Privacy Policy

Effective date: 14 October 2026

In short

Katsjing is an app in which children earn coins for chores and parents manage everything. We collect as little as possible:

• Without an account, everything you enter in the app (children, tasks, rewards, coins) stays on your device. The app also works without internet.
• The app is not completely silent, though: when your device is online, the app asks RevenueCat at start-up whether Premium is active, and asks our server (Supabase) whether an update is required. Technical data goes along with that, such as your IP address, the app version and the device model, but no data about your child. See 2.2.
• Cloud sync is optional. Only when you create a parent account and a family does your data go to our server, in the EU.
• No ads, no tracking, no analytics software, no location, no photos.
• Android may include the app's data in your own Google backup. See 2.6 for how to turn that off.
• You can export your data, and delete your account or part of your data yourself in the app (see katsjing.app/account/delete).

The full details are below.

1. Who is responsible for your data?

Katsjing is an app by Bartificial Studio. The data controller for your data is:

Bartificial Studio — trade name of Bart Vanuytven, sole proprietorship
Stokt 128, 2400 Mol, Belgium
Company number (KBO): 1040.549.880
Email: support@katsjing.app

"Katsjing" is the brand name of the app; "Bartificial Studio" is the business behind it, which is responsible for processing your data.

For any question about privacy or about this policy, you can reach us at support@katsjing.app.

2. What data do we process?

2.1 On your device (always)

The app keeps this data in your device's local storage. Without cloud sync it does not leave your device, except through your own Android backup (see 2.6):

• The name or nickname of each child, entered by you as a parent.
• Progress: coins earned and spent, savings pot, streaks, jokers, daily goal, badges, avatars (fixed emoji icons, no photos), savings goals and the daily history of tasks and rewards.
• The tasks, rewards and savings goals you create yourself.
• A four-digit parent PIN, if you set one. The app stores it only as a hash (a one-way derivative), never the code itself.
• A security log with the last 30 events around the PIN (such as logging in, changing or resetting it), visible to the parent.
• The app's language.
• Feedback that has not been sent yet (see 2.4).

2.2 At start-up with internet, even without an account

Even if you have no account, the app connects to two services as soon as your device is online: at start-up, and occasionally after that, for example when you return to the app or the connection comes back.

• RevenueCat, to know whether Premium is active on this device and to show the offers from Google Play. RevenueCat receives: a random, anonymous ID that the app creates per installation (or, if the device is linked to a family, your family's internal ID), your IP address, the version of the app and of Android, the make and model of the device, your language and region settings and the country of your Google Play account (storefront). If you buy Premium, RevenueCat also receives the purchase data that Google Play passes on, such as the product, the purchase receipt and the period. RevenueCat gets no name or email address from the app.
• Supabase (our server), to check which version of the app is the minimum required. If your version is too old, the app asks you to update. Supabase receives your IP address, the app's user agent (with the Android version and the device model) and the app version.

No data about your child or about what you enter in the app is sent along. Without internet none of this happens, and the app simply keeps working.

2.3 With a parent account and cloud sync (optional)

If you want to use your data on several devices, you create a parent account and a family. Your data then goes to our server environment at Supabase. In that case we also process:

• The parent's email address and password, managed by Supabase Authentication. The password is not stored in readable form.
• Your account's language (the app's language), so that confirmation and password emails arrive in your language.
• A family name. It is required when you create a family; you choose it yourself, and it does not have to be your real family name.
• The data from 2.1 that is needed to sync: each child's name or nickname and avatar, their progress, and the tasks, rewards and savings goals with their status. The parent PIN, the security log and the daily history stay on the device.
• Per linked device: an anonymous identity for child devices (without an email address or password), the device model that the device reports itself (for example "NE2211"), a device name if you as a parent enter one, the date it was linked and when the device was last active. Device model and "last active" are also kept for the device on which you are signed in as a parent.
• Pairing codes (six digits, valid for ten minutes) and the time of incorrectly entered codes, to limit guessing.

A child device gets no email address or password. It is linked with a pairing code that the parent creates on their own device.

