Privacy Policy

OrnaMoney Family Finance is a parent-controlled family finance and financial education app. For purposes of this policy, "OrnaMoney", "we", "us", and "our" refer to the operator of this service.

Privacy contact: dhndeveloper@gmail.com.

Account data: parent name, email address, authentication identifiers, household membership, child profile names or nicknames, child age band where provided, and settings needed to run the service.

Household finance data: allowances, goals, requests, ledger entries, account visibility assignments, category rules, recurring-rule settings, review states, and parent-approved child-facing explanations.

Connected-account data: if a parent connects a financial institution through Plaid, we may receive account metadata, balances, transaction history, transaction categories, merchant information, item status, sync status, and related identifiers needed to provide the requested features.

Technical data: device, browser, session, log, diagnostic, security, fraud-prevention, and usage data needed to operate, secure, debug, and improve the service.

We use personal data to create and secure accounts, provide parent dashboards, display connected-account context, process child requests, show child-safe views selected by the parent, maintain audit trails, provide support, prevent abuse, comply with law, and improve reliability and security.

We do not sell personal data. We do not use Plaid access tokens or connected-account data for advertising. We do not move money, hold customer funds, or initiate payments.

Plaid Link is used to let a parent authorize access to financial account data. Plaid may collect and process information under its own privacy policy when a parent uses Plaid Link.

We store Plaid access tokens only on the server side and use them to request the data the parent authorized. Parents can disconnect linked institutions in the app where available or by contacting support.

Children do not connect financial institutions. A child can only see the account and transaction information a parent chooses to make visible.

OrnaMoney is designed for parent-managed family use. Parents create and manage child profiles and control child access.

We collect child profile and child-facing financial education data only as needed to provide parent-approved features. We do not knowingly allow children to create independent accounts without parent involvement.

A parent or guardian may request access, correction, export, restriction, or deletion of child profile data by using in-app controls or contacting us.

Where GDPR, UK GDPR, or similar laws apply, we process data based on one or more legal bases: performance of a contract, consent, legitimate interests, compliance with legal obligations, and protection of the service and users.

Plaid-connected account data is processed based on the parent authorization given through Plaid Link and the parent request to provide connected-account features.

Some information is required to provide the service. If you do not provide account, household, authentication, or requested connected-account data, some features may not work.

We share data with service providers that host, secure, authenticate, monitor, or support the service. Current categories include cloud hosting, database/authentication, financial-data connectivity, analytics or diagnostics, email/support, and payment processing where enabled.

These providers may include Vercel, Supabase, Plaid, Google, GitHub, Cloudflare Turnstile, and Stripe depending on the feature used. Providers are expected to process data only for the service purposes we authorize.

We may disclose data if required by law, to protect rights and safety, to investigate abuse, or as part of a business transfer subject to appropriate safeguards.

We keep personal data only as long as needed to provide the service, meet legal obligations, resolve disputes, preserve security records, and maintain ordinary business records.

Parents can request deletion of a household account. Deletion may remove or anonymize household, child, request, allowance, ledger, connected-account, and token records unless retention is required for security, legal, fraud-prevention, backup, or accounting purposes.

Disconnected Plaid Items are removed from active use. Some logs, backups, or audit records may remain for a limited period before deletion according to operational retention schedules.

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to processing of personal data. You may also have the right to withdraw consent where processing is based on consent.

Residents of the EEA, UK, Switzerland, California, and other jurisdictions may have additional rights under applicable law. To exercise rights, contact dhndeveloper@gmail.com. We may need to verify your identity and authority over the household before acting on a request.

You may lodge a complaint with your local data protection authority if you believe your rights have been violated.

OrnaMoney does not make legally significant decisions about you or your children using solely automated processing. Projections, labels, review prompts, and educational explanations are informational and remain subject to parent review.

We and our service providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as contractual protections, adequacy decisions, or other lawful transfer mechanisms.

We use technical and organizational safeguards designed to protect personal data, including HTTPS, server-side token handling, access controls, provider-managed infrastructure security, and separation between parent and child data access.

No online service is perfectly secure. Please use a strong password and contact us promptly if you believe your account or household data has been accessed without authorization.

We may update this policy as the product, legal requirements, or service providers change. Material changes will be reflected by updating the effective date and, where appropriate, providing additional notice.