Built like we'd want our own kids' data handled.

Coinkids ("we," "us," or "our") is committed to protecting the privacy of all users, including children. This Privacy Policy explains what information we collect, how we use it, how we share it, how we store it, and your rights regarding that information.

1. Information We Collect

Coinkids is designed with data minimization as a core principle. We collect only what is strictly necessary for the app to function.

a) Information You Provide Directly

• First names of family members — used solely to personalize the in-app experience (e.g., "Good morning, Emma"). We do not collect last names, email addresses, phone numbers, dates of birth, home addresses, photos, or any other personally identifiable information.
• Chore names and descriptions — created by parents to assign tasks.
• Bitcoin wallet addresses — optionally entered by parents to track balances. These are public blockchain addresses, not private keys.

b) Information Collected Automatically

• Anonymous Firebase Authentication token — a random identifier generated by Google Firebase to sync data across your family's devices. This is not linked to any personal identity.

Note: Coinkids does not include any analytics or crash reporting SDKs. Firebase Analytics and Firebase Crashlytics are not included in the app to comply with Apple's Kids Category guidelines. No usage events, crash reports, or device telemetry are collected or transmitted.

c) Information We Do NOT Collect

We do not collect: full names, email addresses, phone numbers, physical addresses, dates of birth, photos, videos, location data, contacts, health data, financial account information, social media accounts, device identifiers for tracking, advertising identifiers, or any biometric data.

2. How We Use Your Information

We use the information we collect for the following purposes only:

• To provide and operate the app — syncing chores, earnings, and family data across devices.
• To personalize the experience — displaying first names in greetings and family views.
• To display Bitcoin balances — querying publicly available blockchain data for addresses you provide.

We do NOT use any information for advertising, marketing, profiling, behavioral tracking, or building user profiles. We do NOT sell, rent, trade, or otherwise transfer any user data to any third party for any purpose.

3. How We Share Information

We share data only with the following third-party service providers, solely for the purposes described above. Each provider is contractually obligated to protect your data with standards equal to or greater than those described in this policy:

• Google Firebase (Firestore and Authentication only) — operated by Google LLC. Used solely for data storage and anonymous authentication. Firebase Analytics and Firebase Crashlytics are not included in the app. No analytics, crash reports, or advertising data is collected or transmitted. Google's privacy policy: policies.google.com/privacy
• CoinGecko API — used solely to fetch the current Bitcoin price. No personal data is sent. Privacy policy: coingecko.com/en/privacy
• Blockchain.info API — used solely to fetch publicly available Bitcoin address balances. No personal data beyond the public address is sent. Privacy policy: blockchain.com/legal/privacy

We do NOT share data with any advertising networks, data brokers, social media platforms, or any other third parties.

4. Data Storage and Security

• All family data is stored in Google Firebase Firestore, hosted on Google Cloud infrastructure.
• Data is encrypted in transit using TLS and encrypted at rest using AES-256 encryption.
• Each family's data is logically isolated and scoped to that family.
• We use Firebase Anonymous Authentication — no email, password, or credentials required.
• Access is secured with Firebase Security Rules that enforce family-level data isolation.

5. Data Retention and Deletion

• We retain your family data only for as long as you actively use the app.
• You may delete all data at any time via Settings → Delete Account & Data.
• Upon deletion, data is permanently removed from Firebase Firestore.
• If you uninstall without deleting, data remains on our servers. Use the in-app deletion option first, or email us.
• Request deletion by contacting coinkidsapp@gmail.com. We process requests within 30 days.

6. Children's Privacy (COPPA & GDPR-K)

Coinkids is designed for families including children under 13 (US) and under 16 (EU/UK). We comply with:

• Children's Online Privacy Protection Act (COPPA) — United States
• General Data Protection Regulation (GDPR) provisions for children — EU/UK
• California Consumer Privacy Act (CCPA) as it applies to minors

Our practices:

• We do not knowingly collect personal information from children beyond first names, entered by a parent/guardian.
• We do not collect photos, videos, audio, location, contacts, or biometric data from children.
• We do not collect persistent identifiers for tracking children across apps or websites.
• All child accounts are created and managed by a parent/guardian.
• No analytics or crash reporting SDKs are included.
• We do not serve any advertising.
• Children cannot make purchases, share personal information publicly, or communicate outside their family.

Contact coinkidsapp@gmail.com if you believe we've inadvertently collected a child's personal information.

7. Parental Rights and Controls

• Review — view all stored family information in the app
• Modify — edit or remove any data from the Manage Family screen
• Delete — permanently delete all data via Settings or email
• Revoke consent — delete your data to revoke consent
• We will not require a child to disclose more than reasonably necessary

8. Your Privacy Rights

EU/UK residents (GDPR): Right of access, rectification, erasure, restrict processing, data portability, and objection.

California residents (CCPA): Right to know, delete, opt-out of sale (we don't sell data), and non-discrimination.

Contact coinkidsapp@gmail.com. We respond within 30 days.

9. Third-Party Services and Network Requests

Coinkids makes only these network requests:

• Google Firebase Firestore — sync family data (encrypted via TLS)
• Google Firebase Authentication — anonymous auth tokens
• CoinGecko API — Bitcoin price data
• Blockchain.info API — public Bitcoin address balances
• Bitcoin.org — Bitcoin whitepaper PDF

No personal data beyond first names is transmitted. First names are sent only to Firebase Firestore, encrypted in transit.

10. Do Not Track / App Tracking Transparency

• We do not track users across apps or websites
• We do not use the Apple Advertising Identifier (IDFA)
• We do not participate in cross-app or cross-site tracking
• We honor all Do Not Track signals by default
• We do not use App Tracking Transparency because we don't engage in tracking

11. International Data Transfers

Data is stored on Google Cloud servers which may be in the US or other countries. Google Firebase complies with Standard Contractual Clauses for EU data transfers.

12. Changes to This Privacy Policy

We will update the "Last Updated" date and display an in-app notice for material changes. Continued use constitutes acceptance.

13. Contact Us