← Brash Digital

Privacy Policy — Gather

Last updated: 11 September 2026 · Applies to the Gather app and its web version

Gather is made by Brash Digital (ABN 11 339 332 014), a sole trader based in Australia. It helps families manage chores, a shared calendar and rewards together. This page explains exactly what Gather collects, why, where it goes, and how to get rid of it.

What we collect

WhatWhy
Account emailSigning in, confirming your address, and resetting your password. One email per household.
Family member namesSo chores and events can be assigned to people. Entered by whoever manages the household.
Profile & task photosOptional. Used only to illustrate a person or a chore.
PINsOptional per-person lock. Stored as a one-way bcrypt hash — we cannot see or recover the original.
Chores, events, rewards, pointsThe content the app exists to store for you.
Subscription statusWhich plan your household is on, whether it is active, and when it runs until.

Gather has no advertising, no analytics, and no tracking of any kind. It does not collect your location, your contacts, your device identifiers, your browsing, or any advertising ID. There is no advertising or analytics SDK in the app. The only third parties that see anything technical about your device are the sign-in bot check described under “Keeping sign-in secure”, and the subscription service described under “Payments”.

How households are kept apart

Every household's data is isolated at the database level, so one household cannot read another's. The single exception is deliberate and opt-in: if you link with another household and send or accept an event request, the details of that specific request — its title, your proposed times, any note you write, and which of your family members are involved — are visible to that household. Nothing else crosses.

About photos

Photos you upload are kept in private storage. They are not publicly accessible and cannot be reached by a plain web address. When the app needs to show one, it requests a temporary link that is issued only to your household's signed-in session and stops working after seven days.

Photos are also resized before they are uploaded, so we store a version sized for the app rather than the full-resolution original from your camera. Removing a photo in the app removes it from storage.

Where your data is stored

Gather's database, sign-in system and file storage are provided by Supabase, which stores and processes this data on our behalf as our data processor. Confirmation and password-reset emails are sent through Resend, which receives only your email address and the contents of that message. We do not run our own servers. Subscriptions are handled through Google Play or the App Store, and RevenueCat, described under “Payments” below.

All traffic between the app and our systems is encrypted in transit using HTTPS.

Keeping sign-in secure

When you create an account, sign in, ask for a password reset, or change your password, Gather runs an automated bot check provided by Cloudflare Turnstile. This is what stops scripts from mass-creating accounts or repeatedly guessing at the sign-in form. Usually it resolves by itself; occasionally it asks you to tick a box.

To make that judgement, Cloudflare receives your IP address and basic technical details about the device or browser making the request. It does not receive your email address, your password, your family's names, or anything else about your household. Cloudflare acts as our processor for this single purpose.

The check is not used for advertising, analytics or tracking, and it does not set tracking cookies. What comes back to us is a simple pass or fail — we never receive a profile, a score, or any ongoing record of you.

Payments

If you take out a subscription, the payment itself is handled entirely by the store you subscribe through — Google Play on Android, or the App Store on iPhone. We never see or store your card details, and nor does anyone acting on our behalf.

Managing that subscription — confirming a purchase is genuine, and keeping track of renewals, cancellations and refunds — is done for us by RevenueCat, acting as our data processor. RevenueCat receives the purchase details from that store together with a random identifier for your account. It does not receive your email address, your family's names, or anything else from inside the app.

That identifier is what lets a subscription follow your account rather than one particular phone, so reinstalling the app or moving to a new handset doesn't lose what you've paid for.

All we record ourselves is which plan your household is on, whether it is currently active, and when it runs until.

What we never do

Children's information

Gather is designed for families, so profiles in a household often belong to children. That information is created and controlled entirely by the adult who owns the household account — a child cannot create an account, and Gather does not ask children for any information directly.

Children's information is never used for advertising, never sold, and never shared outside your household, apart from the opt-in household-linking case described above. The adult who manages the household can edit or delete any family member's name, photo or PIN at any time, and can delete the entire household at any time.

Deleting your data

Individual items: you can edit or delete any family member, chore, event, reward or photo from within the app at any time. Deletions take effect immediately.

Your whole account: you can permanently delete your household and everything in it, in either of two ways:

Either route permanently removes your household and every family member, chore, event, reward, point, photo and subscription record belonging to it, along with the login itself. It cannot be undone, and we cannot restore it afterwards.

How long we keep things

We keep your data for as long as your account exists, because the app has nothing to show you without it. We do not archive it or keep copies after deletion.

When you delete your account, the data is removed from our live systems immediately. Residual copies may persist for up to 30 days in our hosting provider's routine backups before ageing out, after which no copy remains.

Your rights

You can access your data by using the app, correct it by editing it, and erase it using either deletion route above. If you would like a copy of your household's data in a portable form, or have any other request about your information, email us and we'll help.

Changes to this policy

If we change how Gather handles data, we'll update this page and the date at the top. Significant changes will be flagged in the app.

Contact

Questions about this policy, your data, or a deletion request: brashdigitalapps@gmail.com

Brash Digital · ABN 11 339 332 014 · Australia