Privacy policy
Famlet · Updated: 08.11.2026
PulBalam (Famlet) is a family ledger for pocket money and savings. No money moves through the app: real money stays in the bank, the app only keeps the family's records. There are no ads for children, no data is sold, and no tracking or analytics services are used.
What we store
- Parent: phone number (for sign-in with an SMS code) or, with Sign in with Google, only your Google account’s permanent ID (your email address, name and photo are not stored), display name, family name, language and currency.
- Child (added by a parent): name, date of birth (for age and limits), an optional photo (approved by a parent for under-13s), goals, allowance rules, spending and savings records, money requests, chores.
- A child's device signs in without a phone number, using a join code from the parent; a random device identifier is stored.
- Cards: only a label, the bank and optionally the last 4 digits — to open the bank app. Full card numbers, PINs and bank logins are never asked for or stored.
- Relative link (Premium): a relative only sees the child's first name, goal names and progress, and can record a gift. The relative's IP address is stored only as a one-way hash, for rate limiting.
- Security: sign-in attempts, IP address and device identifier are kept for at most 3 days for rate limits and abuse prevention. Security events on your account (sign-in, sign-out, removing a device) are kept for 90 days, and the IP address in them is deleted after 3 days. For the “Active devices” list, a short device name (for example, “Android 14 · Pixel 7”) is kept while the sign-in is active. SMS codes are deleted within a day.
- Subscription (Premium): the Google Play purchase token, its state and expiry. Card details stay with Google and never reach us.
How we use it
- To show and keep the family ledger and deliver requests and approvals between parents and the child's device.
- To protect sign-in (SMS code, Cloudflare Turnstile check) and prevent abuse.
- To check whether Premium is active.
- AI coach (Premium, optional): only aggregated facts are sent to Anthropic's Claude model — age band, rounded amounts, goal title. Names, phone numbers, dates of birth, note texts and identifiers are not sent. Anthropic does not use this data to train its models.
Who processes it (service providers)
- Cloudflare (server, Turnstile security check).
- Neon (database, Frankfurt, EU).
- An SMS provider (sending sign-in codes).
- Google Play (subscription payments).
- Anthropic (only the Premium AI coach, with the aggregated facts above).
- Data is never sold and never used for advertising.
Children
- Only a parent creates and manages a child profile. A child never provides a phone number or email.
- For under-13s, a photo is shown only after a parent approves it. There are no ads, in-app purchases or external links for children.
- A parent can view, correct and delete a child's data at any time.
Retention and deletion
- Data is kept until the family or account is deleted. After deletion it can be restored with an SMS code for 30 days, then everything is fully deleted from the server.
- Child device accounts that never joined are deleted after 7 days. Backups are rotated by the provider within a short period.
- Excel and PDF exports are created on the phone and are not sent to the server.
Your rights
- View and correct your data — in the app.
- Delete — in the app: Settings → Account → "Delete my account" or "Delete family" (with an SMS code). Details: /delete-account.
- Questions and requests: manqudaynano@gmail.com.
Security
- All traffic is encrypted with HTTPS. Sign-in uses SMS codes; no passwords are stored. Families cannot see each other's data (row-level permissions in the database).