Private family space
Data privacy and security
What we collect
Tracker and family setup details—including the family name, kids' names, avatar icons, display units, and allowance rules.
Ledger entries—including allowance payouts, chore completions, bucket allocations, transactions, savings goals, and badge achievements.
Private token security model
AllowancePal uses unguessable access links. Only SHA-256 cryptographic hashes of access tokens are stored in the database.
Family links cannot perform parent administrative actions. A separate admin link is required for management.
What we never do
We do not sell family data, display third-party advertisements, or track children across external websites.
Tracker pages do not use invasive analytics or third-party tracking scripts.
Where data lives
Data is stored in a private Supabase Postgres database.
When opened from Homebase, the session email appears in the header; AllowancePal does not persist the Homebase password.
Questions and data control
Parents can edit or remove kids, rules, chores, and transactions from the admin view.
For privacy requests or permanent deletion, email hello@theafoundry.com.