StarSprout
A privacy-first family app that turns chores into quests for children aged 6 to 12, with a calm dashboard for parents.
- TEFY's role
- Product, design, engineering, AI integration, privacy design
- Related service
- Build AI products
- Stack
- Next.js, Supabase with RLS, Claude API server-side, PWA
- Timeframe
- Dates to be confirmed
The problem
Parents want children to build responsibility without nagging. Most chore apps either treat children like adult users or lean on pressure mechanics. StarSprout had to be motivating for a seven-year-old and compliant with UK and Canadian children's privacy law at the same time.
How it works
- 01Parent creates a family and child profiles with a nickname, age band and avatar; children have no email or surname
- 02Children sign in on their own device with a family QR code and PIN
- 03Parents assign quests; children complete them and earn points and badges
- 04Parents approve, see a weekly summary, and can export or delete everything
AI functionality
Server-side generation of quest storylines and encouragement copy, with versioned prompts, cached outputs, a safety check before anything a child can see, a static fallback, and a kill switch. No names, photos or free text are ever sent to the model.
Engineering decisions
- Children are not auth users; child devices receive scoped session tokens that expire after seven days of inactivity
- Points, quest events and consents are append-only ledgers; balances are views, never updated rows
- Row level security on every table, with positive and negative database tests for every policy
- Friends and leaderboards are off by default; a friend connection needs recorded consent from a parent in each family
- No third-party scripts, trackers or external links on any child surface
Outcomes
Not yet launched. A production data-protection review by external counsel is the remaining launch blocker; usage results will follow launch.

