Privacy, in plain language
Last updated: July 16, 2026
Treefort is built by a parent, for parents. Here is exactly what we collect, why, and what we will never do. No legalese padding — if anything here is unclear, email us and a human answers.
What we collect
From you (the parent): your email address (for sign-in links, receipts, and the weekly report) and your payment, which is processed by Stripe — we never see or store card numbers.
About your child: a nickname (any name you like — it does not need to be real), a birth year (so missions match their age band), a Builder Style from the quiz, and their activity inside Treefort: which missions were offered, which effort button was tapped, acorns earned, and fort visits. That is the complete list.
What we never collect
No photos, no audio, no video, no chat or free-text from children, no location, no contacts, no advertising identifiers. The child side of Treefort contains zero analytics trackers and zero ads — that is a build-time rule enforced in our code, not a promise on a page.
How we use it
To run the product: assign age-appropriate missions, remember progress, show Pip what happened yesterday, and send you the weekly report. That is all. We do not sell or rent any data, we do not build advertising profiles, and we never will — the business model is your subscription, full stop.
Who touches the data (our processors)
Supabase (database and sign-in), Stripe (payments), Resend (transactional email), and Vercel (hosting). Each receives only what it needs to do its job.
Children's privacy
Treefort is a parent-paid, parent-managed product. Accounts belong to adults; children use Treefort on a parent's device through the parent's account. We collect the minimum about a child (nickname, birth year, style, activity), always provided by the parent. We are designed with COPPA's spirit at the center: parents create, see, and can delete everything.
Your controls
Email parents@hello-treefort.com from your account email to export or permanently delete your household's data — we complete deletions within 30 days and confirm when done. Deleting your account deletes your children's records with it.
Cookies
One kind: the session cookie that keeps you signed in. No third-party or advertising cookies anywhere.
Changes
If this policy materially changes, we email every account before it takes effect.
Treefort · parents@hello-treefort.com