Privacy in plain words
Family Pot holds a household's money, so it is built to keep that private, including from us.
Where your information is
Only on your phone
- Your PIN, in any form
- Receipt photos
- Payment messages you paste or share in
- Your fingerprint, which the phone reads itself
On our server, locked
- What you keep for yourself, sealed on your phone before it leaves it. We cannot open it.
- Your recovery bundle, which only your recovery code opens.
On our server, readable
- The household's shared records, so every member's phone stays in step
- The names members choose
- Usage figures and crash reports, never amounts, names or notes
- Notes you choose to send from Tell us
Who in the household sees what
What you keep for yourself
Yours alone, even on a phone you share. Each person opens the app with their own PIN.
The household's records
Seen by the household's lead and contributors, including family abroad who belong to it. Everyone decides what they share with the household.
A shopper
Sees only the market list and the cash given for it.
What Family Pot never does
- Show adverts, or sell or rent your information
- Use outside tracking or analytics services, here or in the app
- Read your messages, contacts or files on its own
- Give financial advice
If you lose your phone
At setup you write down a recovery code. With it, what you keep for yourself and your place in the household come back on a new phone. Nobody can reset it for you, because nobody else holds the key.
The full privacy policy
Every detail: what is kept, for how long, and your rights. Last updated 12 October 2026.