Privacy, in plain English

Who runs it

coinfetti is run by Kinsleo Media LLC, in the United States. Our privacy email arrives with our own web address, soon. Until then, everything below that you can do (seeing your family's information, turning off a screen, deleting your family) you can do yourself, right in the app.

What we keep

What a grown-up enters

• Your family's name, like "The Riveras", and your time zone (so paydays land on the right day).
• Each kid's first name and a color. If you make a share card, she or he, so the card reads right.
• Chores, what they pay, allowances, goals, and every amount added, cashed out or taken away, with any note you type.
• If you choose to sign in with email: your email address. It's optional; the app works without it.
• Names you give to devices, like "Maya's tablet" or "Grandma".

What a kid's screen sends

• Taps: "I did it" on a chore, and asks to cash out or move money, with a short reason she or he can type.
• Nothing else. Kid screens have no chat, no photos, no profiles and nothing to share outside the family.

What we don't keep

• Birthdays, ages, last names of kids, photos, locations, contacts, or school names.
• IP addresses or device details in our database. (The companies that host the app keep ordinary server logs; see below.)
• Share-card photos. A photo you pick is drawn on your phone and never uploaded to us.

How we use it

Only to run the app for your family: show each person their screen, keep the money right, and pay allowances on time. We don't advertise, we don't build profiles, we don't sell or rent information, and we don't use your family's information to train AI.

Who can see it

• The grown-ups in your family: you, and a co-parent if you add one.
• Each kid: only her or his own money, chores and goals. Never a brother's or sister's.
• A family tablet, if you set one up: first names and money, for the fridge.
• Us: only when needed to keep the app running or fix a problem you tell us about.

Each screen opens with its own code. We store codes scrambled, so even our own database can't show them. Lose a phone? Replace its code from Devices and the old one stops working at once.

Where it lives, and who helps

• Supabase stores the database, in the United States (Oregon).
• Vercel hosts the website.

They hold the information only to run the app for us. Nothing else on our pages comes from anyone else: no analytics, no ad networks, no outside fonts or scripts. Our pages are built to refuse outside code.

Cookies and storage

• A screen's code, kept in a cookie so that phone stays on the right screen. Only our server can read it.
• Your email sign-in, if you use one.
• Who sent you, if you came from a friend's share card: their family's invite code (never a name), for 60 days.
• Small reminders on the device, like "the welcome was already shown" or "payday was already opened".

No advertising or tracking cookies.

Kids, and your rights as a parent

coinfetti is made for kids, used with a parent. A grown-up creates the family, adds each kid and agrees to this policy first. That's the parent's consent the law asks for (the Children's Online Privacy Protection Act, COPPA). Kids can't create a family or add themselves.

As the parent, you can at any time:

• See everything we keep about your kid: it's all on your screens, including the passbook of every dollar.
• Stop it: turn off a kid's screen from Devices, or remove a kid from Settings.
• Delete it: Delete our family for good in Settings removes every bit of it, and your sign-in email.

How long we keep it

• While you use it. Your family's history stays so your kids can look back.
• Delete any time. Deleting your family removes it from the app right away, along with your sign-in email.
• Families that go quiet are cleaned up. If no money moves for 12 months, the grown-ups see a warning in the app with the date. One tap keeps your family. After 18 months with no money moving, the family and its sign-in email are deleted automatically.
• Our hosting company may keep backup copies for a short time before they're overwritten.

Keeping it safe

Everything travels encrypted. Each screen can only read what it's allowed to, and that's enforced by the database itself, not just the app. Codes are stored scrambled. Only the people who build coinfetti can reach the database, and we keep a written security plan. No system is perfect; if something ever goes wrong that affects your family, we'll tell you in the app.

If this changes

We'll update this page and its date. If a change affects what we keep about your kids, we'll ask for your agreement again in the app before it applies.