Legal
Privacy Policy
DRAFT — requires attorney review. Prepared 2026-09-22 by the Atlas privacy agent. It has not been reviewed by a lawyer and is not legal advice. It does not claim compliance with, or certification under, any law, program or safe harbor. Anything in[BRACKETS]has to be filled in by the owner or counsel before this is published at https://sprigtime.com/privacy. Product name "Sprigtime" is provisional (seebrand/NAMING_REPORT.md). Replace every instance if the name changes.
Effective date: [DATE OF FIRST PUBLIC RELEASE] Last updated: [DATE] Operator: [LEGAL ENTITY NAME] ("we", "us"), [POSTAL ADDRESS] Contact: support@sprigtime.com
1. The short version
- Sprigtime keeps your family's data on your device. In this version there is no Sprigtime account, no Sprigtime server, and no cloud sync. We do not receive the tasks, balances, photos or app choices you create.
- We do not use advertising, advertising identifiers, tracking, or third-party analytics SDKs. We do not sell or share personal information, and we do not use it for targeted advertising.
- A parent sets the rules. A child's use of Sprigtime on a child's device happens under that parent's setup and supervision.
- Deleting the app deletes its data from that device. You can also erase all data from inside the app at any time.
The rest of this policy explains the details.
2. Who this policy covers
Sprigtime is an iPhone and iPad app. A parent or guardian ("parent") uses it to set up tasks, such as chores and homework, and screen-time rules for their child. The child can complete tasks to earn screen-time minutes. The app is meant to be set up and controlled by an adult. It is not meant to be downloaded or set up by a child without a parent.
This policy covers the Sprigtime iOS app and its system extensions. Our website (sprigtime.com) may have its own notice for anything the site collects, such as a beta sign-up form. [COUNSEL: confirm whether the website collects anything; if it does, add a website section or a separate notice.]
3. What information the app handles, and where it lives
All of the information below is created and stored only on the device where it is entered. It sits in the app's private storage and in an Apple "App Group" container that only Sprigtime and its own extensions can read. None of it is sent to us.
| Information | Who enters it | Why the app needs it | Where it is stored |
|---|---|---|---|
| Child's display name or nickname, and an optional avatar or color | Parent | To show whose tasks and balance are on screen | On device |
| Tasks and rules (for example "Make bed: 10 minutes"), schedules, and limits | Parent | To define how minutes are earned and used | On device |
| Minutes ledger (an append-only record of minutes earned, spent and adjusted, with timestamps) | Created by the app from task approvals and screen-time use | To calculate the balance and show history | On device |
| Task completion records and notes | Child and parent | To record and approve completed tasks | On device |
| Optional proof photos taken or picked for a task | Child or parent, only if the parent turns proof photos on | So a parent can confirm a task was done | On device, inside the app's container. Not saved to the Photos library unless you choose to save one. |
| The apps, categories and websites the parent chooses to limit | Parent, using Apple's Screen Time picker | To apply limits when the balance reaches zero | On device, as opaque tokens from Apple. The app cannot see the names of the apps you chose, and Apple does not give them to us. |
| Screen-time usage events (for example "the time limit was reached") | Apple's Device Activity system | To subtract minutes and apply limits | On device. Apple's reporting framework keeps detailed usage inside a sandbox that cannot send data off the device. |
| Parent PIN | Parent | To keep parent-only settings behind a lock | On device, stored in the iOS Keychain as a salted hash. [ENGINEERING: confirm implementation.] |
| App settings and preferences | Parent | To run the app | On device |
What we do not collect or access: your name, email or phone number (there is no account). We do not access precise or coarse location, contacts, microphone or audio, health data, or advertising identifiers. We do not collect browsing history, messages or any content from other apps.
3.1 Face ID / Touch ID
Sprigtime can ask iOS to confirm a parent with Face ID or Touch ID before opening parent settings. Apple handles biometric matching entirely. The app never receives, stores or sends your face or fingerprint data. It only gets a yes or no answer from iOS.
3.2 On-device AI suggestions (optional)
On supported devices (iOS 26 or later, with Apple Intelligence available and turned on), a parent can type a request in plain language, such as "Emma should practice piano 20 minutes on weekdays." The app then uses Apple's on-device Foundation Models to draft suggested tasks. That processing runs on the device. Sprigtime does not send your text to us or to any AI provider. A parent reviews every suggestion, and nothing is saved until the parent approves it. [ENGINEERING: confirm that no Private Cloud Compute or server model is used. If that changes, this section must change.]
3.3 Apple services
Some features rely on Apple frameworks, including Screen Time (Family Controls, Device Activity and Managed Settings), Face ID/Touch ID, the camera, and the App Store. Apple's own privacy policy (https://www.apple.com/legal/privacy/) governs how Apple handles information in providing those services. We do not receive Screen Time data from Apple.
