h Haul
How it works Features Pricing
Join waitlist →

Privacy Policy

Haul is a family chore tracker. Parents add kids, kids do chores, and Haul keeps the bookkeeping. We collect what we need to make that work — nothing more.

Last updated: May 25, 2026 · Effective date: May 25, 2026

1. The short version

  • We don't sell your data. Ever. We don't run ads.
  • We don't collect anything from kids directly. A parent creates each kid's profile.
  • We never move actual money. Wallet balances are bookkeeping records; parents pay kids out-of-band.
  • You can export or delete your data. Email us and we'll handle it within 30 days.
  • AI features send only anonymized stats — never your kids' names or photos — to our AI provider.

2. Who runs Haul

Haul is operated by Trackside Software LLC, a Virginia limited liability company. If you need to reach us about anything in this policy — including data access, correction, or deletion requests — write to [email protected].

3. What we collect

From parents

  • Account info from Clerk: your name and email when you sign up.
  • Household info: name, rooms, pets, and any chore preferences you enter during Smart Start.
  • Subscription info from Stripe: if you upgrade to Plus or Family, Stripe holds your payment details. Haul stores only the Stripe customer ID, subscription ID, and current plan tier. We never see or store your card number.
  • Chore approval activity: which chores you approve, reject, and when.

About kids (entered by parents)

  • First name (and last name only if you choose to add one)
  • Birthday (used to calculate age, set age-appropriate chores, and auto-update over time)
  • Avatar color choice
  • Optional payout handle (e.g., Venmo username) and method
  • Optional phone number (for future SMS reminders — currently unused)
  • A hashed 4-digit PIN the kid sets in person, used only to sign in. The raw PIN is never stored or transmitted.

From kids directly

  • The PIN they choose during their first sign-in (hashed before storage)
  • Chore completion details: timestamp, optional photo proof, optional note
  • Theme and cosmetic choices for their personal dashboard
  • Charity preferences and payout requests

We don't ask kids for email, full name, location, contacts, or any other identifying info. Photos are only collected when a chore explicitly requires photo proof — the parent enables this per chore.

Automatically

  • Standard request metadata: IP address, user agent, timestamps. Used for security, debugging, and rate limiting.
  • Auth session cookies (Clerk for parents; an HMAC-signed cookie for kids).

4. How we use it

  • To operate Haul: show your dashboard, track chore status, calculate wallet balances, send notifications.
  • To send notifications: push notifications when chores are approved, rejected, or completed. You can disable these per device in Settings → Notifications.
  • To generate AI digests and Smart Start suggestions: we send structured, anonymized stats (chore counts, dollar amounts, day-of-week patterns) to our AI provider, Anthropic. We never send kid names, photos, or freeform notes.
  • To process subscription payments: Stripe handles billing; we only see the result (plan tier and renewal status) via webhook.
  • To enforce our Terms: investigate abuse, fix bugs, prevent fraud.

5. Who else sees it (sub-processors)

We use a small number of vendors to run Haul. Each handles a specific slice of data and operates under their own privacy policy:

  • Clerk — parent authentication. Sees parent email + display name. clerk.com/legal/privacy
  • Stripe — subscription billing for Plus / Family tiers. Sees parent payment details. stripe.com/privacy
  • Neon — Postgres database hosting. Stores all household data, encrypted at rest. neon.tech/privacy-policy
  • Anthropic — AI provider for Smart Start chore generation and the optional Weekly Digest. Receives only anonymized structured stats, never raw user content. anthropic.com/legal/privacy
  • Vercel (or our hosting provider) — runs the web servers. Sees request logs.
  • PostHog — product analytics. Receives feature-usage events; kid events are anonymized to a household identifier. posthog.com/privacy
  • Sentry — error monitoring. Receives crash reports with PII and large payloads scrubbed. sentry.io/privacy

Future planned sub-processors (not yet active): Twilio for SMS reminders, Resend for email delivery, and Network for Good for charity payout processing. This policy will be updated and you'll be notified before any of these go live.

