RiseOhana helps families turn household responsibilities into quests that kids actually want to do. That means your child's data passes through our hands. We take that seriously.
This page has two parts. Part 1 is a plain-English summary of what we collect, why, and what you can do about it. Part 2 is the full legal policy with every detail. Both parts say the same things — Part 1 just says them faster.
Who this is for: Parents and legal guardians of children under 13. You are our user. Your child participates through you.
Who we are: RiseOhana, Inc., a Delaware C-Corporation. We are the sole operator of the RiseOhana mobile app.
Questions? Email privacy@riseohana.com. We respond within 7 business days.
We only collect what the app needs to work. Here is what that looks like, based on how you and your child use RiseOhana.
These are session-scoped or app-scoped identifiers, not persistent hardware identifiers.
This matters. RiseOhana does not collect any of the following from children:
We share data with six service providers. That’s it — no data brokers, and the app itself contains no ad networks or analytics SDKs. Our public website is separate and does use analytics; see Our Website below.
When your child submits a quest photo, it goes to OpenAI's Vision API for automated analysis. OpenAI receives: the photo, the quest description, and your child's age range. OpenAI does not receive your child's name, your name, or any contact information. OpenAI retains photos for up to 30 days for abuse monitoring, then deletes them. They do not use photos to train AI models. We have a Data Processing Agreement in place.
If you use the optional AI-assisted authoring feature, the messages you type to our assistant go to OpenAI to generate quest suggestions. Your child's name is removed (replaced with a placeholder) before those messages are sent. OpenAI processes them as a service provider — it does not train on them or sell them. This is your own data as an adult, not your child's.
Stripe handles subscription billing. They receive your payment method and billing info. They do not receive any child data — no photos, no quest data, no child names.
Google, Apple, or Microsoft handle your sign-in. They provide us your name and email. They do not receive any child data.
Google's Firebase Cloud Messaging (FCM) delivers push notifications to both parent and child devices. FCM receives a device-specific push token and notification content (e.g., “You have a quest due!”). FCM does not receive your child's name, photos, quest data, or any personal information beyond the push token. We use FCM solely for notification delivery — not for Firebase Analytics, crash reporting, or any other Firebase service.
If your family uses the App on an Amazon Fire tablet, Amazon Device Messaging (ADM) delivers push notifications to that tablet, in place of Firebase. ADM receives a device-specific push token that Amazon itself issued, an internal identifier for the child the notification is about, the kind of notification it is, and a generic title and body (e.g., “You have a quest waiting!”). ADM does not receive your child's name, quest or reward names, photos, point balances, or anything either of you typed. We use ADM solely for notification delivery on Fire tablets — nothing else.
If a Fire tablet is offline, Amazon holds the undelivered notification in its queue for up to 7 days before discarding it. There is no way for us to recall a notification already queued at Amazon, so a deletion request cannot reach one. It expires on its own within 7 days.
We use an email service to send you transactional messages (consent verification, account notifications). Your child's first name may appear in these emails in context (e.g., “You approved Emma's quest”). Children do not receive email from RiseOhana.
The RiseOhana app does not use: Firebase Analytics, behavioral analytics (Mixpanel, Amplitude), crash reporting SDKs (Sentry, Crashlytics), advertising SDKs, social media plugins, or data brokers.
Our public website — the pages you can visit without signing in — uses Google Analytics, loaded through Google Tag Manager. It records the pages visited, the browser and device type, and the approximate location derived from the IP address. Some pages also carry advertising conversion tags from Google and Reddit, which tell us when a visit led to an app install.
This is ordinary website analytics about visitors. It is not connected to your account, and it never receives child data — no names, photos, quest activity or wallet information. Signing in, resetting a password and confirming an email address all happen on pages that carry no analytics at all.
The setup page a parent opens on a child’s device deliberately omits the advertising conversion tags that our other pages carry.
| Data | Retention | Then What |
|---|---|---|
| Child photos | 30 days | Auto-deleted |
| Photo metadata (AI score, timestamps) | 1 year | Auto-deleted |
| Quest activity data | 1 year | Auto-deleted |
| Device session logs | 90 days | Auto-deleted |
| Feedback reports (logs, screenshot, device details) | Until resolved, or until the child or account is deleted | Blob and message erased |
| Push notification tokens | Until logout or account deletion | Deregistered and deleted |
| Wallet & transaction history | 3 years | Deleted (financial records) |
| Parental consent records | 3 years or account lifetime | Retained for COPPA compliance |
| Child profile data | Account lifetime | Deleted when account is deleted |
| Parent account data | Account lifetime | Deleted when account is deleted |
Backups: After data is deleted from our primary systems, it may persist in automated backups for up to 90 additional days. Backups are used only for disaster recovery.
