Privacy policy

Who we are

This policy is issued by IAS Digital Group LLC, 2285 S Hiawassee Rd, Suite 205, Office 16, Orlando, FL 32835, United States ("CubbyJar", "we"). It covers cubbyjar.com, the CubbyJar web app and the CubbyJar apps for iOS and Android. We decide how the personal information described here is used, and questions about it go to privacy@cubbyjar.com.

What we collect

Grown-ups: the name you sign up with, your email address, a password stored only as a hash, and the settings you choose, such as time zone and appearance. Household: the household's name and the family code your kids type to sign in.

Kids: a first name, a birth year, a username and a PIN stored only as a hash. We record which grown-up consented to the kid account and when. We do not collect a child's surname, date of birth, school, photo, email address, location or contacts.

The money you record: accounts, transactions and their splits, transfers, recurring items, budgets, categories, jars and jar moves, chores, paydays, goals, and any receipt image a grown-up chooses to attach to a transaction (JPEG, PNG or WebP, up to 10 MB). We never ask for the password to a bank account, a card number or any account credentials, and CubbyJar does not read any bank account.

Devices and sessions: the app generates a random installation id on each device you sign in from, so the sessions from one device can be ended together and a household can sign out everywhere at once. It is not an advertising identifier and it is not shared with anyone. Our servers keep ordinary request logs (network address, time, path and result) for a short period to run and protect the service.

If you use a phone app and allow notifications, we also store the token your phone's operating system gives us so we can send them. Nothing sends notifications yet; when that ships we will name the notification service here first.

Website visits: our own visit counter runs on our own server, sets no cookies and records page views without storing personal information. The forms on the site (join the beta, contact) collect the email address and message you type.

An audit record: each change to your household's data is logged with who made it and when, so we can answer questions about what happened.

Why we collect it

To run the service: to sign you in, keep each household's data separate, add up the numbers you enter, show kids their own jars and nothing else, and send the emails the service needs: address verification, invitations, a locked-PIN notice, password resets and your download link.

To keep the service safe: to detect abuse, enforce the kid and grown-up wall on our servers, and investigate a security report.

To meet our legal duties, for example to answer a lawful request or to keep the records that tax and company law require.

We do not use your information for advertising, we do not sell or rent it, we do not build profiles from it, and we do not add you to a marketing list. If you joined the beta waitlist, we email you about the beta and nothing else, and you can ask us to remove you at any time.

Where a legal basis is required, ours are: performing our agreement with you, our legitimate interest in running and securing the service, your consent for a kid account and for the waitlist, and compliance with law.

Who else touches it

The app and its database run on a server we operate at Hostinger International Ltd. in Boston, Massachusetts, United States. Amazon Web Services, Inc. stores the nightly backups, receipt images and export files in its us-east-1 region (Northern Virginia, United States) and sends our email. Both process data only on our instructions.

No advertising network, data broker, analytics company or social platform receives your data. If we ever add a company that processes personal information for us, we update this policy before it handles any.

We disclose personal information only when the law requires it, to protect the safety of a child or of the service, or, if CubbyJar is ever sold or merged, to the successor under this same policy after emailing you.

Your data is stored and processed in the United States. If you use CubbyJar from elsewhere, you are sending your data to the United States.

How long we keep it

We keep your household's data while the household exists. When you delete the household, we first export it and email you a download link, then purge the household from our live systems after 30 days. Backups are kept for 30 days, so deleted data leaves the backups within 30 days of the purge.

A deleted kid is kept for 30 days so a grown-up can restore them, then purged. Receipt images live as long as the transaction they belong to, including the 30 days in which a deleted transaction can be restored, and are deleted with the household. Export files expire 30 days after they are created; the emailed link works for 7 days.

Sign-in sessions expire and are removed. Request logs are kept for a short operational period. The audit record lives and dies with the household.

If you join the beta waitlist and never create a household, we delete your waitlist entry when the beta ends or when you ask, whichever comes first.

Your rights

From inside the app, a grown-up can see and correct everything in the household, download the household's data as a JSON file at any time, delete a kid, and delete the whole household. Deleting the household exports everything first.

You can also ask us to access, correct, delete or export your personal information, to restrict or object to how we use it, or to withdraw consent, by emailing privacy@cubbyjar.com. We answer within 30 days, and we never treat you differently for exercising a right.

Residents of California and of other states with privacy laws have the rights those laws provide, including the right to know what we collect and the right to delete it. We do not sell or share personal information as those laws define it, and we do not use it for targeted advertising, so there is nothing to opt out of.

If you think we have not honored your rights, tell us at privacy@cubbyjar.com. You can also complain to your state attorney general or to the Federal Trade Commission.

Children

CubbyJar is a family app. A child under 13 uses it only through a kid account that a parent or guardian creates and consents to. A child cannot create an account, and we do not knowingly collect information from a child except through a kid account. The Children's privacy notice sets out what we hold about a child and a parent's rights.

If you believe a child has given us information outside a kid account, email privacy@cubbyjar.com and we will delete it.

Changes

When we change this policy in a way that matters (a new kind of data, a new purpose or a new company processing data for us) we email the grown-ups in every household before the change takes effect and update the "Last updated" date. Wording changes are published with a new date. Earlier versions are available on request.