Pawprint's privacy posture is enforced by the architecture, not by promises. The family's data is encrypted on-device using a key only the family holds. The storage backend — whatever vendor — never sees the data unencrypted. There is no behavioral-data product to sell because there is no readable behavioral data to start with.
Everything. Chore details, allowance balances, goal progress, calendar events, photo proof, role assignments — all stored locally on each family member's installed Pawprint client. Cleartext never leaves the device.
For families on the paid Family tier (encrypted-blob sync between devices), serialized state changes are encrypted with the family's symmetric key and pushed to a blob-storage backend. The backend sees:
It does not see: child names, ages, addresses, photo content, chore titles, allowance amounts, calendar entries, or any other family data. None of those exist in cleartext on any server we operate.
Aggregate, anonymized usage telemetry — how many families have installed, how many sync events per day in aggregate, latency percentiles. None of it linkable to a specific family. This is opt-in and visible in Settings.
The Solo tier shows banner ads (third-party ad network; we'll publish the specific network and its data-handling terms before launch). The Family tier has no ads. We do not, and architecturally cannot, sell behavioral data — there's no readable behavioral data to sell.
Pawprint isn't a monitoring tool. The kid sees what's logged about them. The parent sees what's logged about the kid. There is no hidden dashboard a parent gets that the kid is shielded from. Same audit trail, same surface — what differs is who can edit (parent) vs who can interact (kid).
We will comply with COPPA and equivalent regional regulations. The minimum data required to make Pawprint useful for a child is: a first name (or chosen handle), an age, and an avatar pick. No email address, no phone number, no real-name verification, no photo of the child uploaded anywhere. Photos attached to chores as proof are stored on the family's devices, encrypted in any sync blob, and never extracted for any other purpose.
Any guardian-admin can, at any time:
Submissions to the notify-me form on this site go to Netlify Forms. We pull entries by hand. No email-marketing platform, no third-party data broker. If you ever want your entry removed, email kdeibel@cleanmoneycorporation.com (or whatever the Pawprint-specific contact becomes — we'll update this when launch is closer).
Pawprint is currently in founding-families preview. The privacy posture above is the product posture we are building toward; the formal policy will be finalized before paid launch and reviewed by counsel. If anything in that eventual policy contradicts the principles on this page, the policy gets fixed.