3.4 Crash reports
If you have turned on Share with App Developers in iOS Settings, Apple may give us anonymized crash and diagnostic reports. You control that setting in iOS Settings → Privacy & Security → Analytics & Improvements. [OWNER: confirm we will not add any third-party crash reporter. If one is added, update this policy, the App Store privacy label and the privacy manifest first.]
3.5 When you contact us
If you email support@sprigtime.com, we receive your email address and whatever you write. We use it only to reply to you. Please do not include a child's full name, photos, or other personal details in support emails. We keep support emails for [RETENTION PERIOD, e.g. 24 months] and then delete them. [COUNSEL: confirm the support tool and its processor terms.]
3.6 TestFlight beta
If you join a beta through Apple's TestFlight, Apple shares certain information with us, such as your name or email as provided to TestFlight, device model, OS version, crash logs, and any screenshots or feedback you choose to submit. Apple's TestFlight terms govern that sharing. We use it only to improve the app.
4. How we use information
Because the app's data stays on your device, we do not use it at all. The app uses it on your device only to:
- show tasks, balances and history;
- apply the screen-time limits you set;
- let parents approve tasks and adjust balances;
- draft task suggestions when you ask for them (optional);
- keep parent settings locked.
We use support emails and beta feedback only to answer you and to fix or improve the app.
5. Sharing
We do not sell personal information. We do not "share" personal information for cross-context behavioral advertising, as the California Consumer Privacy Act (CCPA) uses that term. We do not disclose children's information to third parties. We have no advertising or analytics partners.
We may disclose information we hold, which in practice is limited to support emails and TestFlight feedback: (a) to service providers who help us run email and support, under confidentiality terms; (b) if the law requires it; or (c) as part of a merger or acquisition, in which case this policy continues to apply. [COUNSEL: review.]
6. Children's privacy
Sprigtime is a parent-directed tool. A child may use it on a device a parent has set up. The child's data, including task records, balances and optional proof photos, stays on that device and is not transmitted to us. Our separate Children's Privacy Notice (legal/child-privacy.md, to be published at [URL]) explains this in more detail for parents, including how COPPA-style parental rights apply to an on-device-only app.
We do not knowingly collect personal information from children under 13. If a parent believes a child has sent us personal information, for example through a support email, contact support@sprigtime.com and we will delete it.
7. Retention and deletion
- App data: It stays on the device until you delete it. You can:
- delete individual tasks, children, or proof photos in the app;
- use Settings → Erase All Sprigtime Data in the app, which is parent-gated
[ENGINEERING: must exist before release]; or - delete the app. Deleting the app removes its data, including the App Group container, from that device.
- Proof photos: By default the app automatically deletes proof photos
[N, e.g. 30]days after the task is approved or rejected.[PRODUCT: confirm default.] - iCloud or device backups: If you back up your device to iCloud or a computer, iOS may include Sprigtime's data in that backup, under Apple's backup terms. Deleting data in the app removes it from future backups.
- Support emails: See section 3.5.
8. Your choices and rights
- Stop Screen Time limits: In the app (parent-gated) you can turn off limits. You can also revoke Sprigtime's Screen Time access in iOS Settings → Screen Time.
- Camera: You can turn camera access on or off in iOS Settings → Sprigtime.
- Face ID/Touch ID: You can turn this off in the app or in iOS Settings.
- Access, correct or delete: Because we do not hold your app data, you can see, change and delete it directly in the app. For anything we do hold (support emails and beta feedback), email support@sprigtime.com to request access or deletion. We will respond within the time the applicable law requires.
- California and other U.S. state residents: You may have rights to know, access, correct and delete personal information, and to opt out of its sale or sharing. We do not sell or share personal information. We do not use sensitive personal information to infer characteristics. You will not be treated differently for using your rights.
[COUNSEL: confirm whether CCPA/CPRA thresholds apply to the operator. Tailor state-law language.] - EEA/UK users (if the app is offered there):
[COUNSEL: add GDPR/UK GDPR section (controller identity, lawful bases, rights, complaint to supervisory authority), or restrict territories.]
9. Security
Data is protected by iOS sandboxing and by iOS data protection when the device is locked. The parent PIN is stored in the iOS Keychain. No system is perfectly secure. Keep your device passcode private: anyone who knows your device passcode may be able to reach data on the device.
10. Future features
We may later add optional features such as family sync through Apple iCloud (CloudKit). We will not turn on any feature that sends data off your device without first updating this policy and asking for the permission and consent required by law, including verifiable parental consent where COPPA requires it.
11. Changes to this policy
If we make material changes, we will update the date above and give notice in the app before the change takes effect.
12. Contact
[LEGAL ENTITY NAME], [ADDRESS], support@sprigtime.com