Last updated: 3 September 2026
ChoreStash is operated by Yari LLC. Throughout this policy, “we” and “us” mean Yari LLC. Where the policy says we cannot read your family's data, that is a statement about how the software is built, not only a promise about how we behave — see It is end-to-end encrypted below.
You can reach us about anything in this policy at support@chorestash.com, which is the fastest way to get an answer. Written notice can be sent to our registered agent:
Yari LLCThe short version: ChoreStash collects nothing, and if you turn on family sync, what is synced is encrypted with a key only your family holds.
ChoreStash stores the household data you enter — first names or nicknames, avatars, chores, lists, points, rewards, and PINs — only on the device the app runs on, in the browser's or app's local storage.
By default, nothing. The app makes no network requests after it loads. There are no accounts, no analytics, no advertising, no tracking, and no cookies. Yari LLC never sees, receives, or stores any of your family's information. The only third-party content anywhere is an optional demo video, described below, which loads nothing unless you tap play.
One exception, and only if you go looking for it: when you tap Turn on family sync, the app asks the sync service what it charges, so that the next screen can tell you the terms before you agree to anything. That request contains nothing at all about you, your household, or your data — it asks a question and reads a yes or no. If you never tap it, it never happens.
Our how-it-works page offers a short demo video hosted on YouTube. Nothing is requested from YouTube unless you tap play — the preview image is served from this site. If you do play it, YouTube receives that request like any other visit to their site, under their own privacy policy. The app itself never contacts them.
Sync is off by default. If a parent turns it on, the family's chore data is shared between that family's devices through ChoreStash sync (or a server the family hosts themselves, if they choose that option in Settings).
We cannot read your family's data, and neither can anyone who obtains it. Before anything leaves your device it is encrypted with AES-GCM using a 256-bit key that is generated on the parent's device and never sent to the server. The key travels to your family's other devices inside the invite link's fragment, which browsers never transmit in a request. The server stores ciphertext it has no way to interpret.
What the server can see: your random family code, how many changes exist, their order, their timestamps, the internal type name of each change (for example that something was approved), and whether the household has bought family sync. What it cannot see: any name, nickname, chore, reward, point total, or PIN — all of that lives inside the encrypted payload.
Encrypted, as described above: nicknames or first names, chosen emoji avatars, chore and list names, point values, reward names, and the history of chores completed and approved. PINs are hashed before they are encrypted, so they are protected twice over.
We do not collect or store: email addresses, phone numbers, real names, dates of birth, photographs, contacts, location, device identifiers for advertising, or any analytics or tracking data. There is no sign-up and no account — a family is identified only by a random 8-character code generated on the server.
One more thing is kept, and it is a single yes or no: whether this household has bought family sync, together with the date any free trial of it ends. Nothing else about a purchase is stored — no receipt, no transaction number, no store account, no email address, and not even which app store took the payment. Your phone tells the server that a purchase was made, and the server records only that it was. Family sync is free while ChoreStash is in the web app, so at present every household is simply marked as having it.
One narrow exception, for abuse prevention only: when a family is first created, the sync service counts how many families have been created in the current hour by the same caller, so nobody can script millions of them. It does this by storing a one-way hash of the network address together with the hour — not the address itself, which is never written down — and those counters are deleted within a day. They are never linked to a family code, to any chore data, or to each other.
A family is identified by a random 8-character code generated on the server. This is a persistent identifier, and we use it solely for the support of internal operations — specifically: routing each family's chore data to that family's own devices, keeping those devices in sync, ordering changes consistently, and letting a device recognise the family it belongs to when it reconnects.
We do not use the family code, or anything associated with it, to contact any individual, to build a profile, for behavioral advertising, or for any other purpose. It is never disclosed to third parties. Because the code is random and tied to no personal information, it cannot be used to identify anyone outside the app.
Sync can only be enabled from the PIN-protected Manage area, and only after a notice describing exactly what will be stored. A child never provides information to us: whoever holds the Manage PIN creates every profile and chooses the nickname. The app asks for a first name or nickname and actively discourages full names, so in normal use we hold nothing that identifies a child.
We do not knowingly collect personal information from children beyond what is described above. We never sell or share family data with anyone, we show no advertising, and we run no analytics or tracking of any kind. If you believe a child's personal information has reached us in some other way, email us and we will delete it promptly.
You can erase everything yourself, at any time, with no request to us: Manage → Settings → Delete our data from the server. That destroys the family's stored data permanently and immediately. Leave family sync stops this device syncing without deleting; removing the app deletes the local copy. You can also email support@chorestash.com with a family code and we will delete it for you.
On Cloudflare's infrastructure — encrypted in transit over HTTPS, and encrypted at rest with a key we do not hold. A family's data is kept while the family is using the app and is automatically deleted after 12 months without use — this runs as a scheduled job, not on request. We keep no backups beyond that window and no copies elsewhere.
Because no personal information is ever collected or transmitted, ChoreStash does not collect personal information from children as defined by COPPA (US), GDPR-K (EU), or similar regulations. Whoever holds the Manage PIN sets up every profile; nobody needs an account or provides information to anyone.
The optional backup feature creates a file on your device at your request. Where you store or send that file is entirely under your control.
Deleting the app (or clearing the site's browser data) permanently erases everything. There is nothing to delete anywhere else, because nothing was ever sent anywhere.
The Terms of Service cover the rest of the agreement — what the app is, what points and rewards are and are not, and what happens if you lose your family key.
If a future version ever changes any of the above, this policy will be updated before that version ships. Questions: support@chorestash.com.