Privacy Policy for Alba
Last updated: 31 July 2026
Alba is a habit and reward app that parents set up for their children. We built it for families, and we have deliberately kept the amount of personal information it handles as small as we could. Alba contains no advertising, no analytics, and no tracking of any kind.
Who we are
Alba is operated by the app's developer, an individual developer trading as Alba. For any privacy question or request, contact privacy@way2goalba.com.
Information we collect
From the parent or guardian
| What | Why |
|---|---|
| Email address and password | To create and secure the account, and to send password resets. Passwords are stored only as a cryptographic hash and are never visible to us. |
| Display name and family name | To label the family and show who approved a task. |
| Time zone | To decide when a day ends, so tasks and streaks reset at local midnight. |
| Parent PIN | To lock the grown-up screens. Stored only as a hash. |
| Notification settings and device push token | To send the daily reminder and weekly summary you ask for. |
About the child, entered by the parent
| What | Why |
|---|---|
| A display name | To show whose journey it is. A first name or nickname is enough — the parent chooses what to enter. |
| An optional 4-digit PIN | So siblings sharing a device open the right profile. Stored only as a hash. |
| Companion name | The name the child gives their companion character. |
| Activity in the app | Which tasks were completed and when, points, experience, levels, streaks, skills unlocked, and reward requests. This is what makes the journey work. |
| Task photos, only if the parent turns them on | Optional proof for a task, such as a tidied room. Photos are private to the family (see Security below) and are never used for anything else. |
What we do not collect
- No email address, phone number, or login for a child.
- No date of birth, age, home address, or location data of any kind.
- No contacts, calendar, microphone, or health data.
- No advertising identifiers, and no profiling or behavioural tracking.
- No third-party analytics. Alba contains no analytics or advertising software.
How we use information
Only to make the app work for your family: to sign you in, show the right tasks on the right day, keep score, deliver the notifications you enable, and let a parent approve what a child has done. We do not use personal information to build profiles, to advertise, or to train machine-learning models, and we never sell or rent it.
Who else processes it
We use a small number of service providers to run the app. They process data only on our instructions and only to provide their service.
| Provider | Purpose |
|---|---|
| Supabase | Database, account sign-in, and private file storage. |
| Expo (Expo Application Services) | Delivery of push notifications and of app updates. |
| Resend | Sending account emails, such as a password reset code. |
| Apple | App distribution and delivery of push notifications to your device. |
No other party receives personal information from Alba. We may disclose information if we are legally required to, for example in response to a valid legal request.
Children's privacy
Alba is designed for children to use, with a parent or guardian in control throughout. Consistent with the Children's Online Privacy Protection Act (COPPA) and comparable laws elsewhere:
- Only an adult can create an account. A child cannot register, and is never asked for an email address, a phone number, or any contact detail.
- A child's profile holds only what the parent typed in — typically a first name — plus their progress in the app.
- There is no chat, no messaging, no social feature, and no way for a child to communicate with anyone outside their own family.
- Nothing a child does in Alba is shared publicly or with other families.
- A parent can view, change, or permanently delete everything about their child at any time, from inside the app.
If you believe a child's information has reached us in some way not described here, email privacy@way2goalba.com and we will delete it.
Security
- Every family's data is isolated at the database level. A request can only ever read or change rows belonging to a family the signed-in adult is a member of, enforced by the database itself rather than only by the app.
- Task photos are held in private storage, are not publicly reachable by URL, and are viewable only through short-lived links issued to that family.
- Passwords and PINs are stored only as hashes.
- Traffic between the app and our servers is encrypted in transit.
No system is perfectly secure, but we keep the amount of information we hold small precisely so there is little to lose.
Keeping and deleting information
We keep your family's information for as long as the account exists. You can delete it yourself at any time: open Alba, go to the parent screen, and choose Delete account and all data.
This is immediate and permanent. It removes the family and every child in it, along with all tasks, photos, points, levels, streaks, skills, and reward history. It cannot be undone, and we keep no archived copy. Routine encrypted backups are retained by our database provider for a short period and expire on their own.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to some processing. Most of this you can do directly in the app; for anything else, email privacy@way2goalba.com and we will respond within 30 days.
Where information is held
Alba's data is stored on servers operated by our providers, which may be located outside your country. Wherever it is held, it is protected as described in this policy.
Changes to this policy
If we change this policy we will update the date at the top of this page. If a change materially affects how we handle personal information, we will also tell you in the app before it takes effect.
Contact
Questions, requests, or concerns: privacy@way2goalba.com.