Privacy Policy
Effective: October 15, 2026
1. About this policy
Agimon Pty Ltd (“Agimon”, “we”, “us” or “our”) provides Oinky, a family chore, reward and focus app, and the oinky.org website. This policy explains how we handle personal information when a parent, carer or child uses Oinky.
A parent or carer creates and manages the family. Children use Oinky within that family under the parent or carer’s direction. If you do not agree with this policy, please do not use Oinky.
2. Information we collect
Account and family information
We collect a device-generated account identifier, session information and support messages. Family records can include family and member names, roles, a child’s age band, invitations, device public keys and onboarding status.
Chores, rewards and activity
We store chores, schedules, proof requirements, parent approvals, reward choices, virtual-coin balances and transactions, redemptions, streaks, notifications and related timestamps.
Photo and video proof
Raw chore photos and videos are assessed on the child’s device. They are encrypted for the parent and transferred directly between nearby family devices. Oinky’s servers do not receive or store the raw proof media. We do receive limited completion metadata, such as a media hash, the on-device assessment result, confidence or quality scores, a server-generated aggregate status, review state and timestamps. Proof media may remain encrypted on family devices until review or deletion.
Oinky Focus
If a family uses Oinky Focus, we store schedules, policy settings, labels, time zone, authorization and heartbeat status, break or purchase events, and opaque Apple Screen Time selection tokens. Those tokens identify app and category selections to Apple’s frameworks but are not readable by us as a list of the child’s installed apps.
Subscriptions and purchases
Apple processes subscription payments. We receive product and transaction identifiers, purchase environment, subscription status and expiry, and a random family account token so we can grant, restore and revoke the correct family’s access. We do not receive full payment-card details.
Device, diagnostics and analytics
We may collect app version, device and operating-system information, IP address, user agent, Expo push tokens, crash reports and performance diagnostics. When website analytics is enabled, we record Oinky call-to-action clicks and limited campaign labels such as source, campaign and content. We do not use website session recording or broad click capture. Our in-app product analytics use random analytics-only install and household identifiers to measure onboarding, purchase, family linking and feature adoption over time. During a parent’s first-time setup in the app, PostHog also records the setup screens (a session replay) so we can see where setup is confusing. Recording stops when setup is complete, is made only for a confirmed parent and never for a child, and can include what is typed or shown on those screens, such as a child’s first name. These events can include a journey step, selected membership plan, purchase outcome, role, and chore, reward or Focus milestone. They do not include names, email addresses, account IDs, operational family or child IDs, invite codes, proof media, chore or reward text, transaction IDs, or raw error messages. We may use aggregate counts of on-device model outcomes, durations and fallback reasons to understand reliability. Model prompts, responses, summaries, generated speech and child activity text are not included in analytics or crash reports.
For iOS app-install measurement, Oinky sends Meta a generic app-activation event only while the app is in a parent session. We disable Apple advertising ID collection and do not ask for App Tracking Transparency permission. Meta may process technical device or network information needed to deliver and aggregate that event. We do not send account or child identifiers, chore, reward or Focus activity, proof media, or purchase events to Meta.
3. How we use information
- provide family accounts, chores, proof review, rewards, notifications and Oinky Focus;
- authenticate users, pair family devices and recover access after a reinstall or device change;
- process, restore and administer subscriptions and prevent duplicate or fraudulent transactions;
- keep Oinky secure, investigate errors, provide support and maintain service reliability;
- understand feature performance and improve Oinky using appropriately limited analytics; and
- comply with law, enforce our terms and protect users, Agimon and others.
We do not sell personal information. Oinky does not use children’s information for targeted advertising or cross-app tracking.
4. Children and parent controls
Oinky is designed for families, but the service is contracted and controlled by a parent or carer. The adult must have authority to create the family, add a child and provide any consent required for the child’s use. Children should not submit information that Oinky does not ask for.
Oinky does not provide public child profiles, public posting or child-to-stranger messaging. Parents can review family information and delete the family account from the app. A parent or authorised carer may also contact us about a child’s information.
5. When we share information
We share information only as needed to operate Oinky, at your direction, or where required by law. Providers can include Apple for subscriptions, notifications and Screen Time features; RevenueCat for App Store purchase records and subscription reporting; Cloudflare for hosting, databases and security; Expo for push delivery; Sentry for crash and performance diagnostics; PostHog for limited website and in-app product analytics when enabled; Meta for aggregated measurement of generic iOS parent app-activation events; and email providers used for support or transactional messages.
We may also disclose information to professional advisers, regulators or law enforcement where reasonably necessary, or as part of a corporate transaction subject to appropriate protections. Providers may process information in Australia, the United States or other countries where they or their infrastructure operate.
6. Retention, deletion and security
We retain information while a family account is active and for as long as reasonably needed to provide the service, resolve disputes, prevent fraud and meet legal obligations. Retention periods vary by record type. Encrypted proof media is controlled on family devices and is cleared through the proof review or device-deletion flow.
A parent can delete the account in Oinky. Deleting the parent-owned family removes family members and associated server records, subject to limited records we must or are permitted to retain, such as transaction, security, backup or legal records. Apple separately controls App Store purchase history and subscription records.
Account deletion clears the deleting device’s local analytics identifier. Deleting the family creator’s account also removes Oinky’s stored link to the household analytics identifier. If another family member deletes their account, the household identifier remains while the family continues. Previously collected product analytics may remain as deidentified measurement records after a link is removed. Events shared by a household cannot be separated into one person’s activity after family devices have been linked.
We use technical and organisational safeguards appropriate to the information, including encryption in transit, access controls, signed purchase verification and device-to-device encryption for proof media. No system is completely secure, so we cannot guarantee absolute security.
7. Your choices and privacy rights
You can manage notifications and Screen Time permissions in Apple device settings, manage or cancel a subscription through your Apple account, and clear or block website cookies and browser storage through browser controls. Some choices may limit features.
Subject to applicable law, you may ask to access or correct personal information, request deletion, object to or restrict certain processing, or make a privacy complaint. We may need to verify your identity and authority over a child or family before acting.
We aim to respond within a reasonable time. If an Australian privacy complaint is not resolved after you first contact us, you may be able to complain to the Office of the Australian Information Commissioner.
8. Contact and updates
Email Agimon Pty Ltd at help@oinky.org for access, correction, deletion or privacy complaints. Please describe the request and the Oinky account or family it concerns without sending passwords, raw proof media or unnecessary child information.
We may update this policy as Oinky or the law changes. We will post the updated policy here, revise the effective date and provide additional notice in the app when a material change requires it.