Under COPPA, you have strong rights over your child's data. We honor all of them, promptly and without charge.
| In-App | Parental Dashboard > Child Data & Privacy |
| privacy@riseohana.com | |
| Phone | [To be added] |
No security system is perfect. In the event of a breach affecting children's data, we will notify you and applicable regulators as required by law.
If we make a material change — new data collection, new third parties, changed retention periods — we will:
This Privacy Policy describes how RiseOhana, Inc. (“RiseOhana,” “RO,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information from users of the RiseOhana mobile application (the “App”), including personal information collected from children under the age of 13 (“Child Users” or “children”). RiseOhana is committed to protecting the privacy and safety of all users, and particularly children, in compliance with the Children's Online Privacy Protection Act (“COPPA”), 15 U.S.C. §6501–6506, and its implementing regulations at 16 C.F.R. Part 312, as amended (effective 2026).
This Privacy Policy is intended to be read by parents and legal guardians (“Parents”) of Child Users. If you are a Parent, please read this Privacy Policy carefully before allowing your child to use the App. By providing verifiable parental consent, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.
RiseOhana, Inc. is a Delaware C-Corporation that operates the RiseOhana mobile application. RiseOhana is the sole operator of the App and is responsible for all data collection and processing described in this Privacy Policy.
| Company Name | RiseOhana, Inc. |
| Incorporation | State of Delaware, United States |
| Privacy Contact Email | privacy@riseohana.com |
| Phone | [To be added] |
| Mailing Address | [To be added] |
For questions or concerns about this Privacy Policy or our data practices, Parents may contact us at privacy@riseohana.com. We will respond within seven (7) business days.
RiseOhana collects personal information from both Parents and Child Users. This section describes, in detail, all categories of personal information collected.
| Data Category | Specific Data Elements | Collection Method |
|---|---|---|
| Account Information | Name, email address | Provided via OAuth sign-in (Google, Apple, or Microsoft) |
| Authentication Data | OAuth tokens, refresh tokens | Generated during OAuth authentication |
| Family Information | Family name, parent-child relationships | Parent-provided during account setup |
| Billing Information | Subscription status, payment method tokens, billing history | Processed by Stripe (see Section 4.2) |
| Parental Consent Records | Consent status, consent method, date of consent, data elements consented to | System-generated during VPC process |
| AI Authoring Data (Parent) | The Parent's authoring-conversation messages; short derived notes about the Parent (stated parenting values, goals, or focus) | Parent-provided during an optional AI-assisted authoring session |
Note: RiseOhana does not store credit card numbers or detailed payment instrument data. All payment information is processed and stored by Stripe, our third-party payment processor.
RiseOhana collects the following personal information from children under 13, subject to verifiable parental consent:
| Data Category | Specific Data Elements | Collection Method | Purpose |
|---|---|---|---|
| Child Profile Information | Child's first name or nickname | Parent-provided during child account setup | Account identification and personalization |
| Birth Month and Year | Month and year of birth only | Parent-provided during child account setup | Age eligibility verification and COPPA compliance |
| Photos | Photographs submitted as evidence of quest completion | Child-submitted via device camera or photo gallery | Quest verification (AI-powered and parental review) |
| Quest Activity Data | Quest assignments, completion records, submission timestamps, AI verification results, parental override decisions | System-generated during App use | Quest management, parental dashboard, activity tracking |
| Wallet and Transaction Data | Points earned, allowance amounts, wallet balance, transaction history | System-generated upon quest approval | Allowance and reward management |
| Device Session Data | Session tokens, setup codes (encrypted), PIN hash | System-generated during device provisioning via QR code | Child device authentication |
| Push Notification Token | FCM, APNs or ADM token, device fingerprint, platform type | System-generated during app initialization with device permission | Delivering quest reminders, activity alerts, and family notifications |
| Avatar Customization | Avatar selection, background color preferences | Child or Parent-provided | Personalization |
| Diagnostic and Feedback Data | In-app activity logs, optional screenshot, device make, model, operating system version, app version | Child-initiated, only on explicit submission of a feedback report | Diagnosing and fixing defects the child encountered — support for the internal operations of the service |
What We Do NOT Collect from Children:
RiseOhana uses the personal information described in Section 2 solely for the purposes stated below. We do not use children's personal information for any purpose not disclosed in this Privacy Policy.
