Local-first household
ChoreRally works on the device. Optional private iCloud continuity keeps a family copy in the owning Apple Account's CloudKit zone for invited Apple devices.
Private family space
ChoreRally keeps the business model and the family model separate: no ads, no behavioral tracking, no public child profiles, and no real-money account.

Trust in the product
The parent owns the household. Child profiles can participate in the routine without gaining adult permissions.
ChoreRally works on the device. Optional private iCloud continuity keeps a family copy in the owning Apple Account's CloudKit zone for invited Apple devices.
Child profiles cannot manage chores, rewards, Bucks, family members, backups, or sync. Parent controls are protected by a separate PIN.
Fresh proof is taken inside the chore flow. It stays app-private for local households or uses private family-scoped storage when cross-device sync is enabled.
Separate parent and child PINs protect role access on a shared device. Repeated failed attempts trigger a temporary lockout.
A parent can generate a structured family JSON backup, restore it after confirmation, and delete the account and household.
ChoreRally does not include third-party analytics, advertising, or behavioral tracking SDKs.

Parent-controlled lifecycle
iCloud continuity is optional. Parents can keep the household local, connect invited Apple devices, generate a backup, or permanently delete the account from Account & Privacy in Settings.
Security contact
Do not include a child profile PIN, proof photo, household export, or other private family content. Describe the affected version, device, and the steps needed to reproduce the concern.