Privacy

Privacy Policy

Entity: MoneyMe.kids

Effective date: July 2, 2026

Jurisdiction: United States

Overview

MoneyMe is a parent-controlled virtual family ledger for family money learning. This Privacy Policy explains the information MoneyMe expects to collect, use, and protect when families use the public website and MoneyMe apps.

MoneyMe is not a bank, payment app, wallet, brokerage, or real-money account. It only tracks virtual balances controlled by parents.

Who we are

MoneyMe is operated by MoneyMe.kids, [MAILING ADDRESS]. MoneyMe is a parent-run virtual family ledger for family money learning.

For privacy questions, parent requests, or COPPA inquiries, contact us at privacy@moneyme.kids.

Information we collect

Parent account information

• Sign-in credentials: Email address and authentication information provided through our sign-in provider to create and access your parent account.
• Profile information: Name and any optional profile details you provide.
• Device information: Device identifiers, operating system, and app version for the devices you use to access MoneyMe.
• Push notification tokens: Tokens needed to send you notifications about withdrawal requests and other family activity.

Family and kid information

• Family settings: Family name, timezone, currency display preferences, and configuration options.
• Kid profiles: Kid display name, optional birth year, optional avatar image, and any parent-provided details needed to identify kids within the family.
• Account settings: Starting balances, interest rates, allowance amounts, and schedules configured by parents.

Transaction and activity data

• Ledger transactions: All deposits, withdrawals, interest postings, and allowance postings that make up the virtual ledger.
• Withdrawal requests: Requests submitted by kids, including amounts, notes, and parent decisions (approve, deny, counter).
• Audit records: Timestamps and actor information for changes to accounts and settings.

Technical and operational data

• Device and session data: Information about paired kid devices, session tokens, and last-seen timestamps.
• Service logs: Technical logs needed for security, reliability, troubleshooting, and legal/privacy operations.
• Support records: Communications with support and any diagnostic information provided.

Website visitors

The MoneyMe website at moneyme.kids is static and does not use cookies, trackers, analytics SDKs, tracking pixels, or advertising technology.

Like most websites, our hosting/CDN provider may create standard server logs when you visit the site. These logs may include IP address, user agent, pages requested, timestamps, and basic security information. We use these logs for security, reliability, troubleshooting, and abuse prevention, and retain them briefly.

Kid privacy

MoneyMe is designed to minimize kid data collection. We take the following approach:

• No kid email or password: Kids access MoneyMe through QR code pairing. No child email address or password is collected.
• Minimal profile data: Kid profiles contain only the information parents provide (display name, optional birth year, optional avatar).
• No behavioral analytics: We do not track kid behavior for advertising, profiling, or sale to third parties.
• No ads or social features: The kid app does not show ads, social feeds, or child-targeted upsells.
• Parent control: Parents can view, export, and delete all kid data through the parent app.

For the canonical COPPA notice and parent-rights detail, see our dedicated Kids Privacy Notice.

Analytics and crash SDKs

MoneyMe does not use third-party analytics SDKs or crash reporting SDKs in the mobile apps. The parent and kid apps may send only first-party events to support service operation:

• App installed: A one-time event when the app is first installed.
• App started: An event when the app is opened.

These events include technical information (app version, device type, operating system) and may be linked to the parent user or kid session as needed to operate the service. MoneyMe does not use these events for behavioral profiling, advertising, or sale to third parties.

How we use information

MoneyMe uses collected information to:

• Operate the service: Create and manage parent accounts, families, kid profiles, and virtual ledger accounts.
• Display balances and history: Show virtual balances, interest, allowance, and transaction history to parents and kids.
• Process requests: Handle withdrawal requests and notify parents of pending approvals.
• Manage devices: Pair kid devices via QR code and allow parents to revoke device access.
• Send notifications: Deliver push notifications about withdrawal requests, approvals, and other family activity.
• Provide support: Respond to support requests and troubleshoot issues.
• Maintain security: Protect accounts from unauthorized access and detect misuse.
• Comply with legal obligations: Respond to legal requests and fulfill privacy rights requests.

Information sharing

MoneyMe does not sell personal information and does not share personal information for cross-context behavioral advertising. We may share information only in these limited circumstances:

• Service providers: We use service providers for hosting, authentication, push notifications, and other operational needs. These providers process data only as needed to provide their services (see the list below).
• Legal requirements: We may disclose information if required by law, legal process, or government request.
• Safety and security: We may disclose information to protect the safety of users or the public, or to prevent fraud or abuse.
• Business transfers: If MoneyMe is acquired or merged, user information may be transferred as part of that transaction.