| Data Category | How We Use It |
|---|---|
| Child's Name | To identify the child within the family account; to display the child's name on quests and in the parental dashboard |
| Birth Month and Year | To verify age eligibility; to support COPPA age-gating; to personalize AI quest generation appropriate to the child's developmental stage |
| Photos | To verify quest completion through AI-powered analysis (see Section 4.1); to display quest evidence to the Parent for review; to maintain a record of quest completion during the retention period |
| Quest Activity Data | To operate the quest system (assignment, tracking, and completion); to display activity history in the parental dashboard; to calculate trust metrics (AI accuracy measurement) |
| Wallet and Transaction Data | To manage the child's allowance and point system; to provide transaction history to Parents |
| Device Session Data | To authenticate the child's device session; to maintain secure access during active sessions. Session data is temporary and is not used for tracking |
| Push Notification Token | To deliver quest reminders, activity alerts, and family notifications to the child's device. Not used for advertising, analytics, or tracking. Deregistered on logout and deleted on account deletion |
| Avatar Customization | To personalize the child's in-app experience |
| Data Category | How We Use It |
|---|---|
| Account Information | To identify and authenticate the Parent's account; to send notifications and communications related to the child's activity |
| Family Information | To establish and maintain parent-child relationships within the App |
| Billing Information | To process subscription payments through Stripe; to manage subscription status |
| Parental Consent Records | To document compliance with COPPA; to maintain a verifiable record of parental consent |
| AI Authoring Data (Parent) | To power the optional AI-assisted authoring feature (generate Quest suggestions from the Parent's own description) and to provide continuity across sessions via a small set of Parent-private notes. Processed by OpenAI as a service provider (see Section 4.1). Not used for advertising, profiling, or AI model training. Parent notes are private to the individual Parent and can be viewed and deleted in-app. |
RiseOhana does not use personal information collected from children for any of the following purposes:
RiseOhana shares personal information with the following third-party service providers solely to operate the App and provide the services described in this Privacy Policy. We do not sell, rent, or otherwise disclose children's personal information for marketing, advertising, or any purpose unrelated to the operation of the App.
Provider: OpenAI, L.L.C.
Location: United States
Purpose: AI-powered quest verification is a core component of the RiseOhana service. When a child submits a photo as evidence of quest completion, the photo is transmitted to OpenAI's Vision API for automated analysis.
Data Shared with OpenAI:
Data NOT Shared with OpenAI:
OpenAI's Obligations: RiseOhana maintains a Data Processing Agreement (“DPA”) with OpenAI that contractually requires OpenAI to: (a) process photos solely for the purpose of providing AI analysis as requested by RiseOhana; (b) not use photos to train, fine-tune, or improve its AI models; and (c) maintain appropriate security measures.
Photo Retention by OpenAI: After processing, OpenAI retains photos for up to thirty (30) days for trust and safety monitoring (abuse and misuse detection), after which the photos are automatically deleted.
Per-Record Deletion Limitation: If you request deletion of a specific photo, RiseOhana will delete it from our primary systems within 24 hours. However, if the photo was previously transmitted to OpenAI, RiseOhana cannot instruct OpenAI to delete that specific photo from its 30-day abuse-monitoring retention. The photo will be automatically deleted from OpenAI's systems no later than 30 days after original submission.
Purpose: When a Parent uses the optional AI-assisted authoring feature, the Parent's authoring messages — and a small set of short, Parent-private notes derived from them — are transmitted to OpenAI to generate Quest suggestions and to provide continuity across sessions.
Data Shared with OpenAI:
Data NOT Shared with OpenAI:
OpenAI's Obligations: The same Data Processing Agreement described in Section 4.1 applies — OpenAI processes this data solely to provide the requested assistance, does not use it to train, fine-tune, or improve its AI models, does not sell or commercially transfer it, and maintains appropriate security measures. OpenAI acts as a data processor and does not independently collect personal information.
Retention: Consistent with OpenAI's published API data policy, data submitted to the OpenAI API is not used to train or improve OpenAI's models. OpenAI retains these authoring requests for up to thirty (30) days for abuse-monitoring purposes, after which they are automatically deleted — the same window that applies to Quest photos (Section 4.1).
Consenting Adult's Own Data: This flow processes the Parent's own data as a consenting adult — not the child's. Child names and child-identifying details are removed before any authoring message is sent to OpenAI.
Provider: Stripe, Inc.
Location: United States
Purpose: Subscription billing and payment processing for Parent accounts.
Data Shared: Parent's payment method information, subscription status, billing events, parent's name and email.
Data NOT Shared: Any Child User personal information, photos, quest data, or activity data.
