Privacy

Only what the family bank needs to run:

• The family: the bank's name, its timezone, and what the family calls its points (Coins, Stars, Gems).
• Grown-ups: the name and email address from the Google account they sign in with.
• Kids: a nickname, a chosen avatar and color, an optional birth year, and — if a parent sets one — a PIN, stored only as a hash (we cannot read the PIN itself). Each kid profile also records which parent created it and when: that is the consent record.
• The points ledger: every earn, spend, penalty, adjustment, goal, and sibling transfer, with any short note a parent attached. The ledger is the product — it is visible to the family it belongs to and to no one else.
• Linked devices: a label (like "Maya's tablet") and link status, so parents can see and unlink every device from their Family page.

• No kid email addresses, accounts, or passwords — kids never have login credentials.
• No photos, video, or audio. There is no camera in the app.
• No location, contacts, or anything else from the device.
• No kid free text — kids cannot type anywhere in Piggin', so nothing a kid writes can ever be collected.
• No real-money amounts, ever (see below).
• No advertising identifiers and no behavioral profiles.

Zero third-party analytics, advertising, or tracking code runs anywhere a kid can see — and none of it belongs anywhere else in the app either. The only cookies are our own: the parent's sign-in, the device link a parent created, and the kid's short-lived session on a shared device. We do not sell or share family data with anyone.

Every kid profile is created by a parent, and the app records that consent — which grown-up gave it, and when. A kid's device only joins the family through a QR code shown on a parent's own screen, and parents can unlink any device with one tap. Every coin movement is visible to the parents, with a name and a reason attached.

From the Family page, any parent can download everything — members, activities, the full ledger — as a single file, anytime, no request form.

Closing the family bank works the same way: self-serve, from the same page. It is immediate and permanent — every member, activity, ledger entry and goal is deleted outright, and so is the sign-in record of any grown-up whose only family this was. There is no grace period and nothing to reopen, so download everything first if you want to keep it.

Piggin' points have no cash value and never will. We never store money equivalents, and Piggin' is not a payment service or a real bank. Every reward is something the family itself hands over — the app just keeps score.

Write to support@pigg.in and a human will answer. If something here worries you, we want to hear it before you want to leave.