Privacy Policy - HomeQuest

This Privacy Policy explains how Fix Point, owned by Asaf Peretz ("we", "the Operator"), collects, uses, and protects your information in the HomeQuest application ("the App"). By using the App, you agree to the terms set forth in this document.

1. Who We Are and Contact

Operator: Fix Point (Asaf Peretz), Israel.
Privacy email: fixpoint.mobile@gmail.com

2. What Data We Collect

• Registration data: email address, first name, and optionally profile picture. For children: first name and nickname only — no email or phone.
• Usage data: tasks, rewards, points, internal messages, family calendar, shopping lists, and study data that you enter voluntarily.
• Technical data: anonymous device identifier, OS type, interface language, and app version — for support and improvement.
• Device permissions (native app): Push notifications, microphone (for the voice assistant feature only, not stored), photo access (for profile picture upload only).
• Payment data: handled exclusively by payment providers (PayPal, Bit, PayBox). We do not store credit card details.

3. Why We Use the Data

• Operating the service (login, family data sync).
• Sending internal notifications (task approvals, rewards, reminders).
• Improving the app and fixing bugs.
• Complying with legal requirements.

4. Third-Party Services

We use the following infrastructure providers, each with its own privacy policy:

• Google Firebase (Authentication, Firestore, Storage, Cloud Functions, Cloud Messaging) — secure storage of family data and message delivery.
• Google Sign-In — for sign-in via Google account (optional).
• OpenRouter / OpenAI / Anthropic / Google AI — for processing questions to the smart agent. Text you write to the agent is sent for processing and not retained by them.
• PayPal / Bit / PayBox — for payment processing.
• Monlix (Offerwall, optional) — family-safe content only, collects anonymous data on task completion.

5. Children's Protection (COPPA / GDPR-K)

The app is intended for family use. Child accounts are created and managed solely by a parent or guardian. We do not collect email addresses, phone numbers, or location from children. Parents can view, edit, and delete all their children's data at any time from within the app.

6. Data Storage and Location

Data is stored on Google Cloud (Firebase) servers, primarily in data centers in Europe and the US. Transfer is encrypted (HTTPS / TLS). Passwords are bcrypt-hashed and cannot be decrypted, even by us.

7. Retention and Deletion

• Active data is retained as long as the account is active.
• Account deletion: you can delete your account at any time from "Settings > Delete Account". After deletion, the account enters a "soft delete" state for 30 days (for restoration in case of mistake), then is permanently deleted.
• Anonymous server logs are retained for up to 90 days for security purposes.

8. Your Rights (GDPR / CCPA)

You are entitled at any time to:

• Access your data (available from within the app).
• Correct inaccurate data.
• Delete your account and data.
• Export your data in a readable format.
• Withdraw consent to data processing (which means stopping use of the app).

9. Cookies and Local Storage

The app uses localStorage to save preferences (language, login state). The native app has no third-party cookies. The web site uses only functional cookies.

10. Security

We take reasonable security measures: encrypted communication, Firestore access rules, two-factor authentication for admin, rate limits on API calls. However, no system is 100% secure, and internet use carries some risk.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be announced in the app at least 14 days in advance. Continued use after the update constitutes agreement to the updated policy.

12. Jurisdiction

This policy is governed by the laws of the State of Israel. Any dispute will be resolved in the competent courts in Tel Aviv-Yafo.