2.4 Feedback

You can send us feedback through the app: a rating (1 to 5), a message, and your email address only if you enter it yourself, so we can reply. Feedback is only sent once the device is linked to a family, and it is linked to that family. Until then it waits on your device.

2.5 Purchases

You buy Premium through Google Play: a monthly or yearly subscription, or a one-time lifetime purchase. Payment is handled by Google; we do not receive payment details such as your card number. RevenueCat keeps track for us of whether Premium is active (see 2.2). This happens for every installation, even if you never buy anything.

2.6 Android backup

Katsjing allows Android's automatic backup. That is a deliberate choice: it lets users without an account take their data to a new device too. If backup is turned on in your Google account, Android may include the data the app keeps on your device (see 2.1) in your own Google backup and restore it on a new device. That backup belongs to your Google account and falls under Google's privacy policy; we have no access to it.

If you don't want this, turn off backup in your device settings, usually under Settings → Google → Backup (the name of the menu differs per device). Note that this applies to all apps on your device, not just Katsjing. You can also make your own backup file in the app, under ‘Backup & Restore’.

2.7 What we do not collect

No location data, no photos or camera images, no contact list, no advertising ID (the app does not request that permission), no data about your behaviour in the app. We show no ads and use no analytics or tracking software, such as Google Analytics or Firebase Analytics. The statistics in Premium are calculated by the app itself, from the data on your device.

3. Why do we process this data? (legal bases)

Under the GDPR we process your data on the basis of:

• Performance of our contract with you (Art. 6(1)(b) GDPR): to make the app work and, if you choose them, to provide cloud sync and Premium.
• Our legitimate interest (Art. 6(1)(f) GDPR): to check at start-up whether Premium is active and whether your version of the app is still supported, and to limit misuse of pairing codes.
• Your consent (Art. 6(1)(a) GDPR): for sending feedback, possibly with your email address. You can withdraw this consent at any time.
• Parental consent for your child's data (Art. 8 GDPR): see section 4.

4. Children's data

Katsjing is meant for children, under the supervision of a parent or guardian, and we treat the app as an app for children: no ads, no tracking, no analytics software. The parent sets up the app, enters the child's name or nickname and manages all settings, optionally protected with a PIN. The child does not create an account and does not enter an email address or other contact details. A child device is linked with a pairing code from the parent and gets an anonymous identity.

By creating a child profile, you as the holder of parental responsibility consent to the limited processing described above. If you (optionally) turn on cloud sync, that relies on our contract with you (see section 3). In Belgium, the age at which a child can consent to online services themselves is 13; for younger children, consent from the parent is required, which is given through this parental management.

We deliberately collect as little data about children as possible: at its core no more than a name or nickname and their progress in the app. A nickname is enough.

5. Who do we share data with? (processors)

We never sell your data. We use a limited number of service providers that process data on our behalf:

• Supabase: for the minimum version (for every installation, see 2.2) and, with an account, for storing your account and family data and for authentication. Supabase Auth also creates the confirmation and password emails; they are sent through Google (see below). Our data is hosted in the eu-west-1 (Ireland) region, within the European Union. See supabase.com/privacy.
• RevenueCat: for the purchase status, for every installation (see 2.2). RevenueCat is based in the United States, so this data may be processed outside the EU. That transfer relies on the standard contractual clauses of the European Commission (Decision 2021/914), included in RevenueCat's data processing agreement. See revenuecat.com/privacy.
• Google: Google Play processes your payment when you buy Premium. Through Google Workspace we send your account's confirmation and password emails (from Bartificial Studio's email account), and receive the emails you send to support@katsjing.app. Google may also process this data outside the EU. That transfer relies on the EU-U.S. Data Privacy Framework (Google LLC is certified) and on the standard contractual clauses in Google's data processing agreement. See policies.google.com/privacy.
• Cloudflare: hosts this website (katsjing.app) and processes technical data such as your IP address to do so.

The Android backup from 2.6 is a service you use yourself at Google; we send nothing there.