We do not use any advertising or social-media trackers in the Haul app, and we never sell data. We do use two operational tools: PostHog (product analytics — which features get used, so we can improve them; kid activity is recorded under an anonymous household identifier, never a kid's name, and session recordings are disabled) and Sentry (error monitoring — crash reports with identifying details and large payloads scrubbed before they leave our servers).

6. Children's privacy (COPPA)

Haul is built with the assumption that kids on the platform are between ~6 and 17 years old, and that a parent is the verifiable adult who creates and manages each kid's profile. This is why our kid auth flow uses parent-issued PINs instead of email-based sign-up.

Kids do use Haul directly — marking chores done, writing optional notes, and attaching optional photo proof — so we treat Haul as a service covered by COPPA and operate with verifiable parental consent: only a parent can create a kid profile, every kid signs in with a parent-issued PIN, and the parent consents to our collection practices when creating the household (we record the date and policy version of that consent). The profile information itself — first name, birthday, avatar — is supplied by you, the parent.

We collect no more information from kids than is reasonably necessary to run the service, we never use kids' information for advertising or sell it, and chore photos are deleted at review (see below).

As a parent, you can at any time:

  • View what information we have about your kid (it's all on the family settings screen and their wallet/activity pages)
  • Edit or delete any kid profile from Settings → Family
  • Delete your entire household — which removes all kid profiles, wallet history, and chore data — by emailing us

Chore-proof photos are ephemeral. A photo exists only while its chore is waiting for parent review, and is deleted the moment the parent approves or rejects it. If a chore is never reviewed, its photo is automatically deleted after 7 days. We never build an archive of your kids' photos.

7. We do not move money

Critically: Haul does not transfer, escrow, or hold actual money. Kid "wallets" are bookkeeping records of approved chore earnings. When a kid requests a payout, Haul simply notifies the parent — the parent then sends the actual money via Venmo, PayPal, Zelle, Apple Cash, cash, or whatever method they prefer. Marking a payout "sent" in Haul is just a bookkeeping entry; the underlying transfer happens outside Haul.

Charity donations follow the same pattern: Haul records the kid's intent to donate a portion of their earnings, but the actual donation is currently the parent's responsibility. (A future integration with Network for Good will let parents donate through Haul; we'll update this policy and ask for your consent before that goes live.)

8. Data retention

Active accounts: we keep your data for as long as your household account is active.

Cancelled accounts: when you delete your household, we permanently delete your data within 30 days. Some records may be retained longer if required by law (for example, Stripe billing records we don't control directly).

9. Security

  • All traffic is encrypted with HTTPS / TLS.
  • Database is encrypted at rest by our hosting provider.
  • Kid PINs are hashed with bcrypt-style algorithms — never stored or logged in raw form.
  • Kid session cookies are HMAC-signed so they can't be forged.
  • We do not store payment card numbers. Stripe handles all payment details.

No system is perfectly secure. If we discover a breach affecting your data, we'll notify you within 72 hours of becoming aware, following the standards required by applicable state laws.

10. Your rights

Depending on where you live, you have some or all of these rights:

  • Access — request a copy of the data we have about you and your household
  • Correction — fix anything that's wrong
  • Deletion — ask us to delete your household and all associated data
  • Portability — get your data in a machine-readable format (we'll add a self-serve export in a future release; in the meantime, email us)
  • Opt out of sale — we don't sell data, so there's nothing to opt out of, but California residents specifically have this right under CCPA

To exercise any of these rights, email [email protected]. We'll respond within 30 days.

11. International transfers

Haul is operated from the United States, and our hosting and sub-processors are primarily US-based. If you access Haul from outside the US, your data is transferred to and processed in the US. By using Haul you consent to this transfer.

12. Changes to this policy

We'll post any material changes to this page and bump the "Last updated" date. For substantive changes (new data we collect, new vendors, new uses), we'll notify parent account holders by email at least 30 days before changes take effect.

13. Contact

Questions, requests, complaints, or just wanting to talk to a human: [email protected].

h Haul

Chores that pay — no bank required. Built for actual teens. Launching summer 2026.

Privacy Terms Contact
© 2026 Trackside Software LLC · Ashland, Virginia