Privacy Policy

Your family's privacy is not just a policy—it's the foundation of everything we built Funny Money to be.

Bottom Line Up Front

Funny Money does not require an account, email address, phone number, or legal name. Your family ledger is private by design.

Your ledger stays on your device until you invite someone to that account. We then store an encrypted copy so invited devices can sync, but we cannot read it. PostHog receives limited anonymous usage events, and RevenueCat processes purchase status; neither receives your readable ledger.

This privacy policy is subject to change, and any updates will be provided in the application itself. We'll notify you of any material changes through the app.

Family Data Stays Private

We don't require an email address, phone number, or legal name. After you invite someone to an account, we store an encrypted copy of that ledger so invited devices can sync.

  • No name or email required
  • No contacts or SMS access
  • Encrypted ledger only after invite
  • No ad targeting
  • Anonymous usage analytics only

On-device first, encrypted sync after invite

Ledgers stay on your device until you invite someone to that specific account. Then we store an encrypted copy. We cannot read it.

  • Local app database
  • Upload only after invite
  • Per-account access
  • Delete local and shared cloud copies

No personal login

Funny Money works without email, phone, or a password account. You share an account number and a Security PIN with the people you choose.

  • No registration email
  • No contacts permission
  • Join via link, QR, or manual entry
  • Per-account invites

Anonymous Usage Analytics

We use PostHog for anonymous product analytics to improve the app. No transaction amounts, names, or ledger data are sent.

  • Random anonymous ID per device
  • Screen and feature usage only
  • No session replay or ad profiling
  • GeoIP disabled
  • Not used for cross-app advertising

Legal Privacy Policy

In-App Purchases

Funny Money requires an in-app purchase to unlock the full version of the app beyond the 10-transaction demo. Apple processes the payment. Funny Money and RevenueCat receive purchase and entitlement information associated with a random app ID, not your name or email address.

You can restore an eligible purchase through the app while signed in to the Apple ID that made it. Contact us if restoration does not work.

Consent to Share Consumption Data with Apple: By using our app and making in-app purchases, you consent to our sharing of data regarding your usage and consumption of purchased content with Apple, as part of our efforts to resolve refund requests. This information may include details about how you have accessed and interacted with the purchased content. The purpose of sharing this data is to help Apple make an informed decision regarding refund requests. We ensure that such data sharing is done in compliance with Apple's policies and only as necessary to process your requests.

Anonymous Usage Analytics (PostHog)

We use PostHog (US cloud) for anonymous product analytics. PostHog receives a random anonymous user ID generated on your device, app version, coarse feature-usage events (such as which screens are viewed), and purchase-funnel events (such as whether the upgrade screen was shown). PostHog does not receive your name, email, contacts, transaction amounts, account names, or ledger data. GeoIP is disabled. Data is used solely to improve the app, not for advertising. For full details, see PostHog's privacy policy.

Subscription and Purchase Data

We use RevenueCat to manage in-app purchases and subscriptions processed through Apple's In-App Purchase system. RevenueCat receives only anonymous app user IDs generated by our app (not tied to your name, email, device ID, or any personal information) and Apple receipt data to verify your subscription status. This data is used solely to authenticate and deliver purchased features within the app. We do not share this data with any other third parties, and it cannot be linked to your identity. For full details, see RevenueCat's privacy policy.

Information We Don't Collect

Funny Money is designed so readable family ledger data stays on your devices. We do not use or receive:

  • Personal identification information (name, email, phone number)
  • Advertising identifiers (IDFA) or cross-app tracking
  • Location data or geolocation information
  • Readable transaction amounts, balances, or ledger contents on our servers
  • Family member names or account details in analytics

We do collect anonymous product analytics as described above. Anonymous IDs are used only to understand app usage and purchase flows, not to identify you personally.

Data Storage

Ledger records are stored in a local SQLite database inside the app's iOS storage. Security PINs and sync tokens use iOS Keychain-backed secure storage. Local records include:

  • Transaction history and details
  • Account balances and configurations
  • Family member information and roles
  • Invoice records and status
  • App preferences and settings
  • PIN protection settings

Account Sync After Invite

Funny Money does not use iMessage, SMS, or iCloud to sync ledgers. After you invite someone to an account, we store an encrypted snapshot so invited devices can stay in sync. That copy:

  • Is created only after you invite someone to that account
  • Is encrypted on your device with a key derived from the Security PIN
  • Does not include your contacts, SMS history, or a personal login
  • Cannot be read by Funny Money without the Security PIN

You share a link, a QR code, or the account number plus Security PIN using your phone's Share sheet or in person. Funny Money does not send SMS on your behalf and does not access your contacts.

Third-Party Services

Funny Money uses a small number of third-party services for purchases, anonymous analytics, and optional account sync. We do not use advertising networks or social media trackers.

  • RevenueCat — in-app purchase verification (anonymous ID + Apple receipt data)
  • PostHog — anonymous product analytics (no ledger or personal information)
  • AWS (Lambda + DynamoDB) — encrypted per-account snapshots after you invite someone

Data Security

Family ledger data is stored in the app's local database. Invited accounts also keep an encrypted server copy. PostHog receives limited product-usage events, not ledger details or the names you enter.

  • Local SQLite is the source of truth on each device
  • Server copies are encrypted before upload
  • PIN protection for sharing and administrative actions

Your Rights

You control ledger data from the app. Deleting an unshared account removes its local copy. For a shared account, account settings can also request deletion of the encrypted cloud copy for all devices.

  • Edit or delete local account information in the app
  • Delete an invited account's encrypted cloud copy
  • Contact us about PostHog or RevenueCat service data

Children's Privacy

Funny Money is designed for family use, including use by children under adult supervision. It does not require children to provide an email address, phone number, legal name, location, contacts, or advertising identifier. Shared ledger data remains encrypted and controlled by the family.

Data Export

You can export your family ledger at any time directly from the app. This exported data is provided to you in a standard format and we do not receive any copies or access to your exported data.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be communicated through the app itself. We will notify users of any material changes through in-app notifications.

Contact Us

If you have any questions about this privacy policy, please contact us at:

Email: support@funnymoneyapp.com

Privacy Commitments

Limited Data

We limit service data to anonymous product analytics, purchases, and optional encrypted account sync.

No Data Sales

We do not sell personal information or use data for targeted advertising.

Family Control

Adults control account creation and sharing, and children are not asked for contact details or advertising identifiers.

Private by Design

Ledgers are local by default, and optional server copies are encrypted on the device before upload.

Last updated: September 2026

This privacy policy may be updated periodically. Users will be notified of any material changes through the application.