Last Updated: August 27, 2026
Welcome to Kids Task Master ("we," "our," or "us"), operated by Gold Coast Info Tech ABN 87 681 238 139. We are committed to protecting your privacy and the privacy of your family. This Privacy Policy explains how we collect, use, store, and protect your information when you use our task management application at app.kidstaskmaster.com and our marketing website at www.kidstaskmaster.com.
Scope: This Privacy Policy, together with our Terms of Service and any other legal notices we publish, applies to the entire Kids Task Master service across all of our domains and subdomains, including but not limited to www.kidstaskmaster.com, app.kidstaskmaster.com, and any other subdomain of kidstaskmaster.com (that is, *.kidstaskmaster.com). References to "the service," "our site," "our app," or "our websites" in this policy cover all of these domains and subdomains.
This policy applies to users worldwide, including those in the European Economic Area (EEA), United Kingdom (UK), and Australia. Where specific regulations apply (such as the GDPR or Australian Privacy Act), we have noted the relevant provisions.
The data controller responsible for your personal data is:
Given the scale of our operations, we are not required to appoint a Data Protection Officer (DPO) under Article 37 of the GDPR. However, you may contact us at the above email for any data protection enquiries.
When you create an account, we collect:
When you use our app, we store:
If you subscribe to Premium, payment is processed by Stripe. We do not store your credit card number or full payment details. We receive only: subscription status, customer ID, and subscription expiry date from Stripe.
Under the General Data Protection Regulation (GDPR), we process your data on the following legal bases:
| Processing Activity | Legal Basis |
|---|---|
| Account creation and authentication | Contract performance (Art. 6(1)(b)) |
| Storing and syncing task data | Contract performance (Art. 6(1)(b)) |
| Processing subscription payments | Contract performance (Art. 6(1)(b)) |
| Sending service-critical emails (security alerts, account changes) | Contract performance (Art. 6(1)(b)) |
| Sending welcome emails | Legitimate interest (Art. 6(1)(f)) |
| Fraud prevention and security monitoring | Legitimate interest (Art. 6(1)(f)) |
| Storing preferences in browser local storage | Strictly necessary (ePrivacy Directive exemption) |
Our websites and app use no advertising, tracking, or analytics cookies. We do not use Google Analytics, Facebook Pixel, or any third-party tracking.
The only cookies that may be set are:
The app uses browser localStorage to provide its core functionality. Under the ePrivacy Directive, localStorage is treated the same as cookies. All items below are strictly necessary for the service you have explicitly requested, and therefore exempt from consent requirements.
| Data Stored | Purpose | Category |
|---|---|---|
| Authentication tokens | Keep you signed in (via AWS Cognito) | Strictly necessary |
| Subscription status | Determine your plan (free/trial/premium) | Strictly necessary |
| Active child ID | Remember which child profile is selected | Strictly necessary |
| Tasks, rewards, points history | Core app data (for non-cloud users) | Strictly necessary |
| Parent PIN (hashed) | Protect parent-only settings | Strictly necessary |
| Storage mode preference | Remember local vs cloud choice | Strictly necessary |
| Color theme preference | Display the app in your chosen theme | Functional preference |
| Screensaver and display settings | Maintain your display configuration | Functional preference |
| Trial start date | Track 7-day trial period | Strictly necessary |
No data stored in localStorage is shared with third parties or used for advertising. All localStorage data remains on your device unless you enable cloud sync.
If you use the app without creating an account, all data is stored locally in your browser:
When you create an account and enable cloud sync, your data is stored in AWS DynamoDB:
You control your storage preference. You can switch between local and cloud storage at any time in the app settings.
We use your information only to:
We do not:
We implement appropriate technical and organisational measures to protect your data:
Kids Task Master accounts are intended solely for adults. You must be at least 18 years of age (or the age of majority in your jurisdiction) to create an account, subscribe, or otherwise use the service as an account holder.
Although the child is never our user, some of the information a parent enters (such as a child's first name) is personal information about a child. We take that seriously and keep it to a minimum:
We use the following trusted sub-processors:
| Service | Purpose | Data Location |
|---|---|---|
| AWS (Amazon Web Services) | Hosting, database, authentication, email | Sydney, Australia (ap-southeast-2) |
| Stripe | Payment processing | USA (with EU SCCs) |
| Google (OAuth only) | Optional social sign-in | USA (with EU SCCs) |
These services operate under their own privacy policies and maintain appropriate data protection safeguards, including Standard Contractual Clauses (SCCs) for international transfers where applicable.
Your data is primarily stored in AWS ap-southeast-2 (Sydney, Australia). Australia is recognised by the European Commission as providing an adequate level of data protection (Adequacy Decision 2001/497/EC).
Where data is processed by sub-processors outside the EEA (e.g., Stripe in the USA), appropriate safeguards are in place, including:
Under the GDPR, Australian Privacy Act, and other applicable laws, you have the right to:
To exercise any of these rights, email us at privacy@kidstaskmaster.com. We will respond within 30 days (or one calendar month under GDPR).
You can also delete your account directly within the app via Parent Settings > Account Management > Delete Account.
If you are unsatisfied with how we handle your data, you may lodge a complaint with:
We may update this Privacy Policy from time to time. For significant changes, we will notify you via:
Continued use of the service after changes constitutes acceptance of the updated policy. For material changes, we will seek re-consent where required by law.
If you have questions about this Privacy Policy or how we handle your data:
By using Kids Task Master, you acknowledge that you have read and understood this Privacy Policy.