Kupa3 – Privacy Policy

Welcome to Kupa3 ("we," "our," or "us"), a family allowance and pocket money management application developed by Cedarity (package ID: com.cedarity.kupa). This Privacy Policy explains how we collect, use, store, share, and protect information when you use the Kupa3 mobile application on iOS or Android (the "App").

By creating an account or using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the App.

Summary: Kupa3 is a family-focused app. We collect only the information necessary to provide the service. We do not sell your data. Children's data is managed exclusively by their parent or guardian within the App.

1. Who We Are

Kupa3 is operated by Cedarity. For any privacy-related inquiries, you may contact us using the details provided in Section 12 of this policy.

2. Information We Collect

We collect the following categories of information:

2.1 Account & Identity Information

Data Field	Source	Who It Applies To
Full name / display name	Provided by user or Google Sign-In	Parents & Co-Parents
Email address	Provided by user or Google Sign-In	Parents & Co-Parents
Profile photo	Uploaded by user or Google account	Parents & Co-Parents
Authentication provider	Firebase Auth (e.g., Google, email/password)	Parents & Co-Parents
User role	Set during onboarding	All users
Account creation timestamp	Firebase Auth metadata	All users
Last sign-in timestamp	Firebase Auth metadata	Parents & Co-Parents

2.2 Child Profile Information

⚠️ Children's Data Notice: Child profiles are created and managed exclusively by a parent or guardian (the "Admin" or "Co-Parent" role). Children do not create their own accounts and do not independently submit personal data.

Data Field	Purpose
Child's first name	Identify the child within the family account
Date of birth	Age-appropriate display and allowance calculations
Gender	Grammatically correct UI text
Allowance amount	Weekly pocket money configuration
Balance	Current spendable balance tracking
Savings pot data	Savings goals and charity pot management
Transaction history	Record of credits, debits, and transfers
Spend permission flag	Parent-controlled spending authorization

2.3 Financial Transaction Data

We record all financial transactions within the App, including allowance credits, manual additions, spending deductions, savings transfers, and charity pot contributions. These records are stored in Firebase Cloud Firestore and are accessible only to authorized family members.

2.4 Device & Technical Information

Device push notification token (Firebase Cloud Messaging) — for sending allowance and activity notifications
App version and platform (iOS / Android)
Biometric authentication preference (stored locally on device only — we never receive biometric data)
Local security settings (lock delay, PIN preference) — stored locally via shared_preferences

2.5 Invite Code Data

When a parent generates an invite code to add a co-parent or child, we store a 6-digit code with a 1-hour expiry and single-use flag in Firestore. No personal data is embedded in the code itself.

2.6 Feedback & Support Data

If you submit in-app feedback, we collect the message content along with your user ID and timestamp. This is used solely to improve the App.

3. How We Use Your Information

Purpose	Legal Basis
Create and manage your account and family group	Performance of contract
Display balances, transactions, and savings pots	Performance of contract
Send push notifications for allowance and activity updates	Legitimate interest / consent
Authenticate users securely (biometric, PIN, Google Sign-In)	Performance of contract / security
Process and display invite codes for family onboarding	Performance of contract
Send internal admin notifications about new registrations (operator use only)	Legitimate interest (service monitoring)
Respond to feedback and improve the App	Legitimate interest
Enforce role-based access control (Admin, Co-Parent, Child)	Performance of contract / security

We do not use your data for advertising, profiling, or sale to third parties.

4. Data Storage & Security

4.1 Where Data Is Stored

All user and family data is stored in Google Firebase services, including:

Firebase Authentication — account credentials and sign-in metadata
Cloud Firestore — user profiles, child profiles, transactions, savings pots, invite codes
Firebase Storage — profile photos
Firebase Cloud Messaging — push notification delivery
Firebase Cloud Functions — server-side processing (notifications, data validation)

Firebase infrastructure is operated by Google LLC and data may be stored in data centers globally. For Google's data processing terms, see firebase.google.com/support/privacy.

4.2 Security Measures

All data in transit is encrypted using TLS/HTTPS
Firestore Security Rules enforce role-based access — children cannot access parent data, and family data is isolated per family group
Biometric and PIN authentication adds a local device-level security layer
Invite codes expire after 1 hour and are single-use
Admin role is required for destructive operations (deleting children, deleting the family account)

4.3 Local Storage

Security preferences (biometric toggle, lock delay, session settings) are stored locally on your device using shared_preferences and never transmitted to our servers. Biometric data (fingerprints, Face ID) is processed entirely by your device's operating system — we never receive or store biometric information.

5. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

Recipient	Data Shared	Purpose
Google Firebase (Google LLC)	All app data (as infrastructure provider)	Hosting, authentication, database, notifications
Google Sign-In	Name, email, profile photo	OAuth authentication only
Nodemailer / Gmail SMTP	New user/child registration summaries	Internal operator monitoring only (not shared externally)
Family members within your group	Child names, balances, transaction history	Core app functionality — shared only within your family

We may disclose data if required by law, court order, or to protect the rights and safety of users or the public.

6. Children's Privacy

⚠️ Important: Kupa3 is designed for use by parents and guardians to manage their children's allowances. The App is not directed at children under 13 as independent users.

Child accounts within Kupa3 are created and controlled by a parent or guardian. Children do not register independently.
Child profiles contain only the information a parent enters: first name, date of birth, gender, and financial data.
Children using the child-facing view of the App can only view their balance and transaction history. They cannot modify their profile or financial settings.
Parents may delete a child's profile and all associated data at any time from within the App (Admin role required).
We do not knowingly collect personal data directly from children under 13. If you believe a child has independently submitted personal data, please contact us immediately.

7. Push Notifications

Kupa3 uses Firebase Cloud Messaging (FCM) to send push notifications about allowance deposits, spending activity, and family updates. You may disable push notifications at any time through your device's system settings. Disabling notifications does not affect core App functionality.

8. Data Retention

Active accounts: Data is retained for as long as your account is active.
Account deletion: When an Admin deletes the family account, all associated user data, child profiles, and transaction history are permanently deleted from Firestore and Firebase Storage.
Invite codes: Automatically expire after 1 hour and are purged from the database.
Firebase Auth records: Deleted upon account deletion request.
Feedback submissions: Retained for up to 12 months for product improvement purposes, then deleted.
Operator notification emails: Internal emails sent upon new user/child registration are retained per our email provider's standard retention policy.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Correction: Update inaccurate or incomplete data (available directly in the App via profile settings).
Deletion: Request deletion of your account and all associated data. Admin users can delete the family account from within the App; all users may contact us directly.
Portability: Request your data in a portable format.
Objection / Restriction: Object to or request restriction of certain processing activities.
Withdraw Consent: Where processing is based on consent (e.g., push notifications), you may withdraw consent at any time.

To exercise any of these rights, please contact us at the address in Section 12. We will respond within 30 days.

10. International Users & Data Transfers

Kupa3 is primarily designed for users in Israel. If you access the App from outside Israel, please be aware that your data may be transferred to and processed in countries where Google Firebase infrastructure operates, which may include the United States and the European Union. Google Firebase complies with applicable data transfer frameworks including Standard Contractual Clauses (SCCs).

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective Date" at the top of this document. For material changes, we will notify you via in-app notification or email. Your continued use of the App after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Kupa3 by Cedarity

📧 Email: kupa.cedarity@gmail.com

🌐 App: Kupa3 (com.cedarity.kupa)

📍 Tel-Aviv, Israel