Draft template — have counsel review before launch.
Privacy policy
Lunchbox Quest is used by children but operated by parents. This page explains, in plain language, what we store, what we refuse to store and the controls you have.
Our principles
- The parent owns the family account; children never sign up on their own.
- We store a nickname and an age — never a surname, school, address or photo of your child.
- No advertising is targeted at children. Gear suggestions are shown to parents and are clearly disclosed.
- Child profiles are private. Share cards hide the nickname unless you turn that on.
- You can export or permanently delete all family data at any time from Account.
- Analytics is first-party and only runs with your consent; 'essential only' turns it off.
Data minimisation
We designed the product with the US Children’s Online Privacy Protection Act (COPPA) and comparable child-privacy rules in mind: collect the minimum, keep the parent in control, never advertise to children.
| We store | We refuse to store |
|---|---|
| Child nickname (first word, up to 20 characters) | Surname or full name |
| Age (4–17) | Date of birth |
| Allergies, diet restrictions and your “never serve” list | School, class or teacher |
| Taste events (food × answer × time) | Location, address or geolocation |
| Chosen world, avatar, XP and quests | Photos of the child |
| Optional parent meal reports (outcome, prep time, reaction, difficulty) | An email address or phone number for the child |
Forbidden fields are stripped even if a form tries to submit them, and the children table in our database has no columns for them.
Where your data lives
The whole experience — taste game, budget, generated week, shopping list and optional family diary — runs on your device with no account. Data stays in your browser’s storage until you choose to sign in as a parent. If you do, the same family snapshot is synced to our servers so you can use another device; the newest copy wins.
Optional family diary
If you choose to keep a two-week diary, we also store your start and finish dates, optional planning-time estimates and whether you would use the app again. These observations follow the same storage, export and deletion controls as your family data. The separate trial-report download omits names, child identifiers, ages and allergy profiles. It is not submitted to a research team automatically.
Parent control
- The parent owns the family account; children never sign up on their own.
- Account → Export data downloads everything as a JSON file.
- Account → Delete family permanently deletes every record and clears the device.
- Share cards say “My 6-year-old” unless you explicitly turn the nickname on. Nothing about a child is public by default.
No advertising to children
Kid screens contain no commerce of any kind. Gear suggestions appear only on parent screens, are limited to two contextual items, and sit next to a visible affiliate disclosure. We do not sell or share personal data for advertising.
Analytics and consent
Analytics is first-party only — no third-party tags or scripts. The consent banner offers “Essential only” as an equal choice. If you choose it, no usage analytics leave your device; the app enforces this locally and our server refuses events without consent. Analytics properties are a fixed list of keys (no free text, no nicknames). You can change your choice in Account.
Photos
Photographing the returned lunchbox is optional and only ever used as assistance. Your and your child’s answers are the source of truth. In the current version the photo stays on your device.
Allergies
Allergies are a hard filter in the planner. Every lunch and shopping list shows: “Always verify product labels. Ingredients can vary by brand and store.” We never claim a lunch is “allergen-free”.
Parent accounts and payments
If you create an account we store your email address, a hashed sign-in token and the family snapshot described above. Sign-in links expire quickly and work once. If you subscribe, payment details are handled by our payment provider; we store the subscription status and provider identifiers, never card numbers.
Contact
Questions, export or deletion requests: hello@lunchbox-quest.example. See also our terms and affiliate disclosure.
Draft template — have counsel review before launch.