Privacy Policy

1. Who we are

Qdos ("Qdos", "we", "us") is a family reward and coordination app operated by Vinod Moorkoth (26 Greenfinch Drive, Clyde North VIC 3978, Australia), located at qdos.app. For any privacy question or request, contact us at support@qdos.app. This policy explains what personal information we collect, why, how we handle it, and the choices you have.

2. Who uses Qdos, and the family model

Qdos is designed for families. There are two kinds of account:

• Adults create and manage a household. An adult signs up with an email address (or via Google/Apple sign-in), or may be added by a household admin with just a username.
• Children are added to a household by an adult. Child accounts have no email address — they sign in with a username and password chosen by the adult. We deliberately collect as little information about children as possible.

The adult who creates a household (the "admin") is responsible for the accounts they create and for obtaining any consent required from other household members.

3. What we collect

Account information

• For adults: email address (used for sign-in, account recovery, and verification), or a Google/Apple account identifier if you use social sign-in.
• For all members: a display name, a username (for children and username-only adults), and a securely hashed password (we never store plaintext passwords).

Household & activity data you create

• Tasks, household rules, calendar events, and shopping-list items.
• The money ledger — the record of amounts earned, deducted, and paid out within your household. These are bookkeeping figures inside the app; Qdos does not process, hold, or transfer real money (see our Terms of Service).

Technical information

• IP address, browser/device type, and basic request logs, used for security, abuse prevention (rate limiting), and diagnosing errors.
• Error reports (via Sentry) when something crashes, to help us fix bugs. We configure these not to send detailed personal data.
• A sign-in token stored in your browser's local storage so you stay logged in. We do not use advertising cookies or third-party ad trackers.

We do not knowingly collect more from a child than the username, display name, password, and the household activity their parent sets up.

4. How we use information

• To provide the service: run your household, show tasks/rules/events/shopping, and keep the reward ledger.
• To authenticate you and keep accounts secure (including rate limiting and abuse prevention).
• To send transactional email to adults: email verification, password resets, co-parent invitations, and (where applicable) account notices. We do not send marketing email.
• To diagnose and fix problems, and to protect Qdos and its users.

5. Legal bases (where the GDPR/UK GDPR applies)

We rely on: performance of a contract (to provide the service you signed up for); our legitimate interests (security, abuse prevention, product reliability); consent where required (including a parent's consent for a child's information); and compliance with legal obligations.

6. Children's privacy

Qdos is intended to be set up and managed by an adult. Children's accounts are created by an adult in the household, contain minimal information (username, display name, password, and the activity the parent configures), and have no email address.

• A parent/guardian can review, edit, or delete a child's account at any time from within the app (Settings → members), and can delete the entire household and all its data.
• We do not require a child to disclose more information than is reasonably necessary to use the service.
• We do not condition a child's participation on disclosing more than is necessary, and we do not knowingly use children's information for marketing.

If you believe a child has provided us information without appropriate parental involvement, contact support@qdos.app and we will delete it.

7. Who we share information with

We do not sell personal information. We share it only with service providers ("sub-processors") that help us run Qdos, under contracts that limit their use of it:

• Amazon Web Services (AWS) — application hosting, database (Amazon RDS), and transactional email (Amazon SES). Primary region: ap-southeast-2 (Sydney, Australia).
• Cloudflare — website hosting (Cloudflare Pages), DNS, and email routing.
• Sentry — error monitoring.
• Google / Apple — only if you choose to sign in with them (to verify your identity).

We may also disclose information if required by law, or to protect the rights, safety, and property of Qdos or others.

8. International transfers

Qdos is hosted in Australia (ap-southeast-2). If you access Qdos from outside Australia, your information will be transferred to and processed in Australia (and potentially other regions used by our providers).

9. Data retention and deletion

We keep your information for as long as your account/household is active. You can delete your data at any time:

• Delete the whole household (admin only) permanently removes all members, tasks, rules, events, shopping items, and the ledger.
• Leave a household anonymises your personal sign-in information while preserving the household's historical reward records in a non-identifying way (so the household's books still reconcile).

After deletion, residual copies may persist in encrypted backups for a limited period before being overwritten.

10. Security

We protect information with measures including encrypted transport (HTTPS), hashed passwords, scoped access between households, and rate limiting. No system is perfectly secure, but we work to protect your information and to address issues promptly.

11. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your information, and to object to or restrict certain processing. You can exercise many of these directly in the app, or by contacting support@qdos.app. We will respond within the timeframe required by applicable law.

12. Changes to this policy

We may update this policy. If we make material changes, we will take reasonable steps to notify you (e.g. an in-app notice or email). The "Last updated" date above reflects the current version.

13. Contact

Questions or requests: support@qdos.app.