Saplet is used by families, including by children. This page explains exactly what we hold, for how long, and what we will never do. It is written to be read, not to be survived.
The short version. We collect the least we can get away with. We never sell or share your information with anyone for their own purposes. We never read journal entries, and there is no screen in Saplet where a parent can read a child's. Most of what we hold deletes itself on a timer. You can download everything you own or delete your household outright, at any time, without asking us.
The long version below is the one that counts legally, and it says the same things.
Saplet is a trade name of Alyssa Meek, a sole proprietorship based in Colorado, United States ("Saplet", "we", "us"). You can reach a human at saplet.app@gmail.com. This policy covers the Saplet app and this website.
When an adult creates an account we collect an email address and a password (stored only as a cryptographic hash, never as text we can read). If you buy Saplet, our payment provider handles the transaction and we receive a confirmation that it happened, not your card details.
The display names and roles (adult or child) that the account owner enters for each household member, and the usernames and hashed passwords for members who sign in without an email. Display names can be anything: a first name, a nickname, or "Kiddo". We never require a legal name.
Tasks, schedules, rewards and balances, points and streaks, nudges you send, suggestions, wagers, buddy circles, settings, and journal entries. Journal entries are subject to the additional rules in section 6.
Standard server logs kept by our hosting provider, which include IP address, timestamp and the page requested, retained briefly for security and troubleshooting. If you send us a problem report, whatever you type plus the device and browser details shown to you on that form before you send it.
Only to run the service you asked for: to show you your day, keep your household in sync, deliver notifications you switched on, process a payment, answer your emails, and keep the service secure. We do not profile you, build advertising audiences, train machine learning models on your content, or use your information to make automated decisions about you.
Where the law requires a legal basis, ours are: performing our contract with you (running the app), our legitimate interests (keeping it secure and working), your consent (optional notifications), and legal obligation (keeping records where we must).
Saplet is designed for households and is intended to be set up by an adult. Children cannot create their own accounts. A child's profile exists only because the adult who owns the account created it, and that act is the parental consent for us to collect the limited information described here.
If you believe a child has given us information without a parent's involvement, email saplet.app@gmail.com and we will delete it.
Journal entries belong to the person who wrote them. They are readable by that account and no other, including the account owner and including us in normal operation. Our database enforces this with row-level access rules rather than relying on the app to behave.
A parent can see that a household member checked in on a given day, shown as a small icon and a streak count. They cannot see any content of any entry, ever.
Saplet checks entries against a short list of words and phrases that suggest a very hard day. This check runs entirely on your own device. Entry text is never transmitted for this purpose, or any other purpose beyond storing it for you. If the check matches, Saplet asks the person who wrote the entry whether they would like to tell someone, and offers a short message they select. Nothing is sent unless they choose a recipient and send it. The recipient receives only the message that was chosen, never any part of the entry, and never the fact that a word matched.
This is a gentle prompt, not monitoring, not detection, and not a safety service. Please read section 12 of the terms.
We may access journal data only where strictly necessary to fix a fault, restore a backup or comply with a legal obligation, and we will not read entry content for any other reason.
A photo attached to a completed task is resized on your own device before it is uploaded, which also removes the embedded metadata including any location. It is visible only to the people who were asked to approve that task. It is deleted the moment the task is approved, and in any case within 24 hours. Photos are held in private storage and are never publicly addressable.
We do not sell your information, share it for anyone else's marketing, or trade it. We use a small number of service providers who process data strictly on our instructions:
We may disclose information if we are legally required to, or where it is necessary to protect someone's safety or our legal rights. If we are ever compelled to hand over data we will tell affected users unless we are legally prohibited from doing so.
If Saplet is ever sold or merged, your information may transfer to the new owner, who would be bound by this policy until you are given notice and a chance to delete your account.
Most of what we hold deletes itself automatically:
When you delete your household we remove it from live systems promptly and from routine backups within 30 days. We do not keep a hidden copy in a "deleted" state.
Wherever you live, you can:
Everything travels over encrypted connections and is encrypted at rest by our database provider. Access rules are enforced at the database, so a mistake in the app cannot expose another household's data. Passwords are stored only as hashes. Administrative access is limited to the operator and used only to keep the service running. No system is perfect, and if a breach ever affects your information we will tell you and the relevant authorities as quickly as the law requires and common decency demands.
Saplet uses no advertising or analytics cookies, because it uses no advertising or analytics. We store a sign-in token and your own preferences on your device so the app works and remembers you. Installing Saplet to your home screen also caches the app files so it opens without a connection.
All notifications are optional and can be switched off individually. Notification text is deliberately vague, for example "1 thing waiting", so that nothing private appears on a lock screen. Task names, journal content and message contents are never placed in a notification payload.
Our providers store data on servers in the United States. If you use Saplet from elsewhere, your information is transferred there and handled under this policy, using the safeguards our providers make available for international transfers.
If you live in California, Colorado, Connecticut, Virginia, Utah or another state with a comprehensive privacy law, you have the right to know what we hold, to get a copy, to correct it, to delete it, and not to be discriminated against for exercising those rights. Section 10 tells you how, and most of it you can do yourself without contacting us. We do not sell personal information and we do not share it for cross-context behavioural advertising, and we never have. We do not use or disclose sensitive personal information for any purpose other than providing the service.
If we change this policy in a way that matters, we will tell you in the app and by email before it takes effect, and the date at the top will change. Continuing to use Saplet after that means you accept the new version. If you don't, you can export your data and delete your household.
Questions, requests, or a concern about how something works: saplet.app@gmail.com. A real person reads it.
Hi. This bit is for you, not for grown-ups.
Saplet keeps your tasks, your points, and the rewards you're saving up. Your grown-ups can see those, because they help with them.
Your journal is different. It's yours. Nobody else can open it. Not your parents, not your brothers or sisters, not the person who made this app. There isn't even a button for it.
The only thing Saplet does is this: if what you wrote sounds like you're having a really hard day, it will ask you whether you want to tell someone. You get to choose whether to say anything, and who to tell. You can pick a grown-up at home, or someone outside your family. Whatever you wrote stays yours either way. They just get a short message saying you'd like to talk.
You can ask a grown-up to delete everything about you whenever you want. If anything here doesn't feel right, tell a grown-up you trust.