Privacy Policy
Reward Study is developed and published by Nikola Sretenovic, referred to throughout this policy as the developer.
The app operates without a back end. No server under the developer's control receives, processes or stores a family's information. This policy sets out what that means in practice, and it is straightforward about the 2 narrow places where information does reach the developer.
Summary
Nothing entered into the app reaches the developer. Household names, children's names and age bands, tasks, rewards, credit balances and the full ledger stay on the user's own devices and in the user's own private iCloud storage, which the developer can neither access nor decrypt.
There are 2 things that do reach the developer, and both are ordinary. An email to support arrives with the sender's address and whatever is written in it. A visit to this website causes the server to write a log entry containing the visitor's IP address. Both are covered below.
The app and this website contain no advertising, no analytics and no third-party tracking. No information about a user is sold to anybody.
What the app stores, and where
Reward Study stores the information a parent enters. That covers the household name, each child's name and age band, the tasks and rewards defined by the parent, the credit balances, the optional credit-to-currency rate, and the full ledger of bonuses, deductions and approvals.
All of it is written to the user's device and synchronised through Apple's CloudKit private database inside the user's own iCloud account, governed by Apple's terms and Apple's privacy policy. The developer holds no access to that private database, no encryption key for it and no ability to read its contents. Where a household is shared, the data reaches only the specific people the parent invites, a co-parent or a child, through Apple's CloudKit sharing, and nobody else.
The developer is not the controller of this information. The parent decides what goes into the app, the data is held in the parent's own Apple account, and the developer has no route to it. A parent keeping a task list for their own family is carrying out a personal or household activity, which sits outside the scope of the GDPR.
What the developer receives
From the app itself, nothing. There is no account system, no email address is requested and no usage data is transmitted. The developer has no way to know how many tasks a family created, how often the app is opened, or whether it is used at all.
The 2 exceptions are support email and this website's server logs, both set out below.
This website and its server logs
The reward.study website runs on shared hosting provided by Namecheap, on a server located in the United States. Like every web server, it writes an access log entry for each request. That entry records the visitor's IP address, the date and time, the address requested, the referring page and the browser's user agent string. An IP address counts as personal data, so this is set out here rather than glossed over.
The hosting platform also produces visitor statistics from those logs using AWStats. That is a standard component of the hosting service rather than something added to this site, and it processes nothing beyond the log entries already described.
These logs exist so that the site can be kept running and kept secure. They are not used to build a profile of anyone, they are not combined with any other source, and they are not passed to anybody beyond the hosting provider that generates them. The lawful basis is the developer's legitimate interest in operating and securing the site. Archived logs are deleted after 30 days.
Because the server is in the United States, keeping these logs involves a transfer of that data outside the European Economic Area. Namecheap's Data Processing Addendum applies the European Commission's Standard Contractual Clauses to such transfers.
Beyond that server log, the site does nothing. It sets no cookies, loads no third-party scripts and requests no resources from any other domain. There is no analytics service embedded in the pages, no tracking pixel and no advertising network. No consent banner appears because there is nothing further to consent to.
Analytics, advertising and tracking in the app
The app contains no analytics framework, no advertising framework and no tracking technology. It does not access the Advertising Identifier and takes no part in cross-app tracking. No information about a user is shared with data brokers, advertisers or any other third party.
No personal information is sold. None is shared for cross-context behavioural advertising. No arrangement exists under which either of those could begin without this page being rewritten first.
Children
Reward Study is bought, installed and configured by a parent or guardian, and children use it under that parent's supervision. The child-facing part of the app runs on the parent's device in kid mode, or on a device the parent has invited to the household.
No personal information about any child reaches the developer. There is no route through which a child could send the developer anything. Names and age bands entered for a child are stored in the family's own iCloud and are never transmitted onward.
The app asks for an age band rather than a date of birth, because a band is all that is needed to select age-appropriate tasks.
The app contains no messaging, no chat, no social features, no user-generated content that leaves the household, no location tracking and no advertising.
For families in the United States, the Children's Online Privacy Protection Act governs personal information that a child submits to the operator of an online service. Nothing in Reward Study is submitted to the developer. The developer collects no personal information from children, discloses none to any third party because none is received, and retains none. There is accordingly nothing held by the developer about a child that could be requested or erased. The data held in the family's own iCloud remains under the parent's direct control and can be deleted at any time from within the app.
Where an app store provides an age category or a parental consent signal at the time of download, the app uses that signal to apply age-appropriate settings on the device. The signal is neither transmitted to nor stored by the developer.
Apple TV
Reward Study includes an Apple TV app. Signed in to the same Apple Account, it reads the household information already held in the user's iCloud container and displays it on the television. No additional data is collected for this feature and nothing is transmitted to the developer.
Credit value in currency
Parents may optionally set a conversion rate so that a child sees what their credits are worth in a chosen currency. The rate and the currency are settings stored alongside the rest of the household data in the user's own iCloud. Reward Study handles no money, processes no payments between family members and connects to no bank or payment provider. The figure shown is a display calculation and nothing more.
Purchases
Reward Study Pro and the Second Household add-on are one-time in-app purchases processed entirely by Apple through the App Store and StoreKit. Payment details go to Apple and never to the developer. Apple provides aggregated sales reports showing units sold by territory, and those reports do not identify individual purchasers.
Refunds are handled by Apple at reportaproblem.apple.com.
AI word problems
On devices that support Apple Intelligence, the app can rewrite generated math problems as short themed stories. That rewriting runs entirely on the device using Apple's on-device model, so no problem text, no child's name and no other content leaves the device at all. Nothing reaches the developer or any server under the developer's control, and nothing is stored outside the family's own household data. Should a future version ever send any of it off the device, this page will be updated before that version ships.
A parent reviews every generated set before a child sees it.
Support correspondence
An email sent to support@reward.study arrives with the sender's email address and the contents of the message. It is used to answer that message and for no other purpose. The address is not added to any mailing list and is not passed to anyone. The lawful basis is the developer's legitimate interest in helping people who ask for help.
Nobody is obliged to write, and nothing in the app depends on doing so.
Please do not include a child's personal details in a support email. They are not needed in order to help you.
Security
There is very little on the developer's side to secure, because almost nothing exists there. The support mailbox is protected by a strong unique password and 2-factor authentication. This website is served over HTTPS and runs no code that accepts input from a visitor.
Household data is protected by Apple's security for iCloud and by the passcode, Face ID or Touch ID on the user's own devices. Keeping those current matters more here than anything that could be done at the developer's end.
If something goes wrong
Should a breach ever affect personal data the developer holds, meaning support correspondence or website server logs, the developer will notify the relevant supervisory authority within 72 hours where the law requires it, and will tell the people affected directly where the risk to them is high.
A breach affecting household data would be a breach of the user's own iCloud account rather than of anything held by the developer, and Apple would be the party able to act on it.
Automated decision making
There is none. No decision producing legal effects or similarly significant effects is made about any user by automated means, and no profiling takes place.
Your rights
Under the GDPR and comparable legislation you hold rights of access, correction, deletion, restriction, objection and portability over personal data a controller holds about you.
Those rights apply to the personal data the developer holds, which is support correspondence and website server logs, and a request sent to support@reward.study will be acted on. In most cases the accurate answer will be that nothing about you is held at all.
The data inside the app is under your direct control. Any household, child, task, reward or ledger entry can be edited or deleted within the app. Reward Study Pro includes a CSV export of the full ledger. Removing the app from every device in the household deletes the local copies, and the iCloud copy is managed through your own iCloud settings.
You also have the right to lodge a complaint with the data protection supervisory authority in the country where you live.
International transfers
No household data is held by the developer, so no transfer of it takes place. The physical location of iCloud data is determined by Apple and is described in Apple's own privacy documentation. Website server logs sit on a server in the United States, covered above.
Changes to this policy
Should a future version of the app change what it does with data, this page is updated before that version ships, and the version number and effective date at the top are revised. Material changes are also noted in the App Store release notes for the version that introduces them.
Controller and contact
Reward Study is developed and published by Nikola Sretenovic, an individual developer, who is the data controller for support correspondence and for the website server logs described above.
The developer is not the controller of the household data created in the app, holding no access to it, no key for it and no ability to act on it. That data sits in the user's own Apple account, under the user's own control.