Privacy Policy

FamilyBank is a virtual allowance tracker. Parents record the allowance/debt they owe their kids, and kids can "invest" that virtual balance in real stocks and index funds at real market prices. No real bank account is ever connected, no real trade is ever placed, and no real money ever moves. Every balance in the app is a number in our database, not a claim on real assets.

A FamilyBank family account is created by a parent or guardian, using Sign in with Google. Kids never sign in with Google, never create their own account, and never give us an email address or password. A parent who wants a kid to be able to open the app themselves generates a one-time invite (a link plus a short PIN, both chosen by the app, not the kid) and shares it with the kid directly — opening it lets that kid view and use their own portfolio on their own device, identified only by an internal id, not by any personal detail the kid provided. Every other detail about a kid (name, virtual balance, virtual holdings) is entered and controlled by the parent. This policy describes what we collect about the parent, what the parent chooses to store about their kids, and what a kid's device stores once an invite is used.

• From Google Sign-In: your name, email address, and Google account identifier. We never see or store your Google password.
• What you enter yourself: your family's chosen currency, the names, avatars, and running balances of the kids you add, and every add/deduct/buy/ sell action you record for them.
• From a kid's device, once a parent-issued invite is used: a login cookie on that device that identifies the kid by an internal id — no name, email, or other personal detail is collected from the kid to create it. A parent can revoke it at any time ("sign out of all devices"), or the kid can revoke it themselves from their own Settings.
• Standard technical logs: our hosting providers (see "Who we share data with" below) automatically log things like IP address and request timestamps for security and reliability, the same way virtually any web service does.

We never ask for or store bank account numbers, card numbers, or any real payment credential — there is nothing to charge, because no real money ever moves through FamilyBank.

A kid never signs in with Google, never uses OAuth, and never gives us an email address, password, or any other personal identifier — so we don't knowingly collect personal information directly from a child. Whatever the app knows about a kid — name, balance, holdings — was typed in by their parent, who is the one with an account, and who can edit or delete it at any time from Settings. The invite link and PIN a parent shares with a kid are generated by the app, not supplied by the kid, and exist only to let that kid's own device open their own portfolio; a parent can revoke that access at any time. If you entered a kid's information and want it fully removed, or want your whole family account deleted, see "Deleting your account and data" below.

Signing in uses a small number of strictly necessary cookies to keep you (or your kid) signed in — the app can't function without these, so they're not something you can opt out of, and they're never used to track you across other sites.

Beyond that, we use one cookie for Google Analytics (see below) — this one isn't essential, so on your first visit we ask before setting it. If you decline, Google Analytics never loads, that cookie is never set, and we receive none of that usage data (no page views, no feature-usage events, nothing tying your visits together) — the app works identically either way (apart from the anonymous page count described below). You can change your answer anytime via "Cookie settings" in the footer of any page.

For our public guides and tools pages, and for our landing page, we keep an anonymous count of visits (only the page address, with no cookie, IP address or other identifier), for about 20 days. This count includes visitors who decline analytics cookies.

We use a small number of service providers to run FamilyBank, and share only what each one needs to do its job:

• Google — to authenticate sign-in.
• Neon — hosts our database (Postgres).
• Vercel and Google Cloud — host the website and backend, respectively.
• A market-data provider (Yahoo Finance) — supplies the real stock/ index prices shown in the app. No personal or family data is ever sent to it; we only pull public price data.
• Resend — delivers the email if you submit a bug/feedback report through the app; that email includes what you typed plus basic technical diagnostics (recent in-app navigation and API activity on your device) to help us fix the problem, and nothing else.
• Google Analytics — collects anonymized usage statistics (which screens are opened, which features are used) so we understand what to improve. We don't send it your name, email, or your family's financial data.

We do not sell your data, or your kids' data, to anyone, ever.

We keep your family's data for as long as your account exists. If you ask us to delete your account, we delete the underlying family, kid, and transaction records.

The fastest way is inside the app: open Settings → Delete account while signed in, type DELETE to confirm, and everything is removed immediately — your family's profile, every kid's name/balance/holdings, and all transaction history. This cannot be undone.

If you can't sign in (lost access, already uninstalled, etc.), email [email protected] from the same address your account is signed in with, asking us to delete your account — we'll verify the request comes from that address and delete it for you.

A kid can disconnect their own device at any time from their own Settings without contacting us — that removes their device's access but does not delete any data, since the underlying kid record belongs to the parent's account.

If you're in the EU/EEA or UK, you have the right under GDPR to access, correct, or request complete erasure of your personal data at any time, to object to or restrict how we process it, and to receive a copy of it in a portable format. To exercise any of these rights, email [email protected] — see "Deleting your account and data" above for erasure specifically. We'll respond within a reasonable time and in any case within the timeframe GDPR requires.

We use encrypted connections (HTTPS) throughout, never store your Google password, and keep infrastructure secrets out of our source code. No system is perfectly secure, and we can't guarantee absolute security — but we treat your family's data with the same care we'd want for our own.

If we make a material change to this policy, we'll update the date at the top of this page. Continued use of FamilyBank after a change means you accept the updated policy.

FamilyBank is operated by Amir Ashkenazi, based in Portugal. Questions about this policy, or a request to view/delete your family's data? Email [email protected].