Privacy Policy

What we collect

Parents: name, email, password (stored securely by our login provider), and the settings you choose.

Kids (entered by a parent): first name, birthday (to set age-appropriate screens), an emoji avatar, and a PIN (stored only as a scrambled hash). No kid email, phone number, photo or location.

Neighbor market (only if a parent uses it): listing names, prices, descriptions and photos a parent uploads (we remove the hidden location data phones add), orders, and notes between parents. Families in the same circle see a listing, the business name and the family name; a kid's first name only if their parent turns it on.

What families do in the app: tasks, pay, balances and money records, goals, wishlist items (and the store links and pictures you add), business logs, quests and the kids' answers when a quest fails, Money Meeting notes, and Atlas conversations.

Usage events in our own database: which features were used and when (for example "a meeting was held"), never the content. We use them to see whether families keep using the app and to improve it.

Payment details go to Stripe, not to us. We keep only Stripe's customer and subscription IDs and your plan.

Who else handles it (our service providers)

Supabase (database and login) and Vercel (hosting) store and serve the app's data.

Anthropic processes Atlas conversations to write Atlas's replies, only for kids whose parent turned Atlas on. It receives the kid's first name, money numbers and the chat. [Confirm Anthropic's data-use terms for the plan used.]

Stripe processes payments for parents.

Apple, Google and Mozilla deliver push notifications to devices that turned them on.

Tiingo provides market prices. It receives no personal information.

We don't sell or rent anyone's information, and there are no advertising or analytics companies in the app.

Research (optional, off by default)

If a parent opts in, the family's numbers may be included in anonymous, combined statistics (for example, average savings by age). Never names or anything that identifies a family.

Keeping and deleting

We keep your family's data while your account is open. To delete your family and everything in it (including both parents' logins), the parent who started the family bank can use Family → Delete our family's account, on the web or in the app. It happens right away and can't be undone. You can also email privacy@2playersbanking.com and we'll do it within 30 days. Deleted data leaves our backups as they age out.

Money records are never edited in normal use (mistakes are fixed with a correcting entry), but they are all deleted when a family is deleted.

Security

Every family's data is walled off in the database itself, so one family can't see another's. PINs are hashed. The app and database are hosted by established providers using encryption in transit.

Kids

See our Kids' Privacy Notice for how we handle information about children under 13.