webitect.de
Home | Blog | Apps

de | en

Privacy policy for the Pocket Money app

This policy applies only to our Pocket Money app. Our other apps are covered by the general privacy policy. Pocket Money has its own because it differs in one essential respect: it stores usage data on our own server, and that data also concerns children.

Controller

Hammouch & Pasqua & Wolniak GbR
Wieprechtstraße 5
45327 Essen, Germany

info@webitect.de

Why a server at all?

The app shows children their pocket money on their own device and credits interest every month. So that the parent's and the child's device see the same balance – and so that interest does not depend on a device clock, which can be set forward – all calculation happens on our server. Without this storage the app could not provide its core function (Art. 6(1)(b) GDPR).

What we store

About adults who sign in:

We do not store your e-mail address. It is not needed to sign in and is therefore not kept.

About children – created and entered by the parents:

We store no surname, no date of birth, no age, no photo and no contact details of children. Children have no account and no login in the app; their device is paired by a parent using a one-time code.

About devices: for each paired device we store a cryptographic digest (SHA-256) of its access token – not the token itself –, an optional device label for recognition, and timestamps. Pairing codes live for ten minutes and are deleted afterwards.

Consent regarding children

All data about children is entered by the parents. Consent is therefore given by the holder of parental responsibility (Art. 8 GDPR). Parents can delete a child's data, or the whole family's data, at any time (see below).

Google Sign-In

Adults sign in with their Google account. Data is transmitted to Google in the process; Google's privacy policy and terms apply. We receive a signed sign-in assertion from Google and take only the identifier and display name mentioned above from it.

No advertising

The Pocket Money app contains no advertising. No ad SDK is included and the device advertising ID is not used. There is no tracking and no profiling – neither of adults nor of children.

In-app purchases

The app may offer a full version as a one-time purchase. Payment is handled exclusively by Google Play; we receive no payment details and no real name. To unlock the purchase we store purchase-related data (purchase token, product id, order number, purchase state, timestamps) and a pseudonymous family identifier, and we reconcile the state via the Google Play Developer API. The legal basis is Art. 6(1)(b) GDPR and our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).

App permissions

The app requires exactly one permission:

No location, no camera, no contacts, no microphone, no files.

Retention and deletion

We keep the data for as long as the family uses the app. You can delete it yourself at any time – in the app or, without the app installed, via our deletion page.

If you are the only adult in the family, all of the family's data is removed irreversibly. If another adult belongs to the family, only your own access is deleted and the family stays with the other person. Purchase-related data is subject to statutory retention periods.

Recipients and hosting

The data is stored on our web space with our hosting provider inside the EU. It is not passed on to third parties; the exception are the Google processes described above (sign-in, Google Play).

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a supervisory authority. Please contact info@webitect.de.

Changes

We reserve the right to change this privacy policy without prior notice, for example when the app gains new functionality.

Last updated: 1 August 2026

Hosted by ALL-INKL.COM - Webhosting Server Hosting Domain Provider
© 2023 - 2026 webitect.de | Impressum | About