Privacy Policy

1. Who We Are

Quokka is developed and operated by Fastorbit Apps ("Quokka", "we", "us", "our"). If you have any question about this Privacy Policy, about the data we hold about you, or about any right described below, please contact us at [email protected]. We will respond within a reasonable time and at the latest within 30 days.

You can reach the public Quokka website at https://quokkafamily.com.

2. What Quokka Is and Who Uses It

Quokka has two kinds of users:

• "Parents" or "adults" — an adult family member who creates a family in the app, invites other adults and the family's minor children, assigns tasks and rewards, and optionally manages screen time on a child's iPhone using Apple's Family Controls API.
• "Kids" or "children" — a minor family member whose parent or legal guardian adds them to a family using a short invite code. The kid uses Quokka on their own iPhone to see tasks assigned to them, mark tasks done, attach a proof photo when they choose to, earn stars, and spend stars on rewards the parent has created or on screen-time sessions.

Quokka is designed to be used by a minor with the explicit, active participation of the minor's parent or legal guardian. It is not a social network. It is not a friend finder. It is not a monitoring tool for anyone other than a parent's own minor children.

The adult who creates a family represents and warrants that they are the parent or legal guardian of each minor they add to the family, that they provide verifiable parental consent for that minor's use of Quokka, and that they take responsibility for supervising that minor's use of the app.

3. Information We Collect

3.1 Information you give us directly

• Display name that you (or the parent on behalf of a kid) type when setting up the account.
• Avatar choice: either an emoji, a named color, or a photo you take or pick from your Photo Library.
• Task and reward content you create inside the app: titles, emojis, short notes, optional cover or proof photos.
• Screen-time preferences you configure for a child on the parent's device: daily limit in minutes, downtime start and end time, whether the schedule is enabled, and your Family-Controls-managed category selection (see section 6.3 below for how this last item is handled).

3.2 Information from Apple when a parent signs in

• When a parent signs in using Sign in with Apple, Apple returns a stable, app-specific user identifier to us, together with an email address (which may be an Apple-relayed anonymized email) and a first and last name if the parent chooses to share them on first sign-in. We never see the parent's Apple ID password.
• Kids do not sign in with Apple. A kid's iPhone uses an anonymous, device-scoped Supabase authentication session created on first launch and linked to the family the kid joins using the family invite code. No email, no phone number, no password, and no date of birth is requested from a kid.

3.3 Information generated automatically by use of the app

• Tasks and rewards you create are stored together with the user ID of the creator and, for tasks, the assignee. Completion history for recurring tasks is stored as a per-window record so parents can see progress over time.
• When a kid completes a task or claims a reward, we store a star-balance transaction so the stars can be correctly accounted across both devices.
• When a parent sends a remote lock or unlock command to a child's device, we store the command (and its timestamp) so the child's device receives it the next time it syncs.
• When a kid runs an active screen-time session (a timed unlock), we store the session state so it survives app restarts and device reboots.

3.4 Device information

• We store the Apple Push Notification service (APNs) device token for each device that has granted notification permission, linked to an iOS-vendor-scoped device identifier. This lets us route notifications to the right device. We do not use this identifier for tracking.

3.5 Location information (opt-in)

• If, and only if, a user explicitly turns location sharing on for themselves in the Profile → Location screen and grants iOS location permission, we collect the device's latitude, longitude, battery percentage, and the time of the update. Each record is tagged as either "precise" or "approximate" based on the user's chosen precision.
• We use the iOS "While Using the App" location authorization only. We do not request "Always" location access. We do not collect location in the background when the app is closed.
• Location sharing can be turned off at any time from the same screen and stops any further collection immediately.

3.6 What we do not collect

We never request, and iOS never grants us, access to: your messages, your call history, your web browsing, the content on your screen or in other apps, your keystrokes, your microphone, your contacts, your calendar, your health data, your HomeKit data, your files outside those you pick yourself, or your network activity in other apps. Quokka has no analytics SDK, no advertising SDK, no attribution SDK, no social-login SDK other than Apple, and no third-party tracker of any kind. We do not track users across apps or websites owned by other companies.

4. How We Use the Information

We use the information we collect for the following purposes and nothing else:

• To create and maintain your family account and keep family members in sync across devices.
• To deliver the core features you and your family see in the app: tasks, rewards, stars, streaks, the optional family map, and optional screen-time management.
• To send you push notifications about events that affect your family (a task assigned, a reward requested, a completion awaiting approval, a device locked, and similar) when you have granted notification permission on the receiving device.
• To bill you for a subscription, through Apple's App Store. We never see your payment card or bank information; Apple processes the purchase.
• To answer your support requests.
• To prevent abuse, fraud, and security incidents; to comply with law; and to enforce our Terms of Service.

