Local-first household
ChoreRally works on the device. Optional private iCloud continuity keeps a family copy in the owning Apple Account's CloudKit zone for invited Apple devices.
Private family space
ChoreRally keeps the business model and the family model separate: no ads, no behavioral tracking, no public child profiles, and no real-money account.

Trust in the product
The parent owns the household. Child profiles can participate in the routine without gaining adult permissions.
ChoreRally works on the device. Optional private iCloud continuity keeps a family copy in the owning Apple Account's CloudKit zone for invited Apple devices.
Child profiles cannot set chore payouts, approve their own rewards, manage family members, backups, or sync. Parent controls are protected by a separate PIN.
Fresh proof is taken inside the chore flow. It stays app-private for local households or uses private family-scoped storage when cross-device sync is enabled.
Separate parent and child PINs protect role access on a shared device. Repeated failed attempts trigger a temporary lockout.
A parent can generate a structured family JSON backup, restore it after confirmation, and delete the account and household.
ChoreRally does not include third-party analytics, advertising, or behavioral tracking SDKs.

Parent-controlled lifecycle
iCloud continuity connects invited Apple devices. Connected family plans also use an online parent account and plan verification. Parents can export a backup or request account deletion from Account & Privacy in Settings; online, cloud and local removal have separate results.
Security contact
Do not include a child profile PIN, proof photo, household export, or other private family content. Describe the affected version, device, and the steps needed to reproduce the concern.