Commonomy Kids is built and operated by Alon Ben Shalom, an independent developer. For anything on this page — questions, or a request to see or delete your child's data — write to support@commonomy.com.

A child cannot sign up. The only way in is a six-character code that a parent makes in the Commonomy app, for one particular child. It works once and expires after 30 minutes. Making that code is the parent's consent; without it there is no account.

Your child is never asked for an email address, a phone number, a password or any other detail. The account is created for them behind the scenes, under an internal address that cannot receive mail.

• What you already entered in Commonomy — your child's first name, date of birth and colour. Commonomy Kids adds nothing to it.
• Stars — one for each task your child ticks off, and any a parent gives by hand.
• Rewards — the ones a parent sets up, and when your child used their stars on one.
• A link between your child's row and the account they sign in with.

That is all. Your child cannot type messages, upload pictures, or write anything anywhere. The only things they can change are ticking their own tasks and choosing a reward.

Only what both parents in your family can already see, and less of it:

• their own tasks and their own school timetable;
• family events that are not marked private;
• which home they are at, from the custody schedule;
• the names of the people in the family.

Nothing marked private, no expenses, no documents, no chats, and nothing from a parent's free-time board or a parent's own weekly schedule.

• No advertising, of any kind.
• No analytics, tracking or profiling. No third-party SDKs.
• No purchases inside the app.
• No links out of the app, and no way to contact anyone.
• No location, camera, microphone, contacts or calendar access — these permissions are removed from the app itself.
• No push notifications.

For a child who cannot read yet, a speaker button reads a line aloud. On a phone or tablet this uses the device's own speech engine. In a web browser it uses the browser's speech engine, and some browsers send the text to their own servers to produce the voice — the text is only the line on the screen, such as "Swimming, 16:30".

So that your child stays signed in, the app keeps a sign-in token on the device. On a family tablet shared by several children it keeps one per child, so they can switch without a new code. The app is excluded from the device's cloud backup, so a backup cannot carry a sign-in to another device.

To stop anyone from guessing codes, the app counts failed attempts from each internet address and blocks it after ten in an hour. The address is stored only as a one-way hash, never as-is, and these records — and used or expired codes — are deleted within a day.

Supabase hosts the database and sign-in; this is where everything above is kept, in the European Union, encrypted at rest and in transit. Expo delivers updates to the app itself; it receives the app version and the device's internet address, not your child's information. No one else is involved.

Remove the child in Commonomy (Family → the child → Delete), or delete your whole Commonomy account. Either one deletes, immediately and in the same operation, your child's row, their stars, rewards, timetable and sign-in codes — and the account they sign into Commonomy Kids with. It cannot be undone. You can also ask us at support@commonomy.com and we will do it for you.

To stop your child using the app without deleting anything, open the child in Commonomy (Family → the child → Commonomy Kids) and choose Disconnect the app. Every device your child is signed in on is signed out at once — including one in the other home — and their stars and rewards are kept. They cannot sign back in without a new code from a parent.

As your child's parent you can ask to see, correct or delete their data at any time, and you can withdraw consent by deleting it as above. Write to support@commonomy.com. You may also complain to your data protection authority.

If what Commonomy Kids does with a child's data changes, this page changes first, with a new date at the top.