Children's privacy notice

What we hold about a child

For each kid account we hold a first name (or whatever name the grown-up chooses), a birth year, a username, a PIN stored only as a hash we cannot read back, and the child's records in the app: jars and their history, chores and their status, paydays and goals. We also hold the household's family code, which the child types to sign in.

We do not collect a child's surname, date of birth, school, photo, email address, phone number, location or contacts. The only device information is the random installation id described in the Privacy policy, which names a device, not a person. The short names and notes a child types, such as the name of a savings goal, are visible only to the grown-ups in the household and never to anyone outside it.

We use the birth year only to tell the kids in a household apart and to apply any age rule the law requires. We do not use it, or anything else we hold about a child, to profile or target the child.

How consent works

A kid account can be created only by a signed-in grown-up in the household. At creation, the grown-up confirms that they are the child's parent or legal guardian and consent to the collection described in this notice; the app will not create the account without that confirmation. We record which grown-up consented and the time.

The consenting grown-up signs in with an account tied to an email address that must be verified within 7 days of sign-up, and the household's audit record shows every change any member makes. We rely on the parent's account as the means of consent and never ask the child for information first.

Consent can be withdrawn at any time by deleting the kid account or the household.

What a child can do in the app

In kid mode a child can sign in with the family code, their username and PIN; see their own jars, history, chores, goals and payday; mark a chore done; move money between their own jars; set and delete their own savings goals; and, on payday, place the amount above the floors a grown-up set. Everything a child does is visible to the grown-ups in the household.

Any feature we add to kid mode later stays within the same rules: nothing outside the household, nothing to buy, and no information collected beyond what the feature needs. If a new feature ever needs more from a child, we ask the parent first.

What a child cannot reach

Kid mode contains no chat, comments, messaging, sharing, friends, public profiles or other families; no advertising, prices, purchases, subscriptions or links to app stores; and none of the household's accounts, transactions or budgets, nor another child's jars. These limits are enforced by our servers, not just hidden in the app.

A child cannot invite anyone, cannot export anything, and cannot delete anything except their own savings goals. Everything else belongs to the grown-ups.

Your rights as a parent

From inside the app, a grown-up can review everything we hold about a child; correct the child's name, username or PIN; download the household's data, which includes the child's records; end a child's access by deleting the kid account; restore a deleted kid within 30 days; or delete the whole household. Deleting the household exports everything first and then purges it after 30 days; a deleted kid is kept for 30 days so you can restore them, then purged. Backups are kept for 30 days, so a deleted child's data leaves the backups within 30 days of the purge.

You may also email privacy@cubbyjar.com to review, correct or delete a child's information (including correcting a birth year, which the app cannot edit yet), or to refuse any further collection. We confirm that the request comes from a grown-up in the household before acting, and we answer within 30 days.

We keep a child's information only as long as the kid account exists and as needed to complete a deletion. We do not share it with anyone outside the companies named in the Privacy policy, and we do not make a child's use of the app depend on giving more information than the app needs.

Contact

IAS Digital Group LLC, 2285 S Hiawassee Rd, Suite 205, Office 16, Orlando, FL 32835, United States. Email privacy@cubbyjar.com. This notice is written for the Children's Online Privacy Protection Act. If we change how we collect or use a child's information, we email the grown-ups in every household before the change takes effect and, where the law requires it, ask for consent again.