We do not use your information for advertising, ad targeting, profiling, or any form of tracking as defined by Apple's App Tracking Transparency framework. Quokka's App Tracking Transparency setting is "Data Not Used to Track You".

5. Legal Bases (for Users in the EEA and UK)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the General Data Protection Regulation (GDPR) and the UK GDPR:

• Performance of a contract — to provide the features you and your family use in the app.
• Consent — for optional location sharing, for push notifications, and for optional photo attachments. Where we rely on consent you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
• Legitimate interests — to keep the service secure, to prevent fraud, and to improve reliability. Where we rely on legitimate interests we have balanced those interests against your fundamental rights.
• Legal obligation — where we must retain or disclose information to comply with law.

For a minor's personal data, we rely on the parent's or legal guardian's verifiable consent given inside the app when they add the minor to the family.

6. How Family Controls Work in Quokka

6.1 Explicit dual consent

Screen-time management uses Apple's Family Controls, DeviceActivity, and ManagedSettings APIs. The parent explicitly authorizes Family Controls on the parent's own device before configuring anything. The kid separately and explicitly authorizes Family Controls on the kid's own device when the kid taps "Enable Screen Time" during the kid's onboarding. Without both authorizations, screen-time enforcement does not run.

6.2 What Family Controls does in Quokka

• Applies a shield overlay to categories or individual apps the parent selected, when the daily limit is reached, when a downtime window is active, or when the parent has turned on a manual lock for that child.
• Enforces a scheduled downtime window chosen by the parent.
• Unlocks apps temporarily when the kid starts a screen-time session paid for with earned stars.

6.3 What stays on the kid's device and never reaches our servers

• The opaque application and category tokens a parent selects using the iOS FamilyActivityPicker are stored only in an App Group container on the kid's iPhone so the Quokka monitor and shield extensions can enforce limits. They are not transmitted to our servers. They identify apps in a way that is readable only by the kid's device and only by Quokka's own extensions.
• The daily minute budget remaining on the kid's device is computed and stored on the device; only aggregate figures (e.g. "remaining balance in minutes") are synchronized across the family for display.

6.4 What we do not and cannot see

Because we use only Family Controls, we do not see and cannot see the content of any other app, the screen on the kid's device, the duration of any specific app the kid uses, the kid's browser history, the kid's messages, or the kid's search queries. Family Controls is a permission to apply a shield, not a permission to observe.

7. Children's Privacy

Quokka knowingly collects a minimal set of data about children and only with the verifiable consent of the child's parent or legal guardian. In the United States, we comply with the Children's Online Privacy Protection Act (COPPA). In the European Economic Area and the United Kingdom, we comply with Article 8 of the GDPR and with national age-of-consent thresholds for information-society services.

• We do not ask a child for an email address, a phone number, a date of birth, their home address, their school, or their real full name. The child's display name in the family is provided by the parent.
• We do not serve advertising to any user, including children.
• We do not share a child's information with any third party for that third party's independent marketing or commercial use.
• A parent or legal guardian may review, correct, export, or permanently delete their child's information at any time from inside the app or by emailing [email protected].
• If we learn that we have collected information from a child without a parent's verifiable consent, we will delete it.

8. How We Share Information

We do not sell your personal information. We do not share your personal information with any third party for that third party's independent marketing purposes. We share information only in the following narrow circumstances:

8.1 Between members of your own family

Tasks, rewards, avatars, stars, screen-time configurations, and location (if turned on) are visible to other members of the same Quokka family. This is the product.

8.2 Service providers that process data on our behalf

• Apple — for Sign in with Apple, Push Notifications (APNs), App Store billing, and iOS platform services. Apple's own terms and privacy practices apply and are available at apple.com/privacy.
• Supabase, Inc. — Supabase provides our backend Postgres database, realtime synchronization, file storage for avatars and proof photos, and serverless functions that send push notifications. Supabase runs on Amazon Web Services in the United States. Supabase processes your personal data only to provide these infrastructure services to us and is bound by a data processing agreement.

We do not currently use any analytics provider, advertising partner, attribution partner, or tracker of any kind.

