Child Allowance (called Allowance Tracker in the iOS app) is a family allowance tracker. This page explains what the app collects, why, who processes it on our behalf, and how to get it removed.
What we collect
Account and family data. The information a parent enters directly: the parent's name and email address, used to create and secure the account and to send account emails; the family name and allowance frequency, and each child's name, login username, allowance amount and optional date of birth, all used to run the family's allowance records. A child's PIN is stored only as a hash, never as the PIN itself, so it can be checked at sign-in without us being able to read it.
Activity in the app. The tasks, values, due dates, approvals, and allowance totals that make up the family's records — this is the thing the app exists to keep track of, and it is used for nothing else.
Subscription data. For families on a paid plan: the plan, the subscription status and renewal date, and the customer and subscription identifiers issued by Stripe — or, if you subscribe through the App Store, the transaction identifier, product and environment Apple reports — used to keep your access in step with your subscription. We never receive or store card numbers.
Where you came from. If you arrive from the QR code on one of our printable sheets, the app records which sheet it was so we can tell whether the printables are useful. That is a single sheet name, not a profile of you.
How we store it
Family and account data is stored with Supabase, our database and authentication provider. The site and app are hosted by Vercel. Subscription billing on our website is handled by Stripe, and account email is sent through Resend. When something goes wrong in the app, a diagnostic report is sent to Sentry, our error-monitoring provider, so that we find out about faults nobody thinks to report. It says what broke and where in our code, along with a short technical trail of the requests and page changes just before it — not what you clicked, and not anything you typed. We do not attach your name, your child's name or your email address, and web addresses are trimmed to the page itself, so the values that pick out a particular family or child never leave your browser. Sentry is contacted only when there is an error to report, not as you browse. Each acts as our processor: each is required to protect your data to a standard equal to or better than the one described on this page, to use it only to provide the service to us, and never for its own purposes. We do not sell your data, or your child's data, to anyone, and we do not share it with anyone else.
The app itself stores no IP addresses and no device identifiers. Our hosting and authentication providers keep short-lived technical logs, which can include an IP address, in order to run the service and prevent abuse. That describes what we store. Separately, the advertising partners named under “Advertising” below receive your IP address when an ad is requested, as any third party serving content to your browser does.
Each family's records are isolated from every other family's at the database level, so one family's data is never visible to another. A small number of people who operate the service can look up a family's account — its billing state and the parent email it was matched on, not a child's details — to answer a billing or support request. Any change an operator makes to a family's plan is recorded.
Payments
Subscriptions bought on our website are processed by Stripe. Card details are entered on Stripe's own checkout page and are handled entirely by Stripe — they never reach our servers. Stripe also collects the billing address it needs to work out the right tax. We pass Stripe your email address and an internal identifier for your family, so it can send you a receipt and match you to your existing customer record. See Stripe's privacy policy for how it handles payment data.
If you subscribe through the App Store in our iOS app, Apple sells and processes that subscription, and you pay with your Apple Account — we never see your payment details. So that the subscription can be linked to your family, the app gives Apple an internal identifier for your family (as the purchase's account token), and we store the transaction identifier, product and environment Apple reports for it. You manage or cancel such a subscription in your Apple Account's subscription settings. See Apple's privacy policy for how it handles the payment.
We only email you about your account: confirming your address when you sign up, and resetting your password when you ask. There is no marketing email and no mailing list. Those messages are sent through Resend, our email provider, which receives your address in order to deliver them. Mail you send to our support address reaches us through Cloudflare's email forwarding, and we keep it for as long as we need it to help you.
Children's data
This app is for parents and guardians aged 18 or over. We do not knowingly collect personal information directly from a child: everything in a child's profile is entered by their parent, on the child's behalf, and the parent can review, correct, or delete it at any time. If you believe a child's information has reached us any other way, email us and we will delete it.
Child profiles are created and managed by a parent; children do not sign up, register, or provide information themselves. A child signs in with a family-scoped username and PIN chosen by the parent — no email address, no account of their own. A child's date of birth is optional: leave it blank and the app behaves exactly the same way. It is kept as part of the profile and nothing else — it does not change what the app does, and it is never used to target anything at your child.
