This policy applies only to our Pocket Money app. Our other apps are covered by the general privacy policy. Pocket Money has its own because it differs in one essential respect: it stores usage data on our own server, and that data also concerns children.
Hammouch & Pasqua & Wolniak GbR
Wieprechtstraße 5
45327 Essen, Germany
info@webitect.de
The app shows children their pocket money on their own device and credits interest every month. So that the parent's and the child's device see the same balance – and so that interest does not depend on a device clock, which can be set forward – all calculation happens on our server. Without this storage the app could not provide its core function (Art. 6(1)(b) GDPR).
About adults who sign in:
We do not store your e-mail address. It is not needed to sign in and is therefore not kept.
About children – created and entered by the parents:
We store no surname, no date of birth, no age, no photo and no contact details of children. Children have no account and no login in the app; their device is paired by a parent using a one-time code.
About devices: for each paired device we store a cryptographic digest (SHA-256) of its access token – not the token itself –, an optional device label for recognition, and timestamps. Pairing codes live for ten minutes and are deleted afterwards.
All data about children is entered by the parents. Consent is therefore given by the holder of parental responsibility (Art. 8 GDPR). Parents can delete a child's data, or the whole family's data, at any time (see below).
Adults sign in with their Google account. Data is transmitted to Google in the process; Google's privacy policy and terms apply. We receive a signed sign-in assertion from Google and take only the identifier and display name mentioned above from it.
The Pocket Money app contains no advertising. No ad SDK is included and the device advertising ID is not used. There is no tracking and no profiling – neither of adults nor of children.
The app may offer a full version as a one-time purchase. Payment is handled exclusively by Google Play; we receive no payment details and no real name. To unlock the purchase we store purchase-related data (purchase token, product id, order number, purchase state, timestamps) and a pseudonymous family identifier, and we reconcile the state via the Google Play Developer API. The legal basis is Art. 6(1)(b) GDPR and our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).
The app requires exactly one permission:
No location, no camera, no contacts, no microphone, no files.
We keep the data for as long as the family uses the app. You can delete it yourself at any time – in the app or, without the app installed, via our deletion page.
If you are the only adult in the family, all of the family's data is removed irreversibly. If another adult belongs to the family, only your own access is deleted and the family stays with the other person. Purchase-related data is subject to statutory retention periods.
The data is stored on our web space with our hosting provider inside the EU. It is not passed on to third parties; the exception are the Google processes described above (sign-in, Google Play).
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a supervisory authority. Please contact info@webitect.de.
We reserve the right to change this privacy policy without prior notice, for example when the app gains new functionality.
Last updated: 1 August 2026