Privacy Notice
Effective 29 September 2026
A short version for children
Your parent or carer makes your profile. You can use a nickname—you do not need to give us your email, full name, address or school. We remember your lessons, Coins, streak and choices so the app works. If your parent joins the League, other families see only your randomly generated League Name and Coins. We do not show your nickname, sell your information, run adverts or track your location.
If you are worried about information in your profile, tell a trusted adult. They can contact us and ask us to explain, correct or delete it.
1. Who controls your information
SINDER LIMITED is the data controller for FGC Money Minds. We are registered in England and Wales under company number 06129850. Our registered office is 7 Bell Yard, London, England, WC2A 2JR. Privacy enquiries may be sent to fgcmoneyminds@gmail.com.
2. Information we collect
- Parent account information: email address, encrypted/hashed credentials, verification status and session records.
- Child profile information supplied by the parent: nickname, theme and protected PIN. A full name is not required.
- Learning information: lesson progress, scores, Coins, streaks, badges, simulated wallet activity, allowance settings, shop choices and requests.
- League information: opt-in status, randomly generated League Name, Coins and rank. We do not publish the child’s nickname or family account details.
- Service and security information: authentication attempts, security audit records, timestamps and technical information needed to secure and operate requests.
- Subscription information: Stripe customer and subscription identifiers, chosen plan, status and renewal/cancellation dates. Full card details are handled by Stripe and are not stored by us.
- Communications and preferences: parent notification choices and messages sent to support.
3. Why we use it and our lawful bases
We use account, profile, learning and subscription information to provide the service and perform our contract with the parent. We use proportionate security records and service diagnostics for our legitimate interests in preventing misuse, protecting families and maintaining the platform. We use records where necessary to meet legal obligations, including accounting and responding to lawful requests. Optional parent email notifications are controlled by the parent and can be switched off.
4. Children’s privacy by default
FGC Money Minds is designed for parent-managed use. Children are not asked for an email address, legal name, location, contacts, photographs or school. There are no adverts, direct messages or public child profiles. League participation is off unless the parent enables it, and only a random League Name and Coins are shown. Parents can disable League participation or generate a new League Name.
5. Cookies and device storage
We use strictly necessary, secure cookies to keep parents and children signed in, remember the selected profile and protect parent controls. We also use local device storage to remember theme and sound preferences. We do not currently use advertising cookies or third-party behavioural analytics.
6. Who receives information
We use carefully selected service providers only where needed: our hosting provider to run the website and database; Stripe to process subscriptions and provide its billing portal; and Resend to send account verification and password-reset emails. These providers process information under their own contractual and legal safeguards. We may also disclose information where required by law or to protect a person from harm.
7. International processing
Some service providers may process information outside the UK. Where UK data protection law requires it, we rely on an adequacy regulation or appropriate contractual safeguards. Contact us if you would like more information about the safeguards relevant to your account.
8. How long we keep information
We keep family account and learning data while the account is open and as needed to provide the service. If a verified parent asks us to delete the account, we delete or anonymise information that is no longer needed, while retaining limited records where law, fraud prevention, dispute handling or accounting duties require it. Authentication tokens expire automatically. Payment and tax records may be retained for statutory periods.
9. Parent and child rights
Depending on the circumstances, you may have rights to access, correct, erase or restrict personal information, receive a portable copy, and object to certain uses. Parents can download a family data export from the Parent area. To exercise a right for a parent or child, email us from the parent-account address. We may need to verify identity and parental authority before acting.
You may complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. We would appreciate the opportunity to address your concern first.
10. Security and automated decisions
We use access controls, hashed credentials and PINs, encrypted HTTPS connections, signed payment webhooks, rate limits and restricted administrative access. No system can guarantee absolute security. We do not make decisions with legal or similarly significant effects about children using solely automated processing.
11. Changes and contact
We may update this notice as the service or law changes. Material changes will be communicated to parents where appropriate. Contact SINDER LIMITED at 7 Bell Yard, London, England, WC2A 2JR or fgcmoneyminds@gmail.com.