Service providers (subprocessors)

We use service providers to operate MoneyMe. They may process personal information only as needed to provide services to us, subject to their own security and privacy commitments. We maintain and update this list as our providers change.

• Clerk: Parent authentication and sign-in.
• Expo: Push notification delivery for parent and kid app notifications.
• Firebase Authentication: Internal admin staff sign-in only. Firebase Authentication is not used for parent or kid sign-in and is not used to manage parent or kid data.
• Static hosting/CDN provider: Static website hosting, content delivery, and standard security logs.
• Managed PostgreSQL host: Database hosting for family, profile, virtual ledger, device, and operational records.
• S3-compatible or Cloudflare R2 object storage provider: Storage for files such as avatars and family export files.

Data retention

We retain information only as long as needed to operate MoneyMe, support families, maintain security, comply with legal obligations, and handle privacy requests. Retention varies by data class:

• Parent account and family profile data: Retained while the parent account or family profile is active, unless deletion is requested earlier.
• Kid profile and virtual ledger data: Retained while the family uses MoneyMe so parents and kids can view virtual balances, history, requests, and parent-configured rules.
• Device, session, QR pairing, and push notification data: Retained while needed to keep devices paired, deliver notifications, secure sessions, and allow parents to revoke access.
• Server logs: Standard security and operational logs are retained briefly, typically about 90 days, unless longer retention is needed for security, abuse prevention, legal, or operational reasons.
• Support records: Retained as needed to respond to requests, maintain support history, resolve disputes, and meet legal obligations. We ask families not to send unnecessary child personal information to support.

When a parent requests hard deletion, MoneyMe removes family-owned product data for that family, including family, kid profile, virtual ledger, request, device/session, export, notification, file-storage, and event records. After hard deletion, we retain only limited non-PII or legally required records needed for security, legal, audit, and operational purposes. Admin and support logs are kept separately and do not retain kid secrets, authentication tokens, QR tokens, or unnecessary child personal information after deletion.

Data security

MoneyMe implements security measures to protect your information:

• Encryption of data in transit and at rest
• Secure authentication and session management
• Access controls limiting who can access user data
• Regular security reviews and updates

No system is perfectly secure. If you believe your account has been compromised, contact us immediately.

Your rights and choices

Data export

Parents can request a full export of their family's MoneyMe data through the parent app or by contacting support.

Account deletion

Parents can request full hard deletion of their family's data. Hard deletion removes all family-owned product data while retaining only limited non-PII records needed for security, legal, or operational purposes. See our Data Rights page for details.

Notification preferences

Parents can manage push notification preferences in the parent app, including muting kid request notifications.

Device management

Parents can view all paired kid devices and revoke access at any time through the parent app.

California privacy rights (CCPA/CPRA)

If you are a California resident, you may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. These rights may include:

• Know and access: You can request information about the categories and specific pieces of personal information we collect, use, disclose, and retain.
• Delete: You can request deletion of personal information, subject to limited exceptions allowed by law.
• Correct: You can request correction of inaccurate personal information.
• No sale or sharing: We do not sell personal information and do not share personal information for cross-context behavioral advertising.
• No discrimination: We will not discriminate against you for exercising your privacy rights.

Parents can exercise access, export, deletion, and correction rights through the parent app where available, or by contacting privacy@moneyme.kids. We may need to verify your request before acting on it.

Other state privacy rights

Residents of other U.S. states may have similar privacy rights under applicable state privacy laws, such as rights to access, correct, delete, or obtain a copy of personal information. MoneyMe does not sell personal information, does not share personal information for cross-context behavioral advertising, and does not use personal information for targeted advertising.

You can submit state privacy requests through the parent app where available, or by contacting privacy@moneyme.kids. We will verify and respond to requests as required by applicable law.

Children's privacy

MoneyMe is designed for family use with parent control. Kid profiles are created by parents, and kids access MoneyMe only through a parent-generated QR pairing flow. We treat that parent creation and pairing process as the parent consent path for kid use.

We collect minimal kid information needed to show the kid's virtual balance, history, request status, and device pairing. Kids do not need an email address or password. MoneyMe does not show ads, use behavioral analytics, sell kid personal information, or share kid personal information for cross-context behavioral advertising.

For more detail, see our dedicated Kids Privacy Notice.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify parents of material changes through in-app messages, push notifications, legal notices to the parent sign-in email address, or other reasonable service channels. Continued use of MoneyMe after changes constitutes acceptance of the updated policy.

Contact

Questions about this Privacy Policy can be sent to privacy@moneyme.kids. For general help, contact support@moneyme.kids.

Operator: MoneyMe.kids, [MAILING ADDRESS].