Stripe processes payment data in compliance with PCI-DSS standards. Stripe typically retains billing records for 3–5 years.
Purpose: Parent account authentication via OAuth 2.0.
Data Shared: Authentication requests and tokens (standard OAuth protocol).
Data Received: Parent's email address and name (for account creation).
Data NOT Shared: Any Child User personal information, photos, quest data, or activity data.
Purpose: Sending transactional emails to Parents (consent verification, account notifications, deletion confirmations).
Data Processed: Parent email address; email content that may include the child's first name in context.
Data NOT Processed: Children do not receive email from RiseOhana.
Purpose: Delivering push notifications to Parent and Child devices (quest reminders, reward alerts, system messages).
Data Shared: App-specific push notification token (FCM registration token for Android; APNs device token for iOS); notification payload (title, body, category).
Data NOT Shared: Child name, photos, quest content, wallet data, or any other personal information. Notification payloads contain generic prompts (e.g., “You have a quest waiting!”), not personal data.
Token Lifecycle: Push tokens are registered when the app is installed and notification permission is granted; deregistered on logout; deleted from RiseOhana servers on account deletion or anonymization. Tokens are app-specific identifiers — they are not persistent hardware identifiers (IMEI, AAID, IDFA) and cannot be used to track a child across apps or services.
Firebase Data Processing: Google’s Firebase Cloud Messaging acts as a message relay. Google’s FCM data processing terms apply. RiseOhana does not use Firebase Analytics, Firebase Crashlytics, or any other Firebase service.
Provider: Amazon.com Services LLC
Location: United States
Purpose: Delivering push notifications to devices running the Amazon Appstore build of the App (Amazon Fire tablets). Firebase Cloud Messaging is not available on those devices; Amazon Device Messaging (“ADM”) is the only push transport they have. RiseOhana uses ADM for notification delivery and for nothing else.
Data Shared with Amazon:
Data NOT Shared with Amazon:
Notification titles and bodies are deliberately generic (for example, “You have a quest waiting!”). This is an enforced rule of the App rather than a property of the notifications that happen to exist today: no push notification RiseOhana sends carries a child’s name, a photo, a balance, or free text, on any platform.
Message Retention by Amazon: When a Fire tablet is offline, ADM queues the undelivered notification for up to seven (7) days, after which Amazon discards it.
Per-Record Deletion Limitation: Amazon Device Messaging provides no interface for recalling a notification that has already been queued for delivery. If you request deletion while a notification is queued, RiseOhana will delete the underlying data from our primary systems within 24 hours but cannot retract that queued notification; it expires on its own no later than seven (7) days after it was sent. The same limitation applies to a notification a device has already received, which is then held by the device’s operating system and is outside RiseOhana’s reach.
Token Lifecycle: ADM registration identifiers follow the same lifecycle as the FCM and APNs tokens described in Section 4.5 — registered when notification permission is granted, deregistered on logout, and deleted from RiseOhana servers on account deletion or anonymization. They are app-specific identifiers — they are not persistent hardware identifiers (IMEI, AAID, IDFA) and cannot be used to track a child across apps or services.
Amazon Data Processing: Amazon Device Messaging acts as a message relay, under Amazon’s developer terms for that service. RiseOhana does not use Amazon Advertising, Amazon Analytics, or any other Amazon service, and no child or Parent data reaches Amazon other than what is listed above.
Purpose: Measuring traffic to the public marketing website and attributing app installs to their source.
Data Processed: Page URL, referring page, browser and device characteristics, and approximate location derived from IP address, collected by Google Analytics through Google Tag Manager. Certain pages additionally load advertising conversion tags, including Google Ads and Reddit.
Scope: The public website only. The RiseOhana app integrates no advertising networks, ad SDKs, behavioral analytics platforms, crash reporting SDKs, social media plugins or data brokers. Authentication pages carry no analytics.
Data NOT Processed: No child data of any kind — no names, photographs, quest activity, wallet balances or account identifiers. Website analytics is not linked to a RiseOhana account.
Beyond the providers listed above, RiseOhana does not integrate data brokers, crash reporting SDKs or social media plugins.
Push notifications are relayed by Google, through Firebase Cloud Messaging and Apple Push Notification service, and by Amazon, through Amazon Device Messaging on Fire tablets. No other push provider receives data from RiseOhana.
