PRIVACY POLICY

1. DATA CONTROLLER

The controller of personal data collected via the Loot Master application is:
Dasa-Projekt Lech Augustyniak
ul. Kostka Jagiełły 22a, 32-626 Zasole, Poland
Contact: support@getlootmaster.com

2. DATA SCOPE AND PURPOSE

We process data strictly to provide, maintain, and secure our home gamification and family chore/budget service. We collect and process:
- Parent's email address: Serves as the unique master account identifier, primary authorization token, and the authoritative channel for technical system alerts, critical updates, and subscription billing management.
- Anonymous child profiles: The system operates strictly on randomly generated server-side unique tokens (UUIDv4). Optional child nicknames or first names are supplied solely by the parent for personal recognition within the private family ecosystem.
- Task verification photos: Sent optionally by children as a visual verification of chore completion, subject to our automated, immediate data destruction sequence.

3. CHILDREN'S PRIVACY (COPPA & GDPR COMPLIANCE)

Loot Master enforces the highest privacy benchmarks for younger users, maintaining full compliance with the U.S. Children's Online Privacy Protection Act (COPPA) and the European General Data Protection Regulation (GDPR).
Children cannot independently register or create accounts. All child profiles are generated authoritatively by a verified parent inside their secure administrative panel. The system does not collect, require, or permit a child to provide an email address, telephone number, real-time geolocational coordinates, or connect via third-party social networks. The child's digital footprint is completely isolated and cryptographically shielded from public networks.

4. DATA STORAGE AND SECURITY

Your data is stored within the certified, secure cloud infrastructure of Google Firebase located inside the European Union. We enforce stringent, Bank-Grade Security parameters across the entire data architectural layer:

• Zero-Retention Policy for Multimedia: Image proofs sent by children to confirm chore execution are strictly temporary. The exact millisecond the parent takes an administrative action (Accept or Reject), the image file is permanently and irrecoverably erased from protected Google Cloud Storage containers via server-side Admin SDK procedures. We do not archive, audit, or share child visual records.
• Cryptographic PIN Protection: Access codes (PINs) for child profiles are authenticated exclusively on the server and are never saved in plain text. We utilize an advanced scrypt key derivation function (parameters: N=16384, r=8, p=1) paired with a unique, cryptographically random 16-byte salt per profile. Furthermore, a twarda anti-brute-force firewall locks out access for 15 minutes after 5 consecutive incorrect attempts.
• Device Integrity Certification (App Check): To prevent data manipulation, reverse engineering, and fraudulent balance injections, the cloud functions enforce hardware-level attestation through Firebase App Check using native Apple App Attest (iOS) and Google Play Integrity (Android) frameworks.

5. YOUR RIGHTS (GDPR COMPLIANCE)

In accordance with the General Data Protection Regulation (GDPR), the master parent account holder maintains full rights to access, rectify, restrict, transfer, or entirely purge their family data data infrastructure ("right to be forgotten"). Since child profiles are structurally sub-nested under the parent account, exercising the parent’s data erasure right fully and automatically encompasses the absolute removal of all associated child metadata.

6. DATA DELETION AND ACCOUNT TERMINATION

Loot Master users maintain absolute sovereignty over their family data footprint. Initiating account termination severs all tracking loops immediately:

• How to request deletion: The fastest method is clicking the "Delete Account" button directly within the Parent Profile Settings inside the application. Alternatively, you can dispatch an email from your registered parent email address to support@getlootmaster.com with the subject line "Data Deletion Request".
• What will be permanently deleted: Upon receiving the trigger, the server executes a cascading purge across all Firestore databases and Storage buckets, permanently wiping the parent's email, child UUID matrices, entire habit tracking histories, nienaruszalne currency ledger entries, School Gradebook matrices, Liga Mocy stats, and ephemeral session records.
• Retention Period: Full database structural pruning is processed immediately (typically within 48 hours), capped at a absolute maximum of 30 days. Post-deletion, we preserve only fully anonymized, decoupled technical telemetry and system performance logs which cannot be traced back to any physical device, individual, or family cell.