Privacy Policy

1. Who We Are

Switch IT Global Limited (Company No. 11001626), registered in England and Wales, publishes DutyDojo. We are the data controller for the personal data you provide when creating an account. For questions about this policy contact us at legal@dutydojo.com.

2. What Data We Process

DutyDojo processes the following categories of personal data:

• Account details — your email address and a securely hashed password, used to sign in
• Children's profiles — first names (or nicknames), avatar emoji, point balances, and behaviour history that you enter
• Household settings — reward definitions, behaviour categories, and parental preferences you configure
• Activity records — points earned or deducted, rewards claimed, and timestamps of activity
• Notification email — an email address you optionally provide to receive weekly digests or approval alerts

We do not collect addresses, phone numbers, school details, photos, location data, payment card numbers, or any other sensitive personal data.

3. How Your Data Is Stored

Web app users: Your account and all family data are stored securely in Switch IT Global Limited's cloud infrastructure, hosted in the EU. Your data is protected so that only your account can access it.

Desktop app users: By default, all data is stored on your device only and is never sent to us. If you choose to enable Cloud Sync, your data is also stored in our secure cloud so you can access it across devices. Cloud Sync is entirely optional and can be disabled at any time.

4. Why We Process Your Data (Legal Basis)

We process personal data on the following legal bases:

• Contract performance — to provide the service you signed up for, including storing and syncing your family data
• Legitimate interests — to keep the service secure, fix bugs, and improve the app
• Consent — for optional features such as email notifications, which you can turn off at any time in Settings

5. Data Sharing

Switch IT Global Limited does not sell, rent, or share your personal data with third parties for marketing purposes. Data may be shared only with:

• Supabase — our cloud database and authentication provider, used to store and secure your account and family data. Supabase is GDPR-compliant and data is hosted in the EU
• Resend — our email delivery service, used only to send notifications you have opted in to. Only your chosen notification email address is shared
• Law enforcement — where required by applicable law

6. Data Retention

We retain your data for as long as your account is active. You can delete your account at any time — web app users can do this via Settings → Danger Zone; desktop app users can contact us at legal@dutydojo.com. Deleting your account permanently removes all your data from our systems within 30 days. You can also export your data at any time via the History tab or Settings → Backup.

7. Your Rights

Under UK GDPR and the Data Protection Act 2018 you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Erase your data ("right to be forgotten")
• Restrict or object to processing
• Receive your data in a portable format (export via Settings)
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any right, email legal@dutydojo.com. We will respond within 30 days.

8. Children's Privacy

DutyDojo is designed to be used by parents and guardians. The App is not directed at children — children should not create accounts or configure the App independently. As the parent or guardian, you are responsible for the data you enter about your children and for using the App in a way that respects their wellbeing and complies with applicable law.

9. Security

We use industry-standard security measures including encrypted data transmission (HTTPS), secure password hashing, and row-level access controls so that only your account can access your data. No system is entirely risk-free; in the event of a data breach that affects your rights, we will notify you as required by law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be communicated via an in-app notice or email. Continued use of the App constitutes acceptance of the updated policy.