Before DonePass collects anything about your child

You are reading this because you have added a child to DonePass, or are about to. US federal law — the Children's Online Privacy Protection Act — requires us to tell you what we will collect from your child and to get your permission first. This is that notice. It is short on purpose.

Sawariya Seth LLC, doing business as DonePass, 5 Kennedy Cir, Brentwood NH support@donepass.com

1. We want to collect information about your child

DonePass cannot work without it. Here is the complete list, and nothing outside this list is collected about a child.

What	Why we need it
Your child's first name or nickname	So you can tell your children apart in the app
A colour and emoji they pick as an avatar	Visual identity. There is no uploaded picture of your child
Homework photographs your child takes	This is the product: your child photographs finished work and you approve it
An optional note your child types with a photo	So they can tell you what they did
Session records — start and end times, tasks, subjects, break requests	The focus session itself
A streak count	The streak feature
The name of your child's device as iOS reports it, e.g. "Sam's iPhone"	So you can see which devices are paired, and revoke one
A check-in from the device roughly every 30 seconds	So you know the phone is online and blocking is still in place
A push token for the device	So notifications reach the right phone
How many apps are blocked, and a one-way fingerprint of that selection	So your screen can say "12 apps blocked" and we can tell when the selection changes

We do not collect your child's surname, birth date, address, school, phone number, email address, location, contacts, or a photograph of their face. The app has no field for any of them.

We do not see what your child does on their phone. DonePass blocks apps using Apple's Family Controls framework, which is deliberately built so that an app like ours can restrict apps without being able to watch them. We never learn which apps you chose to block — iOS gives us tokens we cannot read back into names — and we never learn which apps your child opens, for how long, or what they do inside them.

2. We will not give your child's information to anyone

This is the part that matters most, and it is the reason we are allowed to ask for your consent by email rather than by taking your credit-card number or your driving licence.

We will not sell it.
We will not share it with advertisers, data brokers, or analytics companies.
We will not send it to any artificial-intelligence service. Homework photographs are not analysed by a machine; they are looked at by you.
We will not make it public. DonePass has no feed, no chat, no friend list, no leaderboard between families, and no public profile. Nobody outside your family can see anything your child puts into it, and no stranger can contact your child through it.

The only companies that touch this data are Supabase, which stores it for us under contract and may not use it for anything else, and Apple, which delivers our notifications and runs the blocking on the device. Under COPPA, handing data to a service provider that only runs the service for us is not a "disclosure" — selling it, publishing it, or giving it to a company that will use it for its own purposes would be, and we do none of those.

If that ever changes, we have to come back to you. We cannot start disclosing your child's information under the consent you are giving today. We would have to obtain your consent again, under a stricter method than email, before doing it.

3. Your consent is required, and here is how you give it

You give consent inside the DonePass app, on the screen you saw when you created your account or added your child. On that screen you:

confirm you are 18 or older;
confirm you are the parent or legal guardian of the child you are adding;
consent, item by item, to the collection described in §1;
type your full legal name as a signature.

We record what you ticked, the name you typed, which version of our privacy policy was in force, and the time.

Then we send you a confirming email. About a day later, we email the address on your account to confirm that consent was given, what it covered, and how to withdraw it. That email is the "plus" in the method this notice is part of, and its purpose is simple: if you did not give this consent, that email is how you find out. It tells you to reply to it, or to write to support@donepass.com, and we will revoke the consent and erase everything collected under it.

If you do not consent, nothing about your child is collected. There is no child profile, no session, no photograph and no app blocking, and a child profile cannot come into existence any other way. If we do not hear from you within a reasonable time, we delete the contact information we were holding in order to ask you.

4. You can change your mind at any time

You do not have to give a reason, and using DonePass is never conditioned on your agreeing to more collection than it actually needs.

Review what we hold about your child — it is all visible in the app, and Settings → Export my data gives you the whole record as a file. You can also ask us at support@donepass.com.
Stop us collecting any more — delete the child's profile.
Delete everything — Settings → Delete Account, or ask us. §8 of the Privacy Policy says exactly what that removes and what survives.
Withdraw consent — deleting the child profile or the account withdraws it, and also ends any app blocking on that child's device.

Withdrawing consent does not make what we did beforehand unlawful, and it does not cost you anything.

5. Two things about blocking you should know before you consent

They are in our Terms as binding promises, but they belong in a consent notice too, because they are the answers to the two questions a parent actually has.

Your child can always call and text. DonePass never blocks Phone or Messages. There is no setting that changes this, for you or for us. A child in a DonePass session can always reach you, and always reach emergency services.

Blocking always ends by itself. Every session carries a hard three-hour ceiling. When it is reached the blocking lifts — whether or not you did anything, whether or not either phone has a network connection, and whether or not our servers are working. And the control that removes all blocking is available to you at all times in the parent app.

6. Where to read more, and how to complain

The full Privacy Policy describes everything above in more detail, including how homework photographs are stored and how long we keep things.

If you think we have collected information about your child without your consent, write to support@donepass.com and we will delete it. You may also complain to the US Federal Trade Commission at ftc.gov/complaint, or, in the UK and EU, to your national data-protection authority.