6. Where is your data stored?

• On your device, and possibly in your own Google backup (2.6).
• With an account: at Supabase, in the eu-west-1 (Ireland) region, within the EU.
• Purchase status and the technical data from 2.2: at RevenueCat, which is based in the United States. That transfer relies on the standard contractual clauses of the European Commission (Decision 2021/914), included in RevenueCat's data processing agreement.
• Payments: at Google Play. Account emails and emails to support@katsjing.app: at Google Workspace. Google may also process this data outside the EU. That transfer relies on the EU-U.S. Data Privacy Framework (Google LLC is certified) and on the standard contractual clauses in Google's data processing agreement.

7. How long do we keep your data?

• Local data stays on your device as long as the app is installed. It disappears when you erase it in the app or uninstall the app. Even when you delete your account, it stays on your device by default, unless you choose to erase it too. An Android backup is kept according to Google's rules.
• We keep cloud data as long as your account exists. If you delete your account in the app (Parents Dashboard → Overview → Management functions → Cloud sync & family access → Delete account), we immediately erase your parent account and your family in the cloud with everything in it (child profiles, tasks, rewards, coins, savings goals, badges, avatars, paired devices and feedback), delete the anonymous identity of your family's child devices and have RevenueCat erase your family's customer data. You get a reference (KD-…) as proof.
• Copies in backups and log files at Supabase and RevenueCat, including the technical data from 2.2, do not disappear immediately. They are deleted according to the retention periods of those services.
• The anonymous RevenueCat ID of an installation that was never linked to a family stays at RevenueCat. It contains no name or email address; we cannot link it to you.
• Incorrectly entered pairing codes count for one day; after that we clean them up at a next pairing attempt. When you delete a task, reward, savings goal or paired device, we keep a technical reference (internal numbers only, no content), so that your other devices erase it too. After 30 days we clean it up at a next deletion. If you delete your account, all of this goes with it.
• No longer have the app? Email support@katsjing.app; we handle your request within 30 days. All details are on katsjing.app/account/delete.
• For every deletion we keep a proof without personal data: the reference, the time, the number of unlinked child devices and the result at RevenueCat. Because it does not lead to you or your family, we keep this proof without an end date.
• Your purchases stay with your Google account. A lifetime Premium purchase is not refunded when you delete your account. A running subscription does not stop by itself: cancel it yourself in the Google Play Store.
• We keep feedback as long as needed to handle your question and improve the app, and at the latest until you delete your account.
• We keep emails to support@katsjing.app as long as needed to handle your question.

8. Security

We take appropriate measures to protect your data. In the cloud, data is separated per family (row-level security), a child device uses an anonymous identity instead of an email address, access goes through secure authentication and the number of attempts to guess a pairing code is limited. On the device, the parent PIN is stored only as a hash. No service can guarantee absolute security, but we keep the risks small by collecting as little data as possible.

9. Your rights

Under the GDPR you have the right to:

• access your data;
• have incorrect data corrected;
• have your data deleted;
• restrict or object to the processing;
• data portability (the app creates a backup file with your data for this, under ‘Backup & Restore’ → ‘Export backup’);
• withdraw your consent, without this affecting earlier processing. You can stop cloud sync at any time, or delete your account.

The quickest way to delete your account, or only part of your data, is to do it yourself in the app; you can read how on katsjing.app/account/delete. For the other rights, or if you no longer have the app, email support@katsjing.app.

If you are not satisfied with how we handle your data, you can lodge a complaint with the Belgian supervisory authority:

Data Protection Authority (Gegevensbeschermingsautoriteit, GBA)
Drukpersstraat 35, 1000 Brussels
contact@apd-gba.be — www.dataprotectionauthority.be

10. Cookies and tracking

Katsjing uses no advertising or tracking cookies. The app uses your device's local storage only to work, including without internet. This website sets no cookies of its own and uses no analytics.

11. Changes to this privacy policy

We may update this policy from time to time. For important changes we update the effective date at the top and, where appropriate, let you know in the app.

12. Contact

Questions about this privacy policy or about your data? Email support@katsjing.app.