ThinkForTreatsThinkForTreats

Privacy policy

Last updated 5 October 2026

The short version

ThinkForTreats is used by a parent, not by a child account. We ask for as little about your child as we can: a nickname you choose and an avatar. We do not show ads, we do not sell personal information, and we do not use your family’s data to train AI models.

What we collect

Parent account. Your email address, used to sign you in with a one-time link and to contact you about your account. If you set a Parent PIN, we store only a cryptographic hash of it — the PIN itself is never saved and cannot be recovered from what we hold.

Child profiles. A nickname you enter and a cartoon avatar picked from our preset set. There is no way to upload a photo. We do not ask for a child’s real name, date of birth, address, or contact details, and you should not enter them.

Quests. The reward you type, the difficulty you pick, the generated story and puzzles, and your child’s answers and progress.

Payments. If you subscribe, payment is handled by Lemon Squeezy, which sells the subscription to you as our merchant of record: it collects your card and billing details, charges any sales tax, and sends your receipts. We never see or store your card number; we keep only the customer and subscription identifiers Lemon Squeezy gives us, and your plan's status.

Feedback and waitlist. Any message you send us, and your email address if you join the waitlist.

Job applications. If you apply through our careers page: your name, email address, the area you’re interested in, any link you share, and your message. We use them only to consider you for work with us.

AI-generated content

When you create a quest, the reward text you type, your child’s nickname, and the difficulty you choose are sent to a third-party AI provider to generate the story and puzzles. Your email address and your PIN are never included.

When your child first opens a quest, we may create a cover picture for it with a separate AI image provider. It receives only a description of the scene and of the cartoon avatar your child picked, never the nickname or anything else about your family. Each picture is made for one quest only, contains no personal information, and is deleted with your account.

Prompts are screened before generation. Profanity and sexual, hateful, or violent language are rejected, as are things that look like personal details — PINs, passwords, email addresses, phone numbers, and card numbers. Stories and puzzles are written by an AI model and are not reviewed by a person first, so skim a quest before handing over the device.

Children's information

The account holder is a parent or guardian. Children do not create accounts, do not enter an email address, and are never shown ads or in-app purchases. The only information about a child that reaches us is what you choose to enter: a nickname, an avatar, and puzzle answers.

If you believe a child has provided us information directly, contact us at support@thinkfortreats.com and we will delete it.

How we use it

To run the service: signing you in, generating and storing quests, tracking progress, gating reward claims behind your PIN, enforcing trial and fair-use limits, processing subscriptions, and responding when you contact us. We do not sell personal information, and we do not use your content for advertising.

Who we share it with

Only the service providers needed to operate the product: our hosting and database provider, our AI story and image providers, our email provider, and Lemon Squeezy for payments. Each receives only what their function requires. We may also disclose information where the law requires it.

Keeping and deleting your data

We keep your account data while your account exists. You can delete a child profile or a quest at any time from within the app; deleting a quest does not return the trial slot it used.

To delete your whole account and everything attached to it, email support@thinkfortreats.com. You can also ask us for a copy of what we hold, or ask us to correct it.

Security

Data is transmitted over encrypted connections, there are no photo uploads to protect, and access to your rows is enforced at the database level. Parent PINs are stored only as hashes. No system is perfectly secure, but we treat family data as the sensitive category it is.

Changes and contact

If we change how we handle data we will update this page and its “last updated” date. Questions, requests, or concerns: support@thinkfortreats.com.

See also the terms of service and the fair use and content rules.