Privacy Policy

Bank of Dad is operated by Bright Motion LLC (“we”, “us”), at 821 E Washington Ave, Suite 200, Madison, WI 53703. This policy covers bank.justinkbeck.com and everything under it.

For questions, requests about your data, or anything in this policy, write to [email protected]. We are the point of contact for parental rights under the Children’s Online Privacy Protection Act (COPPA) — see section 5.

In short: An email address, your family’s settings, and a hashed PIN.

Email address

Required. It is your login — we email you a one-time link instead of asking you to invent another password — and it is where the optional weekly summary goes.

Family name and link

The name you choose and the /bank/<name> address it lives at.

Family PIN

Stored only as a scrypt hash. We cannot read it back, and neither can anyone who obtains the database.

Settings

Timezone, interest rates, chore list, board size, and the rest of your house rules.

Technical data

IP address, browser and device type, and timestamps, in ordinary server logs and in our analytics (section 7).

We do not ask for a payment card, a phone number, a home address, or a photograph, because the app does not need any of them. No money moves through Bank of Dad — you hold the actual cash, and the app only keeps score.

In short: A first name and, optionally, a birthday. Everything else is chore and balance history the app creates as you use it.

First name

Whatever you type. A nickname or an initial works exactly as well — the app never checks it against anything.

Birthday (optional)

Used to suggest age-appropriate chores and to mark the day on the board. You can leave it out and the app still works.

Avatar and colour

An emoji and a colour you pick, so a child who cannot read yet can find their own screen.

Chore and money history

Which chores were completed and approved, balances, deposits, interest, and any business shares. Created by using the app.

Children do not have accounts. There is no child login, no child email address, no password for a child to lose, and no way for a child to communicate with anyone through this app. Kids use a screen in your house — your tablet, that you paired once with your family PIN — and everything on it stays under your account and your control.

We do not ask for, and you should not enter, a child’s last name, school, address, photograph, or anything else we have not asked for. There is no field for it and no use for it.

In short: You give consent during setup, by signing it. You can withdraw it at any time, and we will delete everything.

This app is built for households with young children, so we assume the children in it are under 13 and apply COPPA to all of them rather than guessing.

What we collect and why. Exactly what is listed in section 3, and only to run the service you asked for: to show a child their board, track what they earned, and pay interest on the schedule you set.

How consent works. Before your family is created, we show you this policy and ask you to check a box and sign your name. Nothing about a child is stored until you do. We keep a record of that consent — your name as signed, the time, and which version of these documents you agreed to.

We never condition participation on more than we need. A birthday is optional. A name can be a nickname. The app works with the minimum.

We do not disclose your children’s information to anyone. It is not sold, not rented, not shared with advertisers, and not used to build a profile or target advertising — to your child or to you. Our infrastructure providers (section 8) process it on our behalf and for no purpose of their own.

We do not market to children at all. Everything we advertise is aimed at parents. There is nothing to buy inside the app, nothing to unlock, and no message of any kind directed at your child.

No third-party tracking on children’s screens. The pages a child uses — the family board and the individual kid pages — carry no advertising network and no third-party tag of any kind. Our own first-party usage analytics, described in section 7, runs there so we can tell whether the app works. Nothing else does, and nothing about your child reaches another company.

In short: See it, correct it, delete it, or withdraw consent. One email.

You may, at any time and at no cost:

• Review everything we hold about you and your children.
• Correct anything wrong — most of it you can edit yourself in the app.
• Delete an individual child’s information, or your family’s entire record, without deleting the rest.
• Withdraw your consent, which means we stop collecting anything further about your children and delete what we hold.

Email [email protected] from the address on the account and we will act within 30 days. We may need to confirm it is really you before deleting a family — which is us protecting your data, not stalling.

Withdrawing consent ends the service for your children, because there is no version of this app that works without their names on the board.

In short: To run the app, to email you, and to keep it working. Nothing else.

• Running the service — boards, balances, interest, and your settings.
• Signing you in, by emailing you a one-time link.
• The weekly summary email, if you have it switched on. You can turn it off in Settings.
• Security, fraud prevention, debugging, and backups.
• Understanding how the app is used, in aggregate, so we can improve it.

We do not use your children’s information for marketing of any kind, and we do not sell or rent anyone’s personal information — a category that includes, in the sense some state laws use the word “sale”, sharing it for cross-context behavioural advertising.

In short: First-party analytics everywhere; an advertising pixel only on the pages adults use to sign up.

Our own analytics. We use AgentHog, a product also operated by Bright Motion LLC, on our own servers. It records page visits, taps and session timings against a random identifier, so we can see which parts of the app people use and where they get stuck. It is first-party — the data does not go to another company — and it does not collect the contents of what you type.

Advertising measurement. When we run ads, we need to know which ones led to a signup. The Meta advertising pixel therefore loads on our marketing page, the sign-in page, the setup wizard and the parent dashboard, and reports back that a signup happened. It is not present on the family board or on any child’s screen. If you would rather it did not run at all, a content or tracker blocker will stop it, and the app works exactly the same.

We do not run behavioural advertising to children, and we do not build advertising audiences from anything a child does.

In short: Three infrastructure providers, each acting only on our instructions.

Railway

Hosts the application and the database (United States).

Resend

Delivers sign-in links and the weekly summary email.

Meta Platforms

Receives advertising-conversion events from the adult-facing pages described in section 7. Never from a child's screen.

They process data on our behalf, under contract, and may not use it for their own purposes. We do not disclose personal information to anyone else, except where the law requires it or to protect someone from harm — and if we are ever compelled to hand over data about a family, we will tell that family unless we are legally barred from doing so.

In short: While your family exists, plus 30 days of backups.

We keep your family’s data for as long as the account is open, because the entire point is a ledger with history in it. Delete a family and it is removed from the live database immediately and ages out of encrypted backups within 30 days.

A record of your parental consent is kept after deletion, because being able to show that consent was given is a legal obligation. It holds your name, email, the date, and the document versions — no information about your children.

Sign-in links expire after 20 minutes and are single-use. Aggregate, non-identifying usage statistics may be kept indefinitely.

Traffic is encrypted in transit. Family PINs are scrypt-hashed, sign-in tokens are stored only as hashes, and a family’s data is scoped to that family at the database layer so one household cannot read another’s. Repeated wrong PIN entries lock a screen out.

No system is perfect, and we will not pretend otherwise. If a breach affects your family’s data we will tell you, by email, without unnecessary delay.

We will post changes here and update the version at the top. If a change materially affects what we collect about your children, or how we use it, we will email account holders and ask for consent again before it applies to their family — that is what the version stamp on your consent record is for.

Questions, or anything that reads as though we are hiding behind it, go to [email protected]. The Terms of Service cover the rest of the arrangement.