docade — Privacy Policy
Last updated: September 1, 2026
The short version
docade is a jobs-and-rewards app for families. A parent creates the household and adds their children. We do not collect email addresses, phone numbers, or any contact information from children. We do not show advertising, we do not sell or share data, and there are no third-party analytics on the child-facing part of the app.
Who we are
docade is operated by the household administrator who created your account, using software provided by Wootface, LLC. Contact: support@docade.app.
What we collect, and from whom
From the parent (the account holder)
Email address
- Why
- Sign-in (magic link) and essential notifications
- Kept
- Until the account is deleted
Household name and timezone
- Why
- Running the app; the timezone drives daily resets
- Kept
- Until deleted
Household settings (ticket value, token grant)
- Why
- Running the app
- Kept
- Until deleted
| Data | Why | Kept |
|---|---|---|
| Email address | Sign-in (magic link) and essential notifications | Until the account is deleted |
| Household name and timezone | Running the app; the timezone drives daily resets | Until deleted |
| Household settings (ticket value, token grant) | Running the app | Until deleted |
We do not collect a parent's phone number, address, or payment details. docade takes no payments.
About the child — supplied by the parent, not by the child
Display name
- Why
- So the child recognizes themselves at sign-in
- Kept
- Until deleted
Avatar choice
- Why
- Same
- Kept
- Until deleted
Age band (e.g. 8–10)
- Why
- Sets quiz difficulty and game board size. We do not store a date of birth.
- Kept
- Until deleted
A 4-digit PIN, stored hashed
- Why
- Sign-in on the child's own device
- Kept
- Until deleted
| Data | Why | Kept |
|---|---|---|
| Display name | So the child recognizes themselves at sign-in | Until deleted |
| Avatar choice | Same | Until deleted |
| Age band (e.g. 8–10) | Sets quiz difficulty and game board size. We do not store a date of birth. | Until deleted |
| A 4-digit PIN, stored hashed | Sign-in on the child's own device | Until deleted |
We deliberately store the age band rather than the birth date, because the band does the same job with less information about your child.
Generated as the child uses the app
Completed jobs, tickets and tokens earned and spent, prizes redeemed, game scores, streaks, and collected items. This is the record that makes the app work — a child cannot have a balance without a record of how they earned it.
Technical information
A session token, a device identifier linking one device to one child profile, and — if notifications are enabled — a push subscription endpoint.
These are what privacy law calls "persistent identifiers", and they count as personal information. We use them solely to operate the app: to keep a child signed in, to remember which child a device belongs to, and to deliver notifications the parent has enabled. We do not use them to build a profile, to track anyone across other apps or websites, or for advertising.
What we never do
- No advertising, and no advertising SDKs.
- No selling or sharing of personal information.
- No third-party analytics on the child-facing app.
- No purchases anywhere in the app, and specifically none by a child. The in-app currencies are earned only through completing jobs — they cannot be bought.
- No chat, messaging, or social features. A child cannot communicate with anyone through docade.
- No external links out of the child-facing app.
- No location data, no contacts, no photos, no microphone, no camera.
Children's privacy (COPPA and equivalents)
docade is designed for families and is used by children under 13, so we build to the stricter standard throughout.
The parent is in control. The parent creates the account, adds each child, and supplies everything stored about them. A child never provides personal information to us directly — they enter a household code and a PIN their parent set up.
Parents may at any time:
- See everything stored about their child, in the app.
- Correct any of it.
- Export the whole household's data in a portable format.
- Delete a child's profile, or the entire household, permanently.
- Turn off notifications entirely, or per type, per child.
- Refuse further collection by deleting the account.
To exercise any of these, use the settings in the app or contact support@docade.app. We respond within 30 days.
Who we share data with
Only the service providers required to run the app, each acting on our instructions:
Supabase
- Role
- Database, authentication, file storage
Vercel
- Role
- Application hosting
Cloudflare
- Role
- Scheduled jobs (daily grants, reminders) and DNS
Resend
- Role
- Sign-in and summary emails to the parent only
Sentry
- Role
- Error reporting, so we can fix crashes
Anthropic
- Role
- Powers the parent-side assistant. Only parent-side content is sent — never a child's data.
| Provider | Role |
|---|---|
| Supabase | Database, authentication, file storage |
| Vercel | Application hosting |
| Cloudflare | Scheduled jobs (daily grants, reminders) and DNS |
| Resend | Sign-in and summary emails to the parent only |
| Sentry | Error reporting, so we can fix crashes |
| Anthropic | Powers the parent-side assistant. Only parent-side content is sent — never a child's data. |
We do not sell data, we do not share it for advertising, and we do not disclose it to anyone else except where the law requires it.
Each household's data is isolated from every other household at the database level, not merely in the interface.
Notifications
With the parent's permission, docade sends a child notifications about their day — a daily token grant, an upcoming deadline, a streak reminder. These are capped at three per day, respect quiet hours, and every type can be switched off individually by the parent.
How long we keep things
For as long as the household uses docade. Delete the household and the data is permanently removed, not archived. Backups roll off within 30 days.
Security
Data is encrypted in transit and at rest. PINs are stored hashed, never as text. Each household is isolated at the database level and that isolation is verified by automated tests on every change.
No system is perfectly secure, and we won't claim otherwise. If a breach affects your household, we will tell you.
Where data is processed
The United States. If you use docade from elsewhere, your data is transferred to and processed in the US.
Changes
If we change this policy in a way that affects what we collect about a child, we will notify the parent and, where the law requires it, ask for consent again. The "last updated" date at the top always reflects the current version.
Contact
support@docade.app · Wootface, LLC · Colorado, United States