Privacy

Last updated October 2026 · a placeholder until a reviewed policy replaces it

The short version: JarSprout is a book, not a bank. It stores names, an email, hashed PINs, and the money lines you write. It never connects to a bank, never sees a card number, never sells data, and never shows ads. Email us and we delete your family.

What we store

Your family: the family name, the six-character family code, and your time zone.
Parents: first name, email address, a hashed password and a hashed 4-digit parent PIN. We never store the password or the PIN itself. An open co-parent invite is a hashed code with an expiry date.
Your kids: a first name (or nickname), an emoji avatar, and a hashed 4-digit PIN. No email, no birthdate, no photo.
The book: jobs, which days were checked and who locked them, paydays, extra money and the reason you gave, spending you logged, interest, goals, check-ins, "I want to buy" asks, and the notes that become letters.
Sign-in token: one random token saved in your browser so you stay signed in; the server keeps only a hash of it. On a shared phone, a parent PIN opens a two-minute grown-up mode inside the kid's session. No cookies, no trackers.

What we never touch

No bank accounts, bank logins, or account numbers.
No debit or credit card numbers. There is nothing to pay for.
No real money. Every dollar in JarSprout is a number you wrote; the cash stays with you.
No location, contacts, photos, or messaging.
No third-party analytics or ad trackers on any page.

What we do with it

Show it back to your family. We don't sell data, share it with advertisers, or build profiles. The only people who can see your family's jars are the parents in it, and kids with the family code and their own PIN.

Kids

A parent sets up JarSprout, and a kid's account exists only inside that family. Kids give us a first name and a PIN their parent chose with them. We don't ask kids for anything else, and we don't contact them.

Deleting your family

Email hello@jarsprout.app from the address you signed up with. We remove the family, every parent and kid in it, and the whole book. There's no "deactivated" state; it's gone.

Questions

Write to hello@jarsprout.app. A person reads it.