Troke Kids is a family-use app. This Policy explains, in plain language, what data we may process, why we use it, which providers support the service, and how long certain information may be kept.
Our goal is to reduce the collection of children's data to the minimum necessary for the app to work and to give the family guardian control over more sensitive features.
1. Who can use the app
- The main account must be created and managed by an adult.
- Children's profiles are created and managed by the family guardian.
- For normal app use, we do not ask the child for a full name, email address, or phone number.
2. What data we may process
Adult account and family data
- Adult account email and authentication data.
- Family profiles, such as main guardian, caregiver, and child.
- Family settings and app preferences, such as language, theme, PIN, and biometrics.
App usage data
- Tasks, rewards, routines, approvals, rejections, requests, and deliveries.
- History needed for the app to function and to help organize the family's routine.
- Local device data to keep session, active profile, and preferences.
Children's data
- Nickname, avatar, and age in years or age range.
- Progress in tasks, rewards, credits, and XP.
- We do not intentionally collect direct child identifiers for normal use of the child experience.
Photos used to prove task completion
- When the guardian enables this feature, the child may select an image from the device gallery to prove a task was completed.
- The photo is available only to authorized adults in the same family.
- When there is a caregiver, access to the photo depends on that caregiver being assigned to the corresponding child.
- Even when a photo is deleted, some submission details may remain in the task history to preserve operational consistency and security.
Bug reports and support
- When a guardian chooses to send a bug report through the app, we may receive the typed description, issue category, app version and build, platform, screen or route, language, and minimum technical device context.
- This data is used only for diagnostics, bug fixing, security, and technical support.
- Bug reports do not automatically send screenshots; we recommend not including unnecessary sensitive data in free text.
- Bug reports sent through the app are restricted to the guardian who submitted them.
Technical usage and security data
- We use Firebase Analytics to understand functional product usage.
- We use Sentry for technical monitoring, error reporting, and operational diagnosis.
- We use PostHog for product analytics (how the app is used) to improve the experience, only in the guardian area — never in Kid Mode. Guardians can turn this off in Settings → Privacy.
- We aim to reduce identifiers and limit telemetry in Kid Mode to the minimum needed for operation and bug fixing.
- We do not use children's data for targeted advertising and we do not sell children's personal data.
3. How we use data
We use this data to:
- operate the app and sync the family across devices;
- authenticate adults and protect Parent Mode;
- process tasks, rewards, approvals, and history;
- enable premium features, subscriptions, and related checks;
- prevent abuse, investigate incidents, and fix technical problems;
- maintain minimum security and audit records.
4. Who we may share data with
Today, Troke Kids uses at least the following providers:
- Supabase, for database, authentication, backend, and storage;
- Google Firebase Analytics, for functional app metrics;
- Sentry, for technical monitoring and error diagnosis;
- PostHog, for guardian-side product analytics (app usage and experience improvement), with infrastructure in the United States; we do not collect children's data through this service;
- Meta Platforms, exclusively on our website (never inside the app), for measuring and optimizing advertising campaigns aimed at adult guardians. We do not share children’s data with Meta and we do not use children’s data for advertising;
- Apple App Store and Google Play, when applicable, for purchases, subscriptions, and store-related checks.
These providers operate under their own policies and infrastructure.
Some providers may operate infrastructure outside Brazil. When international transfers of personal data occur, we adopt contractual, technical, and operational measures compatible with the LGPD and ANPD regulations, as applicable.
5. Access controls inside the family
- The main guardian has the highest access level within the family.
- A caregiver acts only within the scope allowed by the guardian.
- A child profile cannot access Parent Mode without configured security controls.
- Proof photos are shown only to authorized adults.
6. How long we keep data
Today, our operational routine generally provides for:
- bug reports and basic support data for up to 180 days;
- support files with no active report linked to them for up to 90 days;
- technical and audit records for up to 365 days;
- task proof photos being treated as temporary media.
For task proof photos:
- we try to delete the photo when the task is approved;
- if the photo remains waiting for review, our current operational target is to remove it within 14 days;
- if the task is rejected, our current operational target is to remove the photo within 30 days.
Other account and family data may remain while the account and family group are active. When an authenticated adult uses the in-app deletion flow, some eligible data moves to removal or anonymization, but certain records may be kept for the minimum period required to meet legal, security, and operational obligations.
7. Data subject rights and guardian controls
Authenticated adults may, through the functionality available in the app and, when applicable, also through privacy, security, or LGPD-related requests:
- access and correct family data;
- delete profiles, tasks, rewards, and other records under their control;
- start deletion of their own account in the app, with a preview of the impact on the family;
- manage subscription cancellation separately in the store, when applicable, since deleting the account does not automatically cancel Apple App Store or Google Play subscriptions;
- disable optional features, such as photo proof;
- request confirmation of processing, access, correction, anonymization, blocking, or deletion of unnecessary, excessive, or non-compliant data, when applicable;
- request information about sharing, portability when regulated and applicable, and consent withdrawal, without affecting processing already carried out validly;
- petition the ANPD or exercise other rights provided by the LGPD, when applicable.
The app also keeps a versioned record of acceptance of the current legal documents and records specific consent for the optional photo-proof feature when it is enabled.
Privacy, security, or LGPD-related requests may require validation of identity or guardian authority before they are fulfilled.
8. Children's data and best interests
We process children's data to support the purpose of the app, always trying to collect only what is necessary for that purpose.
For more sensitive optional features, such as photo proof, the expectation is that activation is controlled by the family guardian and used only when it makes sense for the family routine and for the child's best interests.
The product is not designed for targeted child advertising, sale of children's personal data, public child profiles, or open communication with strangers. The child experience remains separated from the adult area and controlled by the guardian's settings.
9. Changes to this policy
We may update this Policy for legal, operational, or product reasons.
When a change is relevant, we may notify the guardian in the app and, when necessary, require renewed acceptance before certain features can be used.
10. Contact
For questions about privacy, security, children's data, LGPD-related requests, and exceptional cases where you cannot access the app, contact us at: