Privacy policy

Who we are

DoneThen is made by Chelodo B.V., a private limited company (besloten vennootschap) in the Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 94820996. In this policy, “DoneThen”, “we” and “us” mean Chelodo B.V. Our address is Lekpoort 9, Nieuw-Vennep, the Netherlands, and our phone number is +31 6 8629 9749.

We are the controller of the personal data described here, as meant in the EU General Data Protection Regulation (GDPR).

Email

contact@chelodo.com

What this policy covers

This policy covers the DoneThen app for iPhone and iPad in all its modes: a parent’s app, a child’s device, “Just me” for an adult on their own, and “Join in” for a parent’s own screen time. It also covers this website (donethen.com), the pages that open when someone without the app taps a DoneThen tag or link (donethen.app), and emails you send us.

What we collect, and why

Parents and other adults with an account

You sign in with Apple. There are no passwords.

• Your Apple user ID, a code Sign in with Apple gives us so we know it’s you when you sign in again.
• Your email address, as Apple shares it. Apple may give us a private relay address instead of your real one. We use it to answer support questions, to tell you about important changes, such as changes to our terms or this policy, and, in a US family, to ask for your consent before a device is paired for a child under 13 (see your consent). We send these emails from noreply@notifications.donethen.app, through Cloudflare. We’ll only send marketing emails if you’ve said yes to them, and you can say no again at any time. We never show your email address to anyone, including your family.
• Your App Store country, as Apple’s StoreKit tells the app, such as the United States. It tells us whether US children’s privacy law applies to your family, and so whether we ask for a parent’s consent by email (see your consent).
• The name you use in the family, like “Mom” or “Dad”, which your family sees in the app. The family’s name if you give one, and its time zone, so days start at midnight where you live and time windows work.
• Sign-in data: session codes that keep you signed in (we store them only in scrambled, hashed form), and the refresh token Sign in with Apple gives us (stored encrypted), which we use only to cut DoneThen’s link to your Apple ID when you delete your account.
• Notification tokens for your devices, so we can send you notifications, such as a chore waiting for your OK.
• Your subscription, as the App Store reports it: which plan, the transaction IDs, when it renews or ends, and any refund. Apple handles payment. We never see your card or bank details.
• A family PIN for children’s devices, if you set one, stored only in hashed form.
• A trial record: a one-way code made from your Apple user ID (a SHA-256 hash), so each Apple ID gets one free trial for families and one for Just me. It’s linked to nothing else. See how long we keep data.
• When DoneThen was last used: the date you and your family last used it, so we can delete a family nobody uses after 12 months. See how long we keep data.

Children, as entered by a parent

A parent adds each child and decides what DoneThen keeps about them:

• Profile: a first name or nickname, an avatar color, and if the parent wants, a birth year, which sets how the child’s app looks (playful for younger children, calmer for older ones) and, in a US family, whether a parent’s consent by email is needed before their device is paired (under 13 or without a birth year).
• Rules: whether chores earn screen time, the free minutes each day, the most minutes they can save, whether unused minutes carry over, how often a day they can ask for more time, and any streak bonus.
• Chores and challenges the child is given, and each time one is done: when, how (tapping a tag, scanning its QR code, opening its link, marked by a parent, or played in the app), whether it was approved, which parent decided, and a challenge’s score.
• Minutes: minutes earned, and minutes spent in the apps the parent limited, counted per minute. We don’t know which app a minute was spent in.
• Coins, the coin goal in the parent’s words (“a day at the zoo”), and payouts parents record. No money moves through DoneThen.
• Stamps a parent gives, with the parent’s own words, who gave them and when.
• Asks for more time and the answers, and the streak, which is worked out from the chores done.
• An animal PIN on a shared iPad: three animals the child picks, so siblings can tell their turns apart.
• The child’s devices: the device’s type, whether it can read NFC, when it was paired and last seen, its notification token, whether its sounds are on, how Screen Time was approved on it (with a child’s Apple Account in Family Sharing, or “Use it anyway”), where a law has Apple share it the age range of the Apple Account on it (such as “under 13”), and, for security, how many wrong parent codes were entered.
• A backup of the limited apps, as the coded tokens Apple’s picker gives the app. They don’t tell us which apps or websites they are. We keep the backup so a device can restore its selection.
• A parent’s consent, in a US family, for a child under 13 or without a birth year: when the consent email went out and when the parent agreed, confirmed or withdrew. See your consent.

Adults in Just me or Join in

When you limit your own screen time, DoneThen keeps the same kinds of records about you as it does for a child: your name in the app, your habits, minutes, breaks, streak and your week, and your phone as a device. Your own habits involve no approvals or stamps. In a family, the other parents don’t see your own minutes, habits or breaks.

If you turn on earned breaks, where you win a short game to earn a break:

• Your rules also hold which games earn a break, the minutes a win adds, and how many earned breaks you allow a day.
• Each earned break is recorded on our server like your other breaks: when it was earned, the minutes it added, and which game earned it, shown in your history as “Earned break · Chess puzzle”. That’s all our server learns about a game.
• The walk counts your steps on your iPhone, with Motion & Fitness, which you allow once. DoneThen reads the count only during the walk, to see when you reach 300 steps. Your steps are never sent to us or anyone else, and DoneThen doesn’t store them.
• The chess puzzle keeps your chess level and the puzzles you’ve played on your iPhone, so the next puzzles suit you and don’t come back soon. They’re never sent.
• Breathing keeps nothing beyond the earned break.

Counts of how far families get

To see where setting up DoneThen gets hard, our server notes the first time each family reaches a step, such as adding a child, pairing a device, the first chore done or subscribing, and the days on which a chore or habit was done. These notes hold only the family’s random ID, the step, and the date and time: no names, email addresses, chore names or device details. We look at them only as totals, such as how many new families paired a device in their first week. No third party is involved.

Support emails

When you write to us, we receive your email address, your message and anything you attach, and use them to help you. Our email runs on Microsoft 365 (see who else handles data).

IP addresses

When the app connects to our servers, they see the device’s IP address, as every server does. We use it only for a moment, to limit repeated attempts such as guessing a pairing code, and we don’t store it. Cloudflare processes it to deliver the request and protect the service.

Data on your devices

The app also keeps some data on your own devices, such as a child’s minutes and the selection of limited apps, so the limits keep working without internet. It’s removed when you delete the app or leave DoneThen on that device. In Just me and Join in, your chess level and the puzzles you’ve played stay on your iPhone until you delete your account, stop earning on that iPhone, or delete the app.

What we don’t collect

• Which apps or websites are limited or used. Apple’s Screen Time gives DoneThen only coded tokens and minute counts. Apple keeps usage details on the device.
• Location, contacts, health or fitness data, advertising IDs, browsing history, or anything from other apps. The walk that earns a break counts steps on your iPhone, and they never leave it.
• Photos, videos or recordings. DoneThen never asks for a photo. The camera only scans a tag’s QR code, and nothing it sees is kept or sent. A chore that needs checking goes to a parent for their OK instead.
• Payment details. Apple handles payment.

We use Screen Time data only to run the limits and to show your family its own minutes. Cloudflare stores the minute counts for us. We never sell this data or share it with anyone else.

There are no ads in DoneThen and no third-party analytics or tracking tools, in the app or on this website. We don’t sell personal data, don’t share it for advertising, and don’t build profiles of anyone. Nothing in DoneThen is public, and there’s no messaging between users.

Legal bases

Under the GDPR we need a legal reason for each use of personal data. Ours are:

• Our contract with you (Article 6(1)(b)): your account, your family, chores, rewards, limits, notifications, keeping your devices in sync, your subscription, and answering your support questions.
• Legitimate interests (Article 6(1)(f)): the data a parent enters about their children and their children’s devices, which we process so the parent can use the family service they chose; keeping DoneThen secure and preventing abuse, such as limiting repeated attempts; one free trial per Apple ID; in US families, asking a parent’s consent by email before a device is paired for a child under 13, and keeping proof of it, as US children’s privacy law requires, which needs each parent’s App Store country; counting how far families get, to improve setting up; and telling you about important changes. We’ve weighed these against your interests and your children’s: we collect little, collect no photos, show nothing outside the family, and never use data for ads or profiles.
• Consent (Article 6(1)(a)): only for marketing emails, if we ever send them, and only after you’ve said yes. You can withdraw consent at any time, without affecting what came before.
• Legal obligations (Article 6(1)(c)): when the law requires us to keep or hand over data.

Children’s data

DoneThen is for families. A parent provides their children’s data and stays in charge of it. We don’t ask children for consent, and nothing we do relies on a child’s consent. We collect only what DoneThen needs to work for your family, and the most private settings are the only settings.

• A parent creates and manages each child’s profile and sets up each child’s device with a code from the parent’s phone. Children don’t create accounts, don’t sign in, and never give an email address.
• Parents can see and change their children’s data in the app at any time, and delete a child, which deletes the child’s history and devices.
• Nothing a child does is shown outside their family. Children can’t post, message or share anything with other users.
• A parent can choose to share one of their child’s stamps as a picture, for example with grandparents, through the iPhone’s share sheet. Where it goes from there is up to the parent and the app they share it with.
• The child’s app always shows their minutes, and warns them five minutes before they run out, so they can see that time is counted.
• There are no ads, no purchases and no links out of DoneThen in a child’s app, and nothing ranks siblings against each other.

Parents’ accounts are for adults only. If you believe a child has created an account themselves, write to us and we’ll delete it.

Who else handles data

We use these companies to run DoneThen. Nobody else receives your family’s data, and we never sell it.

Cloudflare

Runs our servers and database (Cloudflare Workers, Durable Objects, D1 and Queues), and hosts this website. Cloudflare processes data on our behalf, under its data processing agreement with us. Your family’s stored data is kept in Cloudflare’s European Union jurisdiction.

Apple

Verifies your sign-in with Sign in with Apple, delivers notifications through the Apple Push Notification service, and handles App Store payments and subscription notices. A notification’s text, which can include a child’s name and a chore (“Time for Brush teeth, Sam!”), passes through Apple’s service on its way to the device. For sign-in and payments, Apple acts under its own privacy policy. Apple’s Screen Time, which runs the limits on each device, keeps its usage data on the device.

Microsoft

Runs our email, Microsoft 365, which we get through GoDaddy. When you write to contact@chelodo.com, your email address, your message and anything you attach are stored on Microsoft’s servers, and our replies are sent through them. Microsoft processes them on our behalf, under its data protection terms. Nothing from the app goes to Microsoft.

We may also share data when the law requires it, for example with a court or the police, and only as much as required. If DoneThen were ever sold or merged, your data would move to the new owner under this policy, and we’d tell you before it happened.

Where data is stored

Your family’s data is stored in the European Union. Cloudflare handles each request at a data center near the person using the app, which can be outside the EU while the request is on its way. Cloudflare, Inc., Apple Inc. and Microsoft Corporation are US companies, so some data, such as notifications, sign-in and support emails, can reach the United States.

Where data leaves the European Economic Area, it stays protected: each of these companies relies on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, or on the Commission’s standard contractual clauses, with the matching safeguards for data from the UK and Switzerland. How each one does it, with a copy of the clauses, is in its own documents: Cloudflare’s data processing addendum, Apple’s privacy policy and Microsoft’s data protection addendum.

How long we keep data

To delete your account, open DoneThen and go to Settings, Delete account. If you’re the family’s last parent, this deletes your family’s data and devices and ends DoneThen’s link to your Apple ID. If another parent stays, the family stays with them, and only your own data goes. Deleting your account doesn’t cancel an App Store subscription: cancel that in your Apple Account settings.

Your rights

Under the GDPR you have the right to:

• See the personal data we have about you and your children, and get a copy (access).
• Correct it if it’s wrong (rectification). Most of it you can change in the app yourself.
• Delete it (erasure). You can delete a child or your whole account in the app.
• Limit how we use it while a question is sorted out (restriction).
• Take it with you in a common, machine-readable format (portability).
• Object to our use of it based on legitimate interests.
• Withdraw consent you gave, at any time.

To get a copy of your data, open DoneThen and go to Settings, Get a copy of your data: it’s a file with your account and your family’s data, which you can save or send on. A few technical records aren’t in it, such as security codes, which we keep only in scrambled form, and the setup counts; for those, and anything else we keep about you, write to us. To use any other right, write to contact@chelodo.com from the email address your account uses, or tell us how to recognize your account. We’ll answer within one month. It’s free.

We don’t make decisions about anyone by automated means that have legal or similarly significant effects.

If you’re unhappy with how we handle your data, please tell us first. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority where you live.

For parents in the US

This is our notice under the Children’s Online Privacy Protection Act (COPPA) and the FTC’s COPPA Rule. It explains what DoneThen collects from a child’s device, how we use it, how long we keep it, and your rights.

Who runs DoneThen

Chelodo B.V., Lekpoort 9, Nieuw-Vennep, the Netherlands. Phone +31 6 8629 9749. Email contact@chelodo.com. No other company collects or keeps children’s information through DoneThen, and we answer all questions about it.

What a parent tells us

You add each child on your own phone: a first name or nickname, an avatar color and, if you want, a birth year. This comes from you, not from your child.

What we collect from children

Nothing is collected from a child’s device until a parent has created the family, added the child and paired the device with a one-time code from the parent’s own phone. For a child under 13, or without a birth year, a parent first gives consent by email (see “Your consent” below). After that, your child’s device sends us:

• a random code we create when you pair the device, and the device’s notification token from Apple;
• the device’s type (iPhone or iPad), whether it can read NFC tags, its app language, and when it was last used;
• each chore or challenge your child does: which one, how (tag, QR code, link or in the app), when, and a challenge’s score;
• the minutes spent in the apps you limited, counted per minute, without which app;
• asks for more time, picked from fixed amounts;
• the three animals your child picks as their PIN on a shared iPad;
• how Screen Time was approved on the device, and a backup of the apps you chose to limit, as coded tokens from Apple that don’t tell us which apps they are;
• where a law has Apple share it, the age range of the Apple Account on the device, such as “under 13”, which means we ask for your consent first.

Our server also sees the device’s IP address with each request. We use it only to deliver the request and to limit repeated attempts, such as guessing a pairing code, and we don’t store it. Children can’t type anything in DoneThen, send messages, or make any personal information public. DoneThen never takes or collects photos or videos of your child, never records their voice, and never collects their location or contacts. The camera only scans a tag’s QR code, and nothing it sees is kept or sent.

How we use it

Only to run DoneThen for your family: to credit chores and challenges, keep the minutes and limits right, send the notifications that follow what you and your child do, show you and your child what happened, keep DoneThen working and secure, and count, as totals, how far families get through setup. We never use it for advertising, never build a profile of your child, and never contact your child for any other reason.

Identifiers on your child’s device

We collect three identifiers from a child’s device: the random code made when you pair it, its notification token, and its IP address. We use them only for these internal operations: recognizing the paired device and keeping it signed in; delivering requests and notifications; showing the device its own child’s chores, minutes and look; keeping DoneThen working and fixing problems; and limiting repeated attempts and abuse. To make sure they’re never used to contact your child for any other purpose, for behavioral advertising, or to build a profile: DoneThen has no ads, no analytics or tracking tools, and no third-party code in the app; the codes are random and work only with DoneThen; they’re kept in our own systems at Cloudflare in the EU, and the notification token also at Apple to deliver notifications; we never sell or share them; only the people at Chelodo B.V. who run DoneThen can reach them; and our written security program, which we review every year, covers them.

Who we share it with

We don’t disclose children’s information to third parties, sell it or make it public. Two companies handle it for us, under contract and only to run DoneThen: Cloudflare, which hosts our servers and stores the data in the European Union, and Apple, which delivers notifications. We share information with others only when the law requires it, for example with a court or the police.

Your consent

In a family where a parent uses the US App Store (or before the app has told us any parent’s App Store country), before a device can be paired for a child under 13, or a child without a birth year, we ask for your verifiable consent by email, the FTC’s “email plus” method:

• In the app, you ask us to send the email. It goes to your account’s email address and lists what the device sends, how we use it and who else gets it, with a link to agree. Nothing is collected from the device until you agree. If you don’t, nothing changes, and the request ends after 7 days.
• A day after you agree, a second email confirms it and repeats the notice, with a link to withdraw.
• You can withdraw your consent at any time: on your child’s page in the app, with the link in the second email, or by writing to contact@chelodo.com. We then unpair your child’s devices at once and collect nothing more from them. Your child’s history stays until you delete it.
• We keep proof of your consent, without names, while it’s in force and 5 years after it ends.

Your consent covers what’s listed above. If we ever want to collect more from children under 13, we’ll send you a new notice and ask again. Nothing changes unless you agree.

How long we keep it

Our data retention policy for what a child’s device sends:

• Chores and challenges done, minutes, asks for more time and the streak: kept to credit rewards, keep the balance right and show your family its history. Deleted when you delete the child or your account, when nothing has happened for your child in DoneThen for 12 months, and when nobody in your family has used DoneThen for 12 months. We tell you 30 days before.
• The device’s record and its notification token: kept while the device is paired, to recognize and reach it. Deleted when you unpair the device or delete the child. A token Apple reports as no longer working is deleted when we learn it.
• Minutes spent per device per day: kept 31 days, so a faulty device can’t count more minutes than a day holds.
• The backup of the limited apps: kept so a device can restore it, until you delete the child.
• The animal PIN: until you reset it or delete the child.
• IP addresses: not stored. A counter at Cloudflare that limits repeated attempts uses the address for one minute.
• Setup counts: the family’s random ID with the setup steps it reached and the days a chore was done. After the family is deleted, we don’t link them to anyone.
• Proof of your consent: dates, the notice’s version and a one-way code of the email address, without names: while the consent is in force and 5 years after it ends, to show we asked. A consent email nobody answered: deleted after 7 days.
• Copies in Cloudflare’s recovery systems: gone within 30 days of a deletion.

None of it is kept indefinitely.

Your rights

You can review your child’s information in the app at any time, and get a copy in Settings, Get a copy of your data. You can delete it by deleting the child or your account in the app, and stop further collection by unpairing your child’s device or deleting the child. You can also ask us to do any of this by writing to contact@chelodo.com from your account’s email address. We answer within one month, for free.

For families in the UK

You have the same rights under the UK GDPR as listed in your rights, and you can complain to the Information Commission (until 30 September 2026 the Information Commissioner’s Office, ICO). If you complain to us first, we’ll confirm we have your complaint within 30 days and tell you what we do about it.

We follow the ICO’s Age Appropriate Design Code (the Children’s Code) where it applies: the most private settings are the only settings, there’s no location data, no profiling and no nudging children to share more, a child’s app shows plainly that their minutes are counted, and this policy explains it for children too.

For families in Canada

You have the rights in your rights under Canada’s privacy laws too. You can complain to the Office of the Privacy Commissioner of Canada, or in Québec to the Commission d’accès à l’information.

Under Québec’s privacy law, the person in charge of protecting personal information at Chelodo B.V. is its director, whom you can reach at contact@chelodo.com. Before your family’s data goes to our servers outside Québec, we assessed how it’s protected there: see where data is stored and security.

For families in Switzerland

You have the rights in your rights under the Swiss Federal Act on Data Protection, and you can complain to the Federal Data Protection and Information Commissioner. Your family’s data is stored in the European Union, which Switzerland recognizes as protecting it adequately, and data that reaches the United States is protected as described in where data is stored.

Security

• Everything travels encrypted (HTTPS).
• Sign-in codes, device codes, pairing and invite codes are stored only in hashed form. Apple’s refresh token is stored encrypted.
• Repeated attempts, such as guessing a pairing code or a parent PIN, are limited.
• Only the people at Chelodo B.V. who run DoneThen can reach the systems that hold your data.

If a data breach puts your rights at risk, we’ll tell you and the authorities as the law requires.

This website

This website uses no cookies, no analytics and no tracking, and it loads nothing from other companies: no fonts, scripts or videos. Cloudflare, which hosts it, processes your IP address and technical request data to deliver the pages and protect the site from abuse.

Changes to this policy

If we change this policy, we’ll update the date at the top. If a change matters for you, such as a new kind of data or a new company handling it, we’ll tell you by email or in the app before it takes effect.

Contact

Questions about privacy, or a request about your data: write to contact@chelodo.com.