Short version: CoinCity is a kids' educational app. We collect only what we need to run the game. We never sell data, never show ads, and parents are in full control of their child's information. Children under 13 cannot create accounts — a parent must set everything up.
CoinCity ("we," "us," or "our") is operated by CoinCity LLC, a US-based limited liability company. We build CoinCity, a financial literacy mobile game for children ages 5 and up ("the App").
If you have any questions about this Privacy Policy, contact us at support@coincitykids.com.
The App is directed to children under the age of 13. We comply fully with the Children's Online Privacy Protection Act (COPPA) and the FTC's COPPA Rule.
Children cannot create accounts directly. A parent or legal guardian must create a parent account, read this Privacy Policy, and provide verifiable consent before any child profile is created. This consent is recorded in our database with a timestamp.
We do not collect more personal information from children than is reasonably necessary to provide the App's services.
Parents may review, correct, or request deletion of their child's data at any time — see Section 7 for how.
| Data | Why we collect it | Stored where |
|---|---|---|
| Email address | Account creation, login, and password recovery | Supabase Auth (US) |
| Password (hashed) | Account security — we never see your password in plain text | Supabase Auth (US) |
| Subscription status | To know whether your account has an active subscription | Supabase + RevenueCat |
| COPPA consent timestamp | Record that a parent consented before child data was stored | Supabase (US) |
| Data | Why we collect it | Stored where |
|---|---|---|
| First name (or nickname) | Personalise the game experience | Supabase (US) |
| Age | Age-appropriate content filtering | Supabase (US) |
| Avatar (an emoji chosen by the child) | Visual identity in the app and leaderboard | Supabase (US) |
| Game progress (coin balance, buildings placed, daily income) | Save and restore the child's city between sessions | Supabase (US) |
| Savings jar balances (Spend / Save / Give) | Core educational mechanic — tracking savings behaviour | Supabase (US) |
| Transaction history | Parent Dashboard weekly stats and financial reporting | Supabase (US) |
| Mini-game results and investment event choices | Progress tracking, badges, and Professor Hoot personalised advice | Supabase (US) |
| Daily challenge completions | Track which daily challenges the child has completed | Supabase (US) |
| Daily playtime (seconds per day) | Enforce the parent-configured daily screen time limit | Supabase (US) |
We use information only for the purposes listed below. We do not sell, rent, or trade any personal information to third parties for marketing purposes.
We share personal information only with the service providers necessary to operate the App. All providers are contractually required to use data only for the purposes we specify and to maintain appropriate security.
| Provider | Purpose | Data shared | Location |
|---|---|---|---|
| Supabase Inc. | Database and authentication | All game data described in Section 2 | United States |
| RevenueCat Inc. | Subscription billing management | Parent email, subscription status, anonymous app user ID | United States |
| Sentry (Functional Software Inc.) | Crash reporting and error monitoring | Device type, OS version, app version, anonymised stack traces, and app events leading up to a crash. No child name, email, or game data is intentionally sent. | United States |
| Expo (Vercel) | App build and delivery infrastructure | No personal user data | United States |
We do not share any personal information with Apple beyond what Apple requires to operate the App Store and process subscriptions. Apple's privacy practices are governed by Apple's Privacy Policy.
We do not share personal information with advertisers, data brokers, or analytics companies that sell or share data.
CoinCity includes a leaderboard showing children's progress within their league (Bronze, Silver, or Gold). The leaderboard displays:
The leaderboard does not display the child's full name, savings balances, age, or any other personal information. Other users cannot identify a child from the information shown. If you would like your child's profile excluded from the leaderboard, please contact us at support@coincitykids.com.
Your right to delete is absolute. You can permanently delete all child data — immediately, without contacting us — directly from within the app. We are required to honour deletion requests under COPPA and we make it as easy as possible.
To delete one child's data while keeping your account:
This immediately and permanently deletes all of that child's data including: city progress, buildings, coin balance, savings jar balances, transaction history, daily challenge records, and playtime logs. This action cannot be undone.
To delete your parent account and every child profile under it:
This immediately deletes all child profiles, all associated game data, and your parent profile. Your email address (held in our authentication system) is queued for deletion and removed within 30 days. You will receive a confirmation email once your authentication record has been fully purged.
If you are unable to access the app, you may request deletion by emailing support@coincitykids.com with the subject line "Account Deletion Request" and the email address associated with your account. We will process your request within 10 business days and send a confirmation when complete.
| Data | Deleted immediately | Retained and why |
|---|---|---|
| All child profiles (name, age, avatar) | ✅ Yes | — |
| City progress, buildings, coins | ✅ Yes | — |
| Savings jar balances | ✅ Yes | — |
| Transaction history | ✅ Yes | — |
| Daily challenge records | ✅ Yes | — |
| COPPA consent timestamp | No | Retained up to 7 years for legal compliance — required by FTC COPPA rules to demonstrate consent was obtained |
| Subscription transaction records | No | Retained up to 7 years for financial and tax compliance — contains only payment amounts, no game data |
| Parent email address (authentication) | No — queued | Deleted within 30 days of request |
No method of transmission over the internet is 100% secure. While we use commercially reasonable means to protect your information, we cannot guarantee absolute security.
As the parent or legal guardian who created your child's profile, you have the right to:
To exercise any of these rights, you can:
We may ask you to verify your identity before processing a request to ensure we only release data to the appropriate parent or guardian.
The App may display a link to our Privacy Policy and Terms of Service. These are the only external links accessible from within the App. We do not include links to social media, advertising networks, or any third-party websites within the children's area of the App.
The Parent Dashboard may link to the App Store or Google Play for subscription management. Those platforms are governed by their own privacy policies.
CoinCity is operated from the United States. If you are located outside the United States, please be aware that information we collect is transferred to and processed in the United States. By using the App, you consent to this transfer. We take appropriate steps to ensure that personal data receives an adequate level of protection in the countries in which we process it.
If you are a user in the European Economic Area (EEA) or United Kingdom, additional rights may apply to you under the General Data Protection Regulation (GDPR) or UK GDPR. Please contact us at support@coincitykids.com for more information.
We may update this Privacy Policy from time to time. When we make material changes — particularly changes that affect what data we collect from children or how we use it — we will notify parents by email at least 30 days before the changes take effect and require re-consent where required by COPPA.
Minor updates (such as correcting typos or clarifying language) will be reflected by updating the "Last updated" date at the top of this page.
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
We aim to respond to all privacy-related enquiries within 10 business days.