We do not use a child's data for advertising or marketing. Advertising is never shown on any child-facing screen, and no analytics event we send records what a child does in the app or identifies a child.
Analytics
On the public website and in the app we use Vercel Web Analytics to count page and screen views. It is cookie-free and does not build a profile of individual visitors or follow them across other sites, and it is switched off entirely in the iOS and Android apps. Opening the app's web address counts as one anonymous page view, whoever is looking at it; the events that record which screen is being used are sent for parents only, never for a child.
Cookies and local storage
We don't use tracking cookies. The app does store things in your browser (or on your device, in the mobile apps) to make it usable: your signed-in session, a child's session token while they're logged in, the email address — or family name and child username — you last signed in with so you don't have to retype it, small view preferences such as the report range and the child you last assigned a task to, the printable sheet you arrived from. Where a consent choice applies to you, Google's own consent tool stores that choice in your browser too — see "Advertising" below. Clearing your browser or app storage removes all of these.
Advertising
Ads may be shown to families on the free plan, and then only on the parent dashboard and the public guides — never on a child's screen. They are served by Google AdSense. Where the law requires your consent before personalised ads are shown — in the UK, the EEA and Switzerland — Google's own certified consent tool asks you directly, before any personalised ad is served. As a consequence of that ad serving, Google and its advertising partners — third parties we do not control — may place and read cookies on your browser, and may use web beacons, your IP address and other identifiers, to serve, measure and personalise the ads you see and to limit how often you see the same one. That processing is theirs rather than ours, and it is separate from what this page says we store. You can opt out of personalised advertising at any time through Google Ads Settings or the Digital Advertising Alliance opt-out page. None of this ever applies to a child-facing screen.
Manage your ad preferences
If you were asked for a consent choice about personalised advertising, you can reopen that choice and change it at any time. Your choice is remembered per browser and per device, so you may want to do this on each one you use.
This opens Google's own consent tool rather than a setting of ours: Google collects and records that choice, so it is the only thing that can show it back to you. Your choice applies to personalised advertising; it does not change what this app stores, which is covered above. Nothing here ever applies to a child-facing screen, where no advertising is shown at all.
Keeping and deleting your data
We keep your family's data for as long as the account exists. You can delete it yourself at any time, without asking us: in the app, open the Family tab and use Delete family under "Danger zone". You'll be asked to type your family's name to confirm. That permanently removes the family and everything attached to it — every child profile, task, and allowance record — and, where our authentication provider allows it, your own login as well. You can also delete an individual child, or edit any detail, at any time.
Deletion is immediate in our live database and cannot be undone. Our hosting provider's encrypted backups may still hold a copy until they age out of its rolling backup window, after which no copy remains.
Deleting your family does not cancel a paid subscription, and cancelling a subscription does not delete your family — the two are separate, and you can do either. If you want both, cancel the subscription before you delete the family (if you subscribed through the App Store, that is done in your Apple Account's subscription settings). If you have already deleted the family and are still being billed, or anything looks wrong on your final invoice, email us at support@childallowance.app and we will sort it out.
Moving from a paid plan back to the free plan does not delete anything: children or parent accounts beyond the free plan's limit are kept but become inactive, and come back as soon as you upgrade again. And if you have ever subscribed, Stripe — or Apple, if you subscribed through the App Store — keeps its own billing and invoice records to meet its legal and tax obligations, which deleting your family here does not erase — contact us or them if you need those removed too.
If a second parent shares the family, their sign-in credentials may outlive the deletion; email us and we will remove them.
Tracking
We do not track you across apps or websites run by other companies.
Your rights
Most of what you might want to do, you can do yourself in the app: view, correct, or delete your family's data. Depending on where you live you may also have the right to request a copy of your data, object to or restrict how we use it, withdraw consent you have given, or complain to your local data protection authority. Email us and we will help.
Changes to this policy
If we change how the app handles your data, we will update this page and the date below.
Contact
Questions about this policy, or a request about your data, can be sent to support@childallowance.app.
Effective date: 2026-09-27