Privacy Policy

Last updated 2 October 2026

PennyCrew is in pre-launch. This document describes how the app is built today and will be finalised (including the legal entity and contact details of the data controller) before PennyCrew becomes available in the app stores.

This policy explains what PennyCrew collects, why, where it is stored and how you control it.

What we collect

Adult accounts (parents and partners): email address, display name, sign-in method (email and password, or Google), and app preferences such as theme and notification settings.

Kids: a display name, an age band (for example 9 to 11) and a PIN chosen by a parent. Kids do not have an email address, phone number or their own login account. PINs are stored only as a one-way hash; nobody at PennyCrew can read them.

Date of birth: if a parent adds a kid's date of birth, we use it to show their age to the family's adults and to remind adults of the kid's birthday. Other kids in the family see only the day and month.

Family activity: what you create in the app: chores, routines, allowances, the ledger of each kid's account, savings goals, wishlist items, rewards, requests, IOUs and cash hand-offs, and the family's currency and time zone.

Photos: images you or your kids choose to upload, such as chore proof photos, avatars and goal pictures.

Devices: a push-notification token for each signed-in device, so the app can send notifications you have turned on.

Diagnostics: crash reports and product usage events. These use a pseudonymous identifier and never include names, amounts, PINs, passwords or family codes.

Website forms: the email address (and name, subject and message where you provide them) you submit through the waitlist or contact form. We store only a shortened one-way hash of your IP address, used to limit abuse.

Feedback and support messages: what you write, your contact email if you want a reply, and, from the app, the app version, phone system, language and the screen you were on. We use them to answer you and improve PennyCrew, and delete them 365 days after they are resolved.

Subscriptions: your plan, its status and renewal dates. Payments are handled by Apple or Google; we never receive your card details.

How we use it

  • To run the app for your family: show balances and history, deliver approvals and notifications, and keep each kid's records private to your family.
  • To keep accounts secure: sign-in, device checks, rate limiting and abuse prevention.
  • To provide your subscription features and support.
  • To fix crashes and understand which features are used, using pseudonymous data only.
  • To answer your messages and, if you joined the waitlist, to tell you when PennyCrew launches.

What we don't do

  • We don't sell personal data. Adults in families on the Free plan may see ads from Google AdMob; they are non-personalised and served without the device advertising ID. Kids never see ads, and ads never load in kid mode or for paid plans.
  • We don't hold, move or pay out real money. PennyCrew is a record-keeping and teaching tool, not a bank.
  • We don't let one kid see another kid's information, or anyone outside your family see your family's data.

Where your data is stored

We use a small number of service providers, each only for the job listed:

ProviderPurpose
Google Cloud and FirebaseApp database and servers (in the European Union: Firestore multi-region eur3, Cloud Run europe-west1), sign-in, push notifications, crash reports, usage analytics, app configuration and device checks
CloudflarePrivate storage for uploaded photos and exports, hosting this website, bot protection on our forms (Turnstile) and cookieless website analytics
Google AdMobNon-personalised ads for adults in Free-plan families (never for kids); consent is requested where the law requires it
QonversionVerifying App Store and Google Play subscriptions
Apple and GoogleApp distribution and subscription payments

Photos are stored privately and are only shown to members of your family through short-lived links.

How long we keep it

  • Family data is kept while your family uses PennyCrew and deleted when the family is deleted.
  • In-app notifications are deleted after 90 days and the activity feed after 180 days.
  • Device tokens are removed when you sign out, or after 180 days without use.
  • Data exports are available to download for 7 days.
  • Subscription history is kept for up to 400 days for billing support.
  • Security audit records are kept for up to 400 days; when a family is deleted, the records about it are anonymised.
  • Website messages and waitlist sign-ups are deleted 365 days after we have handled them.

Your choices and rights

  • Access and portability: the family owner can request an export of the family's data from the app.
  • Correction: names, settings and most records can be changed in the app; ledger mistakes are corrected with a recorded reversal.
  • Deletion: a partner can delete their own account, and the owner can delete the whole family, from the app. Deletion starts after a 24-hour window in which it can be cancelled, then the data is permanently removed.
  • Notifications: each member can turn notification types on or off in the app.

For any other request, contact us. Depending on where you live, you may also have the right to complain to your data protection authority.

Children

PennyCrew is designed to be used by children under the supervision of a parent. A parent creates each kid's profile and controls it, and we collect only what the app needs to work. Read more on our Child Safety page.

This website

This website does not use advertising or tracking cookies. We use Cloudflare Web Analytics, which counts page visits without cookies, and Cloudflare Turnstile to protect our forms from bots.

Changes and contact

We will update this page when our practices change and show the date at the top. Questions about privacy: contact us.