Data & GDPR

1. How DutyDojo Stores Your Data

DutyDojo is available as a Windows desktop app and a web app (accessible from any browser or installable on your phone).

Web app: All data is stored in Switch IT Global Limited's secure cloud, hosted in the EU. You sign in with your email address and password — no technical setup required.

Desktop app: Data is stored locally on your computer by default. You can optionally enable Cloud Sync in Settings to back up your data to our cloud and access it across multiple devices.

2. Who Controls Your Data

• You (the parent or guardian) are the data controller for all personal data you enter — your children's names, behaviour logs, and point history. You decide what is recorded and how long it is kept.
• Switch IT Global Limited acts as a data processor on your behalf. We store and secure your data using our cloud infrastructure but we do not use your family data for any other purpose.
• Supabase is our cloud database provider and acts as a sub-processor. Supabase is GDPR-compliant; their data processing agreement is available at supabase.com/privacy. Data is hosted in the EU.

3. What Data Is Stored

The following information may be stored, depending on how you use the app:

• Children — name, avatar, goal points, consequence threshold, theme colour, notes
• Behaviours — name, kind (positive/negative), points value, icon, daily limit, category
• Rewards — name, cost, icon
• Consequences — name, icon, description; and any assigned consequence records
• History — point transactions with timestamps, reasons, and fulfilment status
• Settings — parental preferences (approval mode, point caps, defaults)
• Account — email address, hashed password, notification preferences

We recommend using first names or nicknames rather than full names, and not entering sensitive information beyond what the reward system needs.

4. Cloud Sync & Data Transfer

When Cloud Sync is enabled (desktop) or when using the web app:

• Data is transmitted over HTTPS to Switch IT Global Limited's managed cloud database
• Access controls ensure only your signed-in account can read or write your data
• Infrastructure is hosted within the EU (London region)
• You can export or delete all your data at any time — see section 6 below

You do not need to set up any external service or account to use cloud features — Switch IT Global Limited manages the infrastructure on your behalf.

5. Email Notifications

Email notifications (weekly family digest, approval alerts) are entirely optional. To enable them, simply enter your preferred email address in Settings → Email notifications. No technical setup is required.

• Notification emails are sent by Switch IT Global Limited on your behalf using our email delivery service (Resend)
• Only the email address you provide is used; it is not shared with any other party
• You can turn off notifications at any time in Settings

6. Exporting and Deleting Your Data

You have full control over your data at all times:

• Export history — available in the History tab for individual children or all children combined
• Desktop backup — Settings → Backup & Restore creates a full local backup file
• Delete account (web app) — Settings → Danger Zone permanently deletes your account and all associated data immediately
• Delete account (desktop) — email legal@dutydojo.com and we will erase your cloud data within 30 days
• Uninstalling the desktop app removes the local database from your device

7. Children's Data (UK GDPR / COPPA)

DutyDojo processes children's personal data (names and behavioural records) solely on the instructions of the parent or guardian who creates the account. As the adult user you are responsible for:

• Ensuring you have appropriate authority to process your children's data
• Using the App in a manner that respects your children's dignity and wellbeing
• Deciding how long to retain historical behaviour records

8. Data Breach Notification

In the event of a security incident that poses a risk to your rights and freedoms, we will notify you via the App or by email within 72 hours of becoming aware of the breach, as required by UK GDPR Article 33.

9. ICO Registration & Complaints

Switch IT Global Limited is registered with the Information Commissioner's Office (ICO) as required under UK data protection law. If you have a complaint about how we handle personal data, you may contact the ICO at ico.org.uk or by post at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

10. Contact

For any data protection enquiry, subject access request, or erasure request:
Switch IT Global Limited · Company No. 11001626 · Registered in England and Wales
Email: legal@dutydojo.com