Last updated: April 23, 2026

Privacy Policy

Maddy is built by Reck the Fort LLC. This Privacy Policy explains how we collect, use, and protect information when you use the Maddy app and mymaddy.app. We take privacy seriously, especially because our users include people with disabilities and their families.

Maddy is not directed to children under 13. All accounts are created and held by adults (18+). Children and young adults may use the app as subjects within a parent or guardian's account.

Information we collect

We collect only what we need to run the service:

Account information: email address and password (stored securely via Supabase Auth)
Profile information: name, emoji, pronouns, and nickname for each subject in your circle
App usage data: tasks, completions, daily check-in states, earnings, payouts, and streaks
Photos and media: photos uploaded as task proof; voice notes sent between caregivers and subjects
Push notification tokens: used to send task approval notifications
Subscription status: managed via RevenueCat
Device information: operating system version and device type, collected automatically by Expo and Supabase

We do not collect precise location data, contacts, browsing history, or any information beyond what is listed above.

How we use your information

To provide and operate the service including tasks, rewards, caregiver approval flows, and daily resets
To send push notifications when caregiver approval is requested or granted
To manage your subscription via RevenueCat and Apple
To respond to support requests
To improve the service over time

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described below.

Third parties we work with

Supabase: database, authentication, and file storage
Apple: payment processing, push notifications, and device-level services
RevenueCat: subscription management and entitlement tracking
Expo: app build infrastructure and over-the-air updates

Photos and media

Photos uploaded as task proof are stored in a private Supabase Storage bucket and are only accessible to members of your circle. We do not use photos or voice notes for any other purpose.

Data retention

Your data is retained until you delete your account. When you delete your account, we delete your profile, all tasks, earnings, photos, voice notes, and circle data. Account deletion is permanent and cannot be undone.

Your rights

You have the right to access, correct, and delete your data at any time. You can delete your account directly in the app under Settings. For other requests, contact us at support@mymaddy.app.

If you are located in California, you have additional rights under the CCPA. If you are in the European Economic Area, you have additional rights under the GDPR.

Security

We use industry-standard security practices including encrypted data transmission (HTTPS), Supabase Row Level Security so each circle can only access its own data, and secure credential storage on-device via Expo SecureStore.

Children's privacy

Maddy is not directed to children under 13. Accounts are held by adults. Young adults and minors may use the app as subjects within a parent or guardian's account. If you believe we have inadvertently collected information from a child under 13, contact us at support@mymaddy.app and we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification.

Contact

Reck the Fort LLC
support@mymaddy.app
mymaddy.app