Privacy Policy

Last updated: 13 July 2026

WeeWallet ("we", "us") makes a kids' allowance, chores & savings learning app. This policy explains what we collect, how we use it, and your choices. Because WeeWallet is a family app used with children, we keep data collection to a minimum.

Two promises up front: we do not sell your or your child's personal information — ever — and we run no ads and no third-party tracking. We follow applicable data-protection laws, including Canada's PIPEDA and, where they apply, the U.S. COPPA and the EU/UK GDPR.

Children's privacy (please read first)

WeeWallet is set up and controlled by a parent or guardian. Children do not create their own accounts. Any information about a child is entered by the parent — at most a first name or nickname, an avatar, and optionally a birthday and a profile PIN. You can use a nickname instead of a real name. We do not knowingly collect personal information directly from children. A parent can view, edit, or delete a child's profile and data at any time in the app.

What we collect

Parent account: your email (to sign in). Your password is handled by our authentication provider and stored only as a secure hash.
Family & child profiles: family name, and for each child a first name/nickname, avatar, optional birthday, and an optional PIN (stored only as a secure hash).
App content you create: the virtual balances, deposits/withdrawals, savings goals, and notes you add (all virtual — no real money).
Limited technical data: sign-in session tokens on your device and standard server logs (e.g. IP, timestamps) for security and reliability.

We do not collect precise location, contacts, photos, advertising identifiers, or behavioral tracking, and we use no third-party analytics or ad SDKs.

How we use it

Only to provide the app, sync your family's data across devices, keep accounts secure, respond to support, and comply with the law. Never for advertising, profiling, or sale.

How it's shared

Only with service providers that help us run the app, on our instructions: Supabase (our backend, database & authentication), Brevo (sends account emails such as sign-up confirmation and password-reset codes — processes your email address for this purpose only), Cloudflare (provides the “are you human?” bot-protection challenge shown at sign-up and sign-in — processes limited device and network information such as your IP address to verify the request, not to track you), Expo (Expo Application Services — delivers push notifications if you turn them on; processes your device’s push token and notification content for that purpose only), and the Apple App Store / Google Play for distribution. We may disclose information if required by law. We never sell personal information or share it for third-party advertising.

Push notifications (optional)

If you turn notifications on for a device, we store that device’s push token (an identifier issued by your device’s platform) with your family account so we can send you alerts — for example when a child’s request is waiting for your approval or a new chore is posted. Notification content can include a child’s first name or nickname, chore names, and amounts. Notifications are delivered through Expo and your platform’s push service (Apple Push Notification service or Google’s Firebase Cloud Messaging) and are optional: you choose a role for each device in Settings and can turn notifications off at any time, which deletes that device’s token from our systems. Tokens that go unused for 90 days are deleted automatically.

Where your data is stored

Your data is stored on Supabase's cloud infrastructure in Canada (Canada Central region). If you use the app from outside Canada, your information may be transferred to and processed in Canada with appropriate safeguards.

Retention & deletion

We keep your information while your account is active. You can delete a child's profile or your entire account at any time from within the app; deleting your account removes your family's personal data from our active systems, and backups are purged on a rolling schedule. You can also request deletion by emailing us.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, withdraw consent, and object to or restrict certain processing. Parents may exercise these rights for their children. Use the in-app controls or contact us; in Canada you may also complain to the Office of the Privacy Commissioner.

Security

We protect your information with encryption in transit, database row-level security that isolates each family's data, hashed passwords and PINs, and access controls. No system is perfectly secure, so please keep your login private.

Changes

We may update this policy; we'll update the date above and, for material changes, provide a more prominent notice.

Contact

Questions, requests, or privacy concerns? Email support@weewallet.app.