Privacy Policy

Last updated: 2026-04-16

1. Who We Are

Earn It! is a mobile application that helps families track children's chores and savings goals. It is accompanied by a marketing website at earnitfamily.app. Both are operated by:

Markus Mikola
Operating as Earn It!
Turku, Finland
Contact: support@earnitfamily.app

For the purposes of the EU General Data Protection Regulation (GDPR), Markus Mikola is the data controller for all personal data described in this policy.

2. Scope of This Policy

This privacy policy covers two separate data collection tracks:

  • App data — personal data collected when you create a family account in the Earn It! mobile app and use its features (chores, books, goals, earnings).
  • Website data — personal data collected when you submit your email address on the marketing website at earnitfamily.app to receive a free printable chore chart and periodic newsletter emails.

These are separate systems. Submitting your email on the website does not create an app account. Deleting your app account does not unsubscribe you from the newsletter. The two data sets are managed by different service providers (see Sections 6 and 7) and are never linked or cross-referenced.

Where a section below applies to only one track, it is labelled accordingly. Where a section applies to both, it is unified.

3. What Data We Collect

We collect only the data necessary to provide each service. We collect no data for advertising, profiling, or purposes beyond what is described here.

3.1 App data

Account data

  • Email address (one per family, used for sign-in)
  • Password (hashed by Supabase Auth — we never see or store plaintext passwords)

Profile data

  • Profile name (parent or child name, as entered by the parent)
  • Avatar emoji selection
  • Profile role (parent or child)
  • Optional PIN (stored as a SHA-256 hash — we never see or store the actual PIN)

Activity data

  • Family name
  • Chore definitions (name and emoji, created by parents)
  • Chore log entries (which child completed which chore on which date)
  • Book log entries (book title, date, which child logged it)
  • Savings goals (title, target amount, start date, completion date)
  • Earning settings (family-specific parameters for the earning formula)

3.2 Website data

Newsletter subscription

  • Email address only (submitted voluntarily via the signup form on earnitfamily.app)
  • Subscription timestamp (recorded by our newsletter provider — see Section 7.2)
  • IP address and HTTP referrer at the moment of subscription (recorded by our newsletter provider as standard metadata; not collected or used by us)

No name, no postal address, no phone number, and no other personal data is collected through the website form. The form sets no cookies. Our website does not run analytics or tracking scripts.

3.3 Data we do NOT collect (either track)

  • Location data
  • Device identifiers or advertising IDs
  • Usage analytics or behavioural tracking
  • Photos or media files
  • Contacts or calendar data
  • Health or biometric data
  • Data from other apps on your device

4. How We Use Your Data

4.1 App data

We use app data solely to provide the Earn It! service:

  • Account data — to authenticate you and secure your family's account
  • Profile data — to identify family members within the app
  • Activity data — to calculate earnings, display progress toward savings goals, and show history

We do not use app data for marketing, profiling, automated decision-making, or any purpose beyond delivering the app's core functionality.

Legal basis (GDPR Art. 6): Performance of a contract — processing is necessary to provide the service you signed up for.

4.2 Website data

We use email addresses submitted through the website signup form to:

  • Deliver the free printable chore chart PDF via a welcome email
  • Send periodic newsletter emails with chore motivation tips and Earn It! product updates

Legal basis (GDPR Art. 6): Consent. The signup form includes a GDPR consent checkbox that is unchecked by default. Submitting the form requires you to actively check the consent box. You can withdraw consent at any time via the unsubscribe link included in every email, or by emailing support@earnitfamily.app.

We do not use newsletter email addresses for any other purpose. We do not sell, rent, or share them with advertisers or other third parties.

5. Children's Data

This section applies to the app only. The website newsletter is directed at adults (parents and prospective customers); children are not expected to submit their email addresses through the website.

Earn It! is designed for use by families with children. We take children's data protection seriously.

How children's data is handled

  • Parents create all accounts. A parent creates the family account and adds child profiles. Children do not create their own accounts or provide their own email addresses.
  • Children's data is minimal. We store only the child's first name (or nickname), an emoji avatar, chore/book log entries, and savings goal progress. No email, no date of birth, no photos.
  • Parental consent is built into the design. Because a parent must create the account, add child profiles, and configure the app before any child can use it, parental consent is inherent in the setup process.
  • Children cannot share data externally. The app has no social features, no messaging, no public profiles, and no way for a child to share data outside the family.

Applicable law

Under the Finnish Data Protection Act (1050/2018) implementing GDPR Article 8, the age at which a child can independently consent to data processing by information society services is 13 years. For children under 13, parental consent is required — which our app design ensures by requiring parent-initiated account creation.

6. Where Your Data Is Stored

6.1 App data — Ireland (EU)

App data is stored on Supabase, a cloud database platform. Our Supabase project is hosted in Ireland (EU), so your app data remains within the European Economic Area and is subject to EU data protection law.

Supabase uses encryption in transit (TLS) and at rest. For more information, see Supabase's security documentation.

We do not transfer app data outside the EU/EEA.

6.2 Website data — United States (with SCCs)

Newsletter subscription data is processed by Buttondown, a US-based email newsletter service (see Section 7.2 for full processor details). Buttondown stores subscriber data on AWS infrastructure in the United States.

