Privacy Policy
Last updated: July 2026
Kinsaver is built for families, so privacy isn't a feature — it's the default. This policy explains exactly what we collect, why, and what we'll never do with it.
What we collect
- Account data: your email address and a securely hashed password.
- Family data you enter: your family and bank name, children's first names and birthdays, and an optional email per child for reports.
- The virtual ledger: allowances, rewards, chores, goals, loans, gifts, and transfers — all virtual amounts with no real-world monetary value.
- Basic usage events (logins and screen views) so we can see which features help families and fix what doesn't.
Children's privacy
Everything about a child in the app is entered and controlled by their parent or guardian.
- Child logins use a username and passcode chosen by the parent — no child email address is required.
- We show children no advertising, build no profiles of them, and never sell or share their data with anyone.
- A parent can view, edit, or delete their child's data at any time, and can revoke a child's login instantly.
How we use your data
- To run the app: showing balances, paying virtual allowances, sending the notifications and reports you've turned on.
- To help you when you contact support.
- To improve the product using aggregate feature-usage patterns.
- That's it. We don't sell data, we don't share it with advertisers, and we don't use it to train AI models.
Who processes it for us
Your data lives with a small number of infrastructure providers acting on our instructions:
- Supabase — database and sign-in infrastructure, where your family's data is stored with row-level isolation so no other family can ever read it.
- Vercel — hosts the application.
- Resend — delivers the emails you ask for (reports, payslips, gift notifications).
Cookies
Kinsaver uses only the cookies needed to keep you signed in. No tracking cookies, no third-party advertising cookies, no fingerprinting.
Security
All traffic is encrypted in transit. Family data is isolated at the database level (row-level security), passwords are hashed, and children's money moves are protected by parent approvals you control.
Retention and deletion
We keep your data while your account is active. To delete your family, send us a request through the contact form on our website — deletion removes your guardians, children, ledger, and settings permanently. We aim to complete deletions within 30 days.
Your rights
You can ask us at any time to access, correct, export, or delete the personal data we hold about you or your children. Depending on where you live, you may have additional statutory rights — we honour reasonable requests regardless of jurisdiction.
Changes and contact
If we change this policy in a meaningful way, we'll notify you in the app or by email first. For privacy questions, use the contact form on our website.