Privacy

Nothing you do in Earned leaves your phone.

That is not a promise about how carefully we handle your data. It is a description of how the app is built: there is no server, no account, and no code in Earned that uploads anything anywhere.

What the app stores, and where

All of it stays in Earned's own sandbox on your device. None of it is transmitted.

Your bank and log

Activities, rates, banked minutes, earn and spend history, streak, level and trophies. Stored in the app's own preferences.

Proof photos

Photos taken to back up a claim — a finished chore, a spot check during a timer, one frame from a counted set. Written as JPEGs in the app's Documents folder. Deliberately excluded from iCloud and device backups, because these are pictures taken inside your home to settle a claim within days, not something to be restored onto a new phone years later. They are deleted when you delete the entry, when you reject a claim, or when you erase everything.

Your approval code

Never stored. What is stored, in the device Keychain, is a salted SHA-256 hash of it — enough to check a code, not enough to recover one. It is marked device-only, so it does not sync to iCloud Keychain and does not transfer to a new phone.

Which apps you block

Chosen in Apple's own picker, which hands Earned opaque tokens rather than names. The app never learns which apps you picked. It cannot report them because it cannot read them.

The camera

Earned uses the camera for two things: counting reps, and taking proof photos. Both happen entirely on your device.

• Rep counting uses Apple's on-device body-pose detection to measure joint angles in the live camera feed. The video is analysed frame by frame in memory and discarded. It is never recorded and never uploaded.
• Proof photos are still images: one frame from a counted set, a picture of a finished chore, or a spot check while a timer runs. They are saved locally as described above.
• Earned does not read your photo library, and does not add anything to it.
• Proof is off by default. Until you switch it on in Settings, the app never opens the camera.

Screen Time

Blocking is done by Apple's Screen Time system through the Family Controls framework, which is why it holds. Earned tells iOS to shield a set of tokens; iOS does the rest. No usage data, app names, or browsing history is collected or seen by Earned or by us.

The subscription

Purchases are handled entirely by Apple. Earned never sees your name, your payment details, or your Apple Account. All the app receives back is a signed receipt saying whether a subscription is currently active.

This is the only part of Earned that touches the network, and the connection is Apple's, made by the operating system's own StoreKit framework. Apple's handling of that transaction is covered by Apple's privacy policy.

Children

Earned is built to be set up for a child, so this matters. The answer is the same as everywhere else on this page: the app collects nothing, transmits nothing, and has no account system, so no information about a child — their photos, their exercise, their app usage, their age — is ever sent anywhere. Proof photos of a child stay on the device that took them and are kept out of backups.

Deleting your data

Settings → Erase everything clears the bank, the log, every custom activity, and every proof photo. Deleting the app removes all of it along with the Keychain entry. Because none of it was ever sent anywhere, there is nothing else to request, export, or have erased.

Changes

If a future version of Earned collects or transmits anything, this page will say so plainly and the date below will change before that version ships.

Contact

Questions about any of this: eric@masonsystems.com

Last updated 29 July 2026 · Earned 1.0