RiseOhana retains personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected.
| Data Category | Retention Period | Justification |
|---|---|---|
| Child Photos | 30 days from submission | Parent review, quest verification, dispute resolution |
| Photo Metadata | 1 year from submission | Parental activity history, accuracy measurement |
| Quest Activity Data | 1 year from completion | Parental dashboard history, activity tracking |
| Device Session Logs | 90 days | Security, fraud detection, user support |
| Push Notification Tokens | Active session lifetime | Deregistered on logout; deleted on account deletion/anonymization |
| Wallet and Transaction History | 3 years | Financial record-keeping, dispute resolution |
| Parental Consent Records | 3 years or account lifetime | COPPA compliance documentation |
| Audit Logs | 1 year | Compliance audit and security |
| Child Profile Data | Account lifetime | Account operation |
| Parent Account Data | Account lifetime | Account operation |
After data is deleted from the primary database, it may persist in automated backups for up to 90 days. Backups are used only for disaster recovery. RiseOhana cannot delete individual records from backups on a per-record basis.
When a Parent requests deletion of a child's account:
Exceptions: Parental consent records (3 years), financial transaction records (3 years), and audit logs (1 year) are retained beyond account deletion for legal compliance.
| Method | Details | Timeline |
|---|---|---|
| In-App | Parental Dashboard > Child Data & Privacy > Delete Data | Within 24 hours |
| Send request to privacy@riseohana.com | Within 24 hours of verification | |
| Phone | [To be added] | Within 24 hours of verification |
RiseOhana will send written confirmation within 7 calendar days, specifying the date and categories of data deleted.
Under COPPA, Parents of Child Users have the following rights. RiseOhana honors these rights promptly and without charge.
Parents may review all personal information collected from their child: profile information, photos (during retention period), quest activity, wallet balance and transactions, AI verification results, and consent history.
How: Parental Dashboard > Child Data & Privacy, or email privacy@riseohana.com. Response within 30 days.
Parents may request deletion of specific photos, specific data categories, or the entire child account and all associated data. See Section 5.5.
Parents may refuse further collection at any time. The child's account will be placed in read-only mode.
Parents may withdraw consent at any time via Parental Dashboard > Consent & Privacy Settings > Revoke Consent, or by email. Processed within 48 hours.
Parents may request a copy of their child's data in CSV or JSON format. Delivered within 30 days via secure download link.
RiseOhana does not condition a child's participation on disclosure of more information than is reasonably necessary.
RiseOhana obtains verifiable parental consent (“VPC”) before collecting any personal information from a Child User, in compliance with COPPA Section 312.5.
During child account creation, the Parent is presented with a detailed consent notice covering: data categories collected, purposes, third-party recipients, a link to this Privacy Policy, and parental rights under COPPA.
| VPC Method | Description |
|---|---|
| Email Plus | RiseOhana sends a verification email. The Parent must respond to confirm consent, followed by confirmatory communication. |
RiseOhana maintains records of each parental consent (identity, date/time, method, data elements, status) for a minimum of 3 years.
No security system is perfect. In the event of a data breach affecting children's personal information, RiseOhana will notify affected Parents and applicable regulatory authorities as required by law.
For material changes, RiseOhana will: (1) notify Parents via email before the change takes effect; (2) post the updated policy; and (3) obtain new parental consent if required by COPPA. Material changes requiring new consent will not take effect for any user until that user’s Parent has provided updated consent.
Non-material changes (typographical corrections, contact info updates) may be made without advance notice.
For material changes requiring new consent, Parents must affirmatively provide updated consent before the new data practices apply to their family. For material changes that do not require new consent, continued use of the App following notice constitutes acceptance of the updated Privacy Policy.
| Privacy Contact Email | privacy@riseohana.com |
| Phone | [To be added] |
| Mailing Address | [To be added] |
| Response Time | Within 7 business days |
If you believe RiseOhana has violated your rights or your child's rights under COPPA, you may file a complaint with the Federal Trade Commission:
RiseOhana does not serve advertisements of any kind to Child Users. The App is advertisement-free for children.
RiseOhana does not sell, rent, license, or otherwise commercially transfer personal information collected from children or Parents to any third party.
RiseOhana may create anonymized or aggregated data that can no longer identify a specific individual. Such data is not “personal information” under COPPA and may be used for product improvement, analytics, and reporting. RiseOhana commits that: (a) anonymization uses industry-standard de-identification methods; (b) anonymized data cannot be re-identified to a specific child; and (c) anonymized data is not shared with third parties for marketing or advertising.
RiseOhana is based in the United States and processes personal information in the United States.
RiseOhana does not sell or share the personal information of any user, including minors, as defined under the CCPA/CPRA.
© 2026 RiseOhana, Inc. • Delaware C-Corporation