Privacy Policy

Effective date: July 17, 2026

1. Introduction

FamilyPocket is a family budgeting and financial education app owned and operated by Wealth Inside You Lifestyle LLC. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

Questions about your privacy? Contact us at contact@sophroai.com.

2. Information We Collect

  • Account information: your name, email, and password (stored only as a secure hash — never in plain text).
  • Family information: your family name and the names and ages of children you add.
  • Financial data: bank transactions connected via Plaid. This connection is read-only — we cannot move money.
  • Credit scores: entered manually by a parent only. We never pull your credit.
  • Payment information: processed by Stripe. We never store your card numbers.
  • Usage data: how you interact with the app and which features you use, to improve the product.

3. How We Use Your Information

  • To provide budgeting and financial tools for your family.
  • To power our AI coach, Pocket (via the Anthropic Claude API).
  • To process payments (via Stripe).
  • To connect bank accounts (via Plaid — read-only).

We do NOT sell your data to anyone, ever.

4. Children's Privacy (COPPA)

FamilyPocket is designed to be managed by parents, and we comply fully with the Children's Online Privacy Protection Act (COPPA).

  • Children under 13: no account is created for the child and no email is collected from the child — the parent manages everything.
  • Teens 13–17: an invite-based account created by the parent, with parent oversight at all times.

5. Third-Party Services

We share only the minimum data needed with trusted providers who help us run FamilyPocket:

  • Plaid — bank connection (read-only).
  • Stripe — payment processing.
  • Anthropic — AI coaching features.
  • Resend — transactional email delivery.
  • Railway — cloud hosting.
  • Cloudflare — DNS and security.

6. Data Security

  • Bank tokens are encrypted with AES-256-GCM.
  • Passwords are hashed with bcrypt.
  • All data is transmitted over HTTPS.
  • Every route is protected with JWT authentication.

7. Data Retention & Deletion

  • You can delete your account at any time.
  • On deletion, all family data is removed within 30 days.
  • To request deletion, email contact@sophroai.com.

8. Your Rights

  • Access your data at any time in the app.
  • Export your budget history as CSV or PDF.
  • Delete your account and all associated data.
  • Contact us with any privacy concerns.

9. Changes to This Policy

We will notify users of material changes to this policy by email.