enters every kid profile and decides every quest and reward. A kid's device joins the family only with the parent's family code or invite link.
What we collect from kid devices: the taps kids make in the app (start or finish a quest, open a chest, design their dragon, ask for a reward their parent added, wish for a catalog item for the parent to decide on, choose a title), an optional kid code (hashed), and, if notifications are turned on, the device's push token. We use these only to run the app for your family (COPPA's "support for internal operations"), including reminders and "your loot is here" notifications.
No third parties on kid screens. Nothing from kid screens is sent to analytics, advertising or any other third party. We count only anonymous daily totals (like "chests opened") on our own server.
No public sharing. Kids can't chat, post, or contact anyone, and nothing a kid does is visible outside their family.
Parents' rights. You can review your kids' information in the app at any time, ask us to correct or delete it, or stop any further collection by deleting your account (Parent mode → Settings → Delete account) or emailing privacy@lootsy.app. We never require a child to share more information than the app needs.

5. Analytics

We use PostHog to understand how parents use Lootsy (for example, which setup step people leave at) so we can fix confusing screens. It runs only on parent screens. Events never include names, notes, emails or anything typed, and families are identified only by a random or one-way-hashed ID. Some parent sessions may be recorded with all text and inputs masked. Turn it off anytime: Parent mode → Settings → Share anonymous usage data.

We don't sell or "share" personal data (as California law defines it) and never will. We use these service providers, who may process data only to provide their service to us:

Oracle Cloud (United States): hosts our servers and database.
Cloudflare: domain and DNS, encrypted backup storage, and forwarding of our email addresses.
Apple: App Store payments and push notification delivery.
RevenueCat: confirms Lootsy Plus subscription status.
PostHog: parent-screen analytics (section 5).
Resend: sends password-reset and launch emails.
Google (Gemini): only when a parent on Lootsy Plus asks for AI quest ideas, we send that kid's age and interest categories, never a name or any identifier, and get back suggestions.

Store links for physical prizes appear only in parent mode. If a parent taps one, the retailer (such as Amazon, Target or Walmart) receives the visit under its own privacy policy, and we may earn a commission. We may also disclose information if the law requires it, to protect anyone's safety, or as part of a sale or merger of our business (with this policy continuing to apply).

7. Face ID

If you turn on Face ID for parent mode on your own phone, your Parent PIN is saved in that phone's secure Keychain and unlocked by Face ID. Your face data never leaves your phone, and we never see or store it.

8. How long we keep data

Your account and family data: while your account is active. You can delete it anytime and it's removed from our servers right away.
Inactive accounts: deleted automatically after 24 months with no use.
Backups: encrypted copies are kept up to 30 days, so deleted data leaves backups within 30 days.
Push tokens: until you turn notifications off, sign out, or the device stops accepting them.
Launch email list: until 12 months after Lootsy launches, or sooner if you unsubscribe.
Analytics: kept by PostHog for up to 12 months.

9. Security

Connections are encrypted (HTTPS). Passwords, PINs and kid codes are stored only as secure hashes. The parent area is protected by a PIN (or Face ID on the parent's own phone). Access to our systems is limited and protected by keys. No system is perfectly secure; if a breach affects your data, we'll notify you as the law requires.

10. Your choices and rights

You can see and edit your family's information in the app, turn analytics and notifications off, and delete your account in Parent mode → Settings. Depending on where you live in the US (for example California, Texas, Colorado or Virginia), you may also have the right to know what we hold about you, get a copy, correct it, or have it deleted. Email privacy@lootsy.app; we'll confirm it's your account and reply within 30 days (45 where the law allows). We won't treat you differently for using these rights.

11. Changes to this policy

If we change this policy, we'll update the date above. For important changes we'll tell parents in the app or by email before they take effect, and where the law requires it we'll ask for your consent.

12. Credits

Quest and reward pictures: Fluent Emoji by Microsoft, MIT license.

13. Contact

Marquise Works LLC · 5900 Balcones Drive, STE 100 · Austin, TX 78731 · privacy@lootsy.app