Privacy policy.

Twiggybank is operated by the makers of Twiggybank (the team, not a larger company). When this policy says “we” or “us,” it means us. You can reach us any time at privacy@twiggybank.com.

The information we hold about your family falls into four buckets:

• Account. For each parent: the email address and password used to sign in (the password is never stored in plaintext — only as a hash). Optionally, a display name.
• Family. The family name you choose, the currency and time zone you configure, your allowance schedules, your saving interest rate, and any bucket labels you customize.
• People. For each kid the parent adds: a display name, an optional birthday, an optional color or emoji. If a kid is given a login, their email address as well.
• Ledger. Every journal entry your family posts — payday, interest accrual, transfer, void — with a date, a memo, and the amount in integer cents of your family currency. The ledger is append-only.

We also collect minimal technical information automatically when you use the app: device type, browser, approximate location (from IP), and pages visited. This is operational data — we use it to keep the service running, not to build a profile of you.

We use the information we collect only to:

• Provide the Twiggybank service and keep your family ledger consistent.
• Authenticate you and protect your account from misuse.
• Send essential service emails (password resets, account changes, occasional product announcements you can opt out of).
• Improve the product and diagnose problems.
• Comply with legal obligations.

We do not sell your data. We do not share it with advertisers. We do not use family or kid data to train machine-learning models.

We rely on a small number of service providers to run Twiggybank. Each one only sees the data necessary to do its job, and is bound by its own privacy and security obligations.

• Supabase — managed Postgres database and authentication. Holds your family data and authenticates your sign-ins.
• Vercel — hosting for the web app. Serves the pages you load.

We may also disclose information when required by law (a valid subpoena, for instance) or to protect the rights and safety of our users.

Your data is stored in data centers operated by our hosting providers. By default, this is in the United States. If you have a specific data-residency need, write to us — we will tell you honestly what we can and can’t accommodate.

We keep family data for as long as your account is active. If you close your family, we keep a minimal archival copy of the ledger for legal and reconciliation purposes; everything else is deleted within 90 days unless we are required to retain it longer.

You have the right to access, correct, export, and delete the personal information we hold about you. You can do most of this inside the app (account settings); for anything that requires us to step in, write to privacy@twiggybank.com and we’ll respond within 30 days.

Depending on where you live, you may also have additional rights under laws like the GDPR, the CCPA, or similar regimes. These rights include the right to object to certain processing, the right to lodge a complaint with a supervisory authority, and the right to know whether we’ve sold or shared your information (we haven’t).

Twiggybank is designed for families with children. We collect information about children only when a parent adds them to a family account. The rules that govern that collection are documented separately in our Children’s Privacy Notice, which forms part of this policy.

We use a small set of cookies that are strictly necessary to keep you signed in and to remember basic preferences (like your chosen theme). We do not use advertising cookies, and we do not embed third-party trackers on pages that children see.

If you have a do-not-track signal enabled in your browser, we honor it for any non-essential cookies.

If you use Twiggybank from outside the country where our service providers store data, your information will be transferred across borders. Where required, we rely on standard contractual clauses and equivalent safeguards to make these transfers lawful.

When we make material changes to this policy, we’ll update the “last updated” date at the top and notify you by email or in the app. For non-material changes (fixing a typo, adding a clarification), we may quietly update without notice.

Questions, concerns, or requests: privacy@twiggybank.com. We answer email ourselves and will reply within a few business days.