Your privacy, clearly explained

Points Daily for iPhone and iPad · Updated October 11, 2026

Your everyday lists and points work on your device without an app account. iCloud and cloud AI are optional. We do not contact the cloud AI service until you choose “Agree and use OpenAI.”

What stays on your device

Points Daily, developed by Shi Sun, stores child profiles (name, age, avatar and color), task and reward lists, points history, and preferences on your device. Manual editing does not require AI. On-device AI processes editing requests on your device when supported. The app has no advertising or advertising tracking.

Subscriptions and in-app purchases

In version 1.1, Apple App Store handles subscription confirmation, introductory-trial eligibility, billing, renewals, cancellations and restoring purchases. The app verifies signed Apple transaction records on your device, including the product, expiration and revocation status, to determine access. These records are not sent to our servers or AI services. We do not receive payment-card details. Apple processes store account and transaction information under its privacy policy. Version 1.0 stores its automatic trial start and latest observed time locally and uses Apple for its one-time permanent-unlock purchase.

Basic usage analytics

The app uses TelemetryDeck to understand which features are used and where interactions fail. It sends fixed event names for app launches, adding a child, completing a task, redeeming a reward, adjusting or undoing points, enabling sync, AI editing stages, and trial, purchase or restore outcomes. These events contain no child names or profile identifiers, task or reward content, points values, AI messages or replies, transaction identifiers, receipts, or payment details.

The SDK also sends session and usage statistics, a hashed device-derived identifier, and technical metadata such as device model, operating system, app version, language, time zone and accessibility settings. We do not supply an email, account ID or child ID to analytics, or use these events for advertising. Events may be queued on the device and sent when connectivity is available. Analytics starts when the app launches; there is currently no in-app analytics switch.

Our current plan makes three months of analytics available in the dashboard; this is not a three-month deletion promise. TelemetryDeck states that it does not currently guarantee a deletion schedule for its cold-storage events. See its privacy FAQ for processing and retention details.

If you enable iCloud

Sync sends your family records to Apple iCloud. If you enable family collaboration, invited participants can access and edit shared records. This is a separate choice from cloud AI and is subject to Apple's iCloud privacy and service terms.

If you choose cloud AI

App AI Gateway forwards your message, the selected child's task and reward list (item identifiers, names, icons, points, and item types), and recent editing conversation to OpenAI to propose changes. The app does not automatically attach the child's profile name, profile identifier, points history, or another child's list. Personal details you put in a message or list are still included, so please avoid sensitive information about children.

Your choice is remembered. Once you agree, the app may authenticate with the gateway before you send a message. The gateway processes an installation identifier, request usage, and authentication records for security, usage limits, billing, and service reliability. Every proposed list change still requires your confirmation.

How long service data is kept

According to its policy, App AI Gateway does not store prompts or replies. It keeps authentication records for 90 days and usage records while our developer gateway account exists; operational logs are kept for a short diagnostic period. Its primary database is in the United States.

OpenAI states that API content is not used for training by default unless the API customer opts in. We request store:false, but this is not a promise of zero retention: OpenAI may keep content in security logs for up to 30 days, or longer when legally required or necessary for safety, and supported models may use temporary prompt caching. These services process data under their respective policies: App AI Gateway and OpenAI API data controls.

Your choices and deletion requests

To stop future cloud AI requests, open AI editing, choose Change in the current AI provider card, and select on-device AI. During an active trial or subscription, you can edit manually even if on-device AI is unavailable. Changing providers does not erase service records already retained.

You can edit or delete tasks and rewards in the app, and remove a child when another profile remains. Removing a task does not erase its past points history. iCloud data, shared copies, and device backups are separate from local app storage; disabling sync or removing the app does not by itself erase every copy. For help with records, retained service data, or a privacy/deletion request, email sunshineo@icloud.com. We will help identify the relevant data and explain the available deletion options and any required retention. Do not send sensitive child information with your initial request.

Contact and scope

This policy covers the native Points Daily iOS app. These public support pages are hosted on Vercel, which may process normal web request information to deliver and secure them; we add no analytics scripts or advertising cookies to these pages. The separate Points Daily web application has a different storage system. If you contact us, we use your email and the information you choose to provide to answer your request and keep necessary support records while resolving it and as needed for legal obligations. You can request their deletion at the same address. Material changes to this policy will be reflected here with an updated date.