Privacy Policy

Bounty Boss (“Bounty Boss,” “we,” “us”) is a task-and-points app for families, groups, kindergartens, and small schools, operated by Arture. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Bounty Boss you agree to this policy.

Information we collect

• Account information. When an owner registers we collect an email address, a display name, and a password (stored only as a secure hash).
• Members you create. For kids you add, we store a username, a display name, an avatar, and an optional birth year. Kid accounts have no real email address — we generate an internal placeholder from the username so the account can sign in, and we never use it to contact anyone. For assistants you add (co-parents or teachers), we store an email address, a display name, an avatar, and a password (stored only as a secure hash).
• Profile details a member adds. A signed-in member can add an optional full birth date to their own profile, which is used only to award a birthday badge.
• Activity in the app. Tasks, completions, points, streaks, badges, rewards, announcements, and similar records you create while using the app.
• Notifications. To deliver the alerts you turn on, we store a browser push subscription for push notifications and use your account email address to send email notifications.
• Payments. If you subscribe to a paid plan, our payment provider processes your payment and shares limited billing details with us (such as your subscription status and the last four digits of your card). We never receive or store your full card number.
• Technical data. Basic logs and rate-limiting data (such as IP address and timestamps) used to keep the service secure and reliable.

How we use information

• To provide and operate the app and its features.
• To secure accounts, prevent abuse, and enforce rate limits.
• To send notifications you have opted into.
• To improve reliability and fix problems.

We do not sell personal information, and we do not use it for advertising or behavioral profiling.

How information is shared

We share data only with service providers that help us run the app: Netlify (hosting and content delivery), Neon (database), Resend (sending email notifications), and Lemon Squeezy (our payment provider and Merchant of Record for paid subscriptions), along with the browser push services that deliver push notifications. These providers process data on our behalf. We may also disclose information if required by law.

Data retention

We keep your data while your account is active. Managed accounts (kids and assistants) that are never signed into are automatically removed 7 days after they are created. You can delete accounts at any time — see our Data & Account Deletion page.

Children

Bounty Boss is designed for families, groups, kindergartens, and small schools. Children never sign up on their own: every kid account is created and controlled by an adult owner — a parent or guardian in a family, and a responsible adult at an organization. See our Children’s Privacynotice for details on how children’s information is handled.

Your rights

You may access, correct, or delete your information. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. To exercise any right, contact us.

Changes

We may update this policy from time to time. Material changes will be reflected by the “last updated” date above.

Contact

Questions about privacy? Email bountyboss.fun@gmail.com.