8.3 Legal and safety

We may disclose information when we are legally required to, when we believe in good faith that disclosure is necessary to protect the rights, safety, or property of any person, to prevent fraud or abuse, or to enforce our Terms of Service.

8.4 Business transfers

If Quokka is acquired by or merged with another company, information we hold may be transferred to the successor subject to this Privacy Policy. We will notify affected users if this changes how their information is processed.

9. How Long We Keep Information

• Your account and the data attached to it are kept while the account remains active.
• Historical location points are automatically deleted after 90 days.
• Historical lock and unlock events are automatically deleted after 90 days.
• Historical task activity logs are automatically deleted after 90 days.
• Task proof photos and reward cover photos are kept until you delete the task, delete the reward, or delete your account.
• When you delete your account (or when a parent deletes a child's account), we delete all associated personal data within 30 days. Aggregated, non-identifiable technical metrics that cannot be tied back to a user may be retained for system reliability monitoring.
• We may retain a minimal record of the deletion event itself for legal compliance where required.

10. How We Protect Your Information

• All traffic between the Quokka app and our backend is protected with TLS 1.2 or higher.
• Data in the Supabase database is encrypted at rest using industry-standard AES-256 encryption.
• Access to your family's data is protected by row-level security keyed to family membership. A user can only read and modify data belonging to a family they are part of.
• The App Group cache used by the Quokka screen-time extensions never leaves the kid's device and is wiped when the app is deleted.
• We keep administrative access to the backend strictly limited and logged.

No system is perfectly secure. If we become aware of a security incident that affects your personal information, we will notify you and the competent authority when required by law.

11. International Transfers

Supabase processes your data on infrastructure located in the United States. If you use Quokka from outside the United States, including from the European Economic Area, the United Kingdom, or Ukraine, your information will be transferred to and processed in the United States under the European Commission's Standard Contractual Clauses and equivalent safeguards that Supabase has put in place.

12. Your Rights

You have the following rights with respect to your personal information. Depending on your jurisdiction, some rights may not apply or may be qualified by local law.

• Right of access — you can ask for a copy of the personal information we hold about you.
• Right to rectification — you can correct inaccurate or incomplete information. Most fields can be edited directly in the app.
• Right to erasure ("right to be forgotten") — you can delete your account, which deletes your personal information.
• Right to restrict or object to processing.
• Right to data portability — you can ask us for an export of your data in a commonly used, machine-readable format.
• Right to withdraw consent at any time where we rely on consent.
• Right to lodge a complaint with a supervisory authority, including the Ukrainian Parliament's Commissioner for Human Rights, the data protection authority in your EU country of residence, or the UK Information Commissioner's Office.

For California residents: under the California Consumer Privacy Act as amended, you have the right to know what personal information we have collected, the right to delete it, the right to correct it, and the right to opt out of any "sale" or "share" of it. Quokka does not sell or share personal information in the CCPA sense.

For Virginia, Colorado, Connecticut, Utah, and other US state residents with comprehensive privacy laws: you have analogous rights under those laws.

13. How to Exercise Your Rights

You can exercise most rights directly inside the app:

• Edit your display name and avatar in Profile.
• Turn location sharing on or off, and switch between precise and approximate, in Profile → Location.
• Turn notifications on or off in iOS Settings → Quokka → Notifications, or from inside the app.
• Cancel your subscription in iOS Settings → [your Apple ID] → Subscriptions.
• Delete a task, a reward, a family member, or your entire account from Profile.

For any other request, or to exercise a right that is not available directly in the app, email us at [email protected] from the email address associated with your account. We will verify your identity before acting on a request that concerns personal information.

14. Links and Third-Party Services Inside the App

The app contains links to a Terms of Service page, this Privacy Policy, and a Support email. These take you to resources we operate. If a future version of Quokka adds a link to a third-party service, that service's own privacy policy will apply when you follow the link.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the app, changes in the law, or changes in best practice. When we make a material change we will update the "Effective date" at the top of this document, surface an in-app notice to each active user at least fourteen days before the change takes effect, and, for paying subscribers, send a notification to the email associated with the account. Continued use of Quokka after the effective date of a change constitutes acceptance of the updated policy.

16. Governing Law

This Privacy Policy is governed by the laws of Ukraine, without regard to conflict-of-laws principles. Mandatory data-protection rights granted to you by the law of your country of residence are not affected.

17. Contact Us

Questions, complaints, and requests about this Privacy Policy or about your personal information should be sent to:

[email protected]

We aim to respond within five business days and in any event within the period required by applicable law.