Kindbee: Reward Behavior Chart (“Kindbee”, “the App”, “we”, “us”, “our”) is an iOS application developed by Catenus. It is a behavior and reward chart for families: grown-ups give stars from their own phones, and a child sees their chart on their own iPhone or iPad, or on a family board, such as a shared kitchen iPad. This Privacy Policy explains what information we collect, how we use it, and your choices.
You can use the App on one phone without an account. Sharing with other grown-ups and setting up a child’s device are optional.
Your family’s charts. Each child’s name (a first name or a nickname is enough), the face and color you pick, the behaviors and rewards you set up, the stars you give with their date, time and any note, the rewards given, and the days a child spends at another home. The App does not ask for a child’s birthday, gender or photo.
Your account, if you share. Sharing with other grown-ups uses Sign in with Apple, which gives us an identifier for your Apple ID and an email address (a private relay address, if you hide yours). We also keep the name your family sees for you, such as “Mom”, and your role. We use your email address only to send the consent emails in section 5, never for marketing.
The waitlist. If you join the waitlist at catenus.app/kindbee, we keep the email address you enter in Kindbee’s Firebase database in the United States, only to tell you when Kindbee launches. We delete it after that email, or sooner if you ask at support@catenus.app.
App usage analytics. On grown-ups’ phones, Firebase Analytics collects usage events, such as finishing set-up or starting a subscription. Analytics never include a child’s name or what is in a chart.
Crash reports. On grown-ups’ phones, Firebase Crashlytics collects technical information when the App crashes: the device model, the iOS version and where the crash happened.
Purchase information. Subscriptions are processed by Apple and managed by RevenueCat, which tells the App whether your family’s subscription is active. We never see your payment details.
Notifications. If you allow them, we store your phone’s push token to send you notices about stars, a child’s asks and reward timers.
Analytics, crash reports and notifications are not used on a child’s device or the family board.
| Information | Purpose |
|---|---|
| Children’s names, faces and charts | Showing the charts on your family’s phones and devices |
| Apple sign-in and email address | Sharing with your family; sending consent emails |
| The anonymous sign-in of a child’s device or the family board | Signing the device in, checking it runs the genuine App, and showing it your family’s charts; with your consent, recording which device sent each ask |
| A child’s asks | Showing them to the parents who answer them, and to the child |
| Analytics events | Understanding how the App is used, to improve it |
| Crash data | Finding and fixing technical issues |
| Subscription status | Unlocking the App for the whole family |
We do not sell, rent, or share your personal information, or your children’s, with third parties for their own marketing purposes.
On one phone (default). Your charts are stored on your phone and are never sent to us. Back up to a file, in Settings, makes an encrypted backup file locked with a password you choose. We never see the password or the file.
Family sharing (optional). When you share, your family’s charts are stored in Google Cloud Firestore, part of Firebase, so every grown-up’s phone, each child’s device and the family board show the same stars. Rules on our server decide who sees what: parents see and change every chart; caregivers you invite see the charts and give stars; a child’s device and the family board show only the charts they were set up for.
Kindbee is used by parents and other grown-ups. A child uses it only on a device a parent set up for the family: the child’s own iPhone or iPad, or a family board. There the child sees their chart and, with a parent’s consent, can send asks.
What we collect for a child. Grown-ups enter the child’s name, face and chart (section 2.1). A child’s device and the family board sign in with an anonymous identifier, and Firebase’s sign-in logs record the IP address and user agent they connect from. With a parent’s consent, the device also sends the asks the child taps (an “I did it”, a pick between two rewards, or a wish for a reward you added), each with the time. A child’s device sends no typed words, photos or voice recordings, sends no analytics or crash reports, and makes no purchases.
Before consent. A device set up for a child works without consent: it shows the child’s chart and lets the child place stickers, and sends nothing the child enters. We use its anonymous sign-in only to sign the device in, check that it runs the genuine App (Firebase App Check), and show it your family’s charts, which COPPA allows without consent as support for internal operations (16 CFR 312.5(c)(7)). To keep it that way, a child’s device and the family board carry no analytics, crash reporting, notifications or advertising identifier, and rules on our server let the identifier read only your family’s charts.
Consent first. Before a child can ask, wish or pick, from their own device or the family board, a parent or legal guardian confirms by email: when you first tap Let [your child’s name] ask, the App sends a notice to the email address of your Apple ID, and you give your consent from that email. We then email you a confirmation with a link that withdraws it. One consent covers every device your family sets up for that child: their own iPhone or iPad and the family board.
Who sees a child’s asks. Only the parents in your family, who answer them, and the child on their own device. Caregivers never see them, and nothing a child sends is made public.
Stop and delete. Parents see a child’s asks in the App. At any time, you can:
You can also write to support@catenus.app to review or delete your child’s information.
Retention. We keep a child’s asks only so the parents can answer them and see what was asked: they are deleted automatically 30 days after they are answered, or after 30 days if no one answers them. We keep a device’s sign-in only while the device is in use: it is deleted after the device is removed, or after it has not connected for 90 days. Firebase keeps the IP address in its sign-in logs for a few weeks, and removes a deleted sign-in, with its user agent, from its systems and backups within 180 days. Our server’s request logs keep the IP address and user agent for 30 days.
| Service | Purpose | Privacy Policy |
|---|---|---|
| Firebase (Google) | Sign-in and app integrity checks (App Check); storing and syncing the family’s charts and a child’s asks; notifications | firebase.google.com |
| Firebase Analytics | Usage analytics, on grown-ups’ phones only | firebase.google.com |
| Firebase Crashlytics | Crash reporting, on grown-ups’ phones only | firebase.google.com |
| RevenueCat | Subscription management | revenuecat.com |
| Apple | Sign in with Apple, App Attest, App Store payments, notification delivery | apple.com |
On one phone: until you delete it in the App or delete the App.
Shared charts: while your family exists. Deleting a child removes everything of that child’s from our servers and every device, and the family’s owner can delete the family for everyone.
Your account: Delete my account, in Settings, deletes your account and revokes the App’s Sign in with Apple access; if you own the family, you first give it to another parent or delete it. Firebase removes deleted account data from its backups within 180 days. You can also ask for deletion at support@catenus.app.
Your subscription: deleting your account or the App does not cancel it. Cancel it in iOS Settings: tap your name, then Subscriptions, then Kindbee.
Analytics data: retained per Google Analytics’ standard retention (up to 14 months). Crash reports: 90 days, per Firebase Crashlytics’ standard retention.
Depending on where you live, you may have the right to access, correct or delete the personal information we hold about you, and to withdraw consent, including a parent’s consent for a child’s asks. Most of this you can do in the App; for anything else, write to support@catenus.app.
California residents (CCPA): We do not sell or share personal information. You have the right to know what personal information we collect and the right to deletion. Write to support@catenus.app for requests.
No method of transmission over the Internet is 100% secure. We cannot guarantee absolute security, but we use commercially reasonable protections.
We may update this Privacy Policy from time to time. We will show significant changes by updating the “Last Updated” date at the top of this page. Anything new that a child’s device sends, beyond what it needs to sign in and show your family’s charts, or a new use of what it sends, applies only after a parent consents again.