International transfer mechanism: The transfer of newsletter subscriber data to the United States is governed by the EU Standard Contractual Clauses (SCCs), incorporated into Buttondown's Data Processing Agreement (Section 8 of their DPA, available at buttondown.com/legal/data-processing-agreement).

This transfer mechanism is recognised under GDPR Article 46 as a valid safeguard for transfers of personal data outside the EEA.

7. Data Sharing and Processors

We do not sell your data. We do not share your data with advertisers. We do not use analytics services on either the app or the website.

The only third parties that process your data on our behalf are the service providers listed below, each acting as a data processor under GDPR.

7.1 App data processor — Supabase

  • Company: Supabase, Inc.
  • Role: Data processor (database and authentication provider)
  • Hosting location: Ireland (EU)
  • GDPR compliance: GDPR compliant; Data Processing Agreement available through Supabase
  • Sub-processors: Documented at supabase.com/privacy

7.2 Website data processor — Buttondown

  • Company: Buttondown, LLC
  • Address: 406 W Franklin St. #201, Richmond, VA 23221, United States
  • Role: Data processor (newsletter delivery)
  • Hosting location: United States (AWS infrastructure)
  • GDPR compliance: Self-certified GDPR compliant. Data Processing Agreement available at buttondown.com/legal/data-processing-agreement.
  • International transfer mechanism: EU Standard Contractual Clauses (SCCs), per Section 8 of Buttondown's DPA
  • Sub-processors: AWS, Mailgun, Postmark, Cloudflare, Stripe, Heroku, Betterstack, Sentry, Plain, Seline, Slack, Google Workspace. Current list maintained at buttondown.com/legal/subprocessors.
  • Data stored by Buttondown: Email address, IP address and referrer metadata at time of subscription, subscription timestamp
  • Data selling: Buttondown does not sell data to third parties and does not use subscriber data for advertising

8. Data Retention

8.1 App data

App data is retained for as long as you have an active Earn It! account. When you delete your account (see Section 9), all associated data is permanently deleted.

Completed savings goals and historical chore/book entries are retained within your account as part of the service — they form your family's history. You can request deletion at any time.

8.2 Website data

Newsletter subscription data is retained for the duration of your subscription. When you unsubscribe (via the unsubscribe link in any email, or by emailing support@earnitfamily.app), your email address and associated metadata are deleted from Buttondown's systems. Deletion requests are honoured immediately upon receipt.

9. Your Rights Under GDPR

The rights below apply equally to app users and website newsletter subscribers. The contact point for exercising any of these rights is the same for both tracks: support@earnitfamily.app.

  • Right of access — You can request a copy of all data we hold about you (app account and/or newsletter subscription).
  • Right to rectification — App users: parents can edit profile names, avatars, and correct historical entries directly in the app. Newsletter subscribers: email us to correct your address.
  • Right to erasure ("right to be forgotten") —

- App: Delete your entire family account and all associated data from within the app (Settings → Delete account). Deletion is immediate and permanent.
- Newsletter: Use the unsubscribe link in any email, or email support@earnitfamily.app.

  • Right to restrict processing — Contact us at support@earnitfamily.app.
  • Right to data portability — You can request your data in a machine-readable format. Contact us at support@earnitfamily.app.
  • Right to object — Since we only process app data to provide the service and only process newsletter data with your consent, this right is effectively exercised by deleting your account or unsubscribing.
  • Right to withdraw consent — For the newsletter (the only consent-based processing), withdraw at any time via the unsubscribe link or by emailing us. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
  • Right to lodge a complaint — You can file a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu): tietosuoja.fi, or with the data protection authority in your country of residence.

10. Data Security

We implement the following security measures:

  • All data transmitted between the app, the website, and our service providers is encrypted with TLS
  • Passwords are hashed using industry-standard algorithms (by Supabase Auth)
  • PINs are hashed with SHA-256 before storage
  • Row-level security (RLS) policies ensure families can only access their own data
  • No app data is stored on your device beyond your authentication session and language preference
  • The website does not set tracking cookies or run analytics scripts
  • We conduct security audits of our database access policies

11. Subscription and Payments

This section applies to the app only.

If you subscribe to Earn It!, payment processing is handled entirely by Apple (App Store) or Google (Google Play). We do not receive, process, or store any payment information — no credit card numbers, no billing addresses, no payment tokens. Apple/Google handle all payment data under their own privacy policies.

The only subscription-related data we store is your family's subscription status (active, trial, or expired) to determine which features are available.

12. Cookies and Tracking

12.1 Website

The earnitfamily.app marketing website does not set tracking cookies and does not run analytics scripts. The email signup form does not set cookies. Any strictly necessary cookies (for example, those required for essential site functionality) will be disclosed here if introduced.

12.2 App

The Earn It! mobile app does not use cookies. It stores only an authentication session and your language preference locally on your device.

12.3 If this changes

If we ever introduce cookies, analytics, or tracking on either the website or the app, we will update this policy and — where required by law — seek your consent before the change takes effect.

13. Changes to This Policy

We may update this privacy policy to reflect changes in the app, the website, or applicable law. When we make significant changes, we will update the "Last updated" date at the top of this page.

We encourage you to review this policy periodically.

14. Contact

For any privacy-related questions or to exercise your rights:

Email: support@earnitfamily.app

You may also contact the Finnish Data Protection Ombudsman:
Tietosuojavaltuutetun toimisto
Lintulahdenkuja 4, 00530 Helsinki
tietosuoja.fi