Cookies & Device Storage

Last updated: 25 October 2026

In short: The Family Pot uses only storage necessary to operate the budget, remember your choices, protect restore points, secure the optional app lock and keep signed-in users authenticated. It does not currently use advertising cookies, cross-site tracking or third-party analytics. Optional pilot measurements stay on this device unless you export and share them.

What is stored on your device

Household budget data: transactions, recurring items, categories, goals, debts, events and household settings used to provide offline access. It remains until you delete it, clear site/app data or remove the app.
Restore points and preferences: limited backup snapshots, selected dates, notification preferences and first-use prompts. They remain until replaced, removed through the app or cleared with site/app data.
App Lock & Privacy: if you enable app lock, its on/off choice and timeout remain on that device. In the installed iPhone app, the PIN is protected by Apple Keychain and Face ID or Touch ID is evaluated by iOS; The Family Pot receives only the success or failure result. In a browser, a salted one-way value derived from the PIN is stored instead of the PIN itself. App lock blocks on-screen access; it does not encrypt household data or exported files with your PIN. Lock details are not included in household cloud sync or exported budget backups.
Authentication session: essential sign-in tokens managed by our authentication provider. The installed iPhone app uses Apple Keychain; the web app uses browser storage. Account passwords are not saved by the app. They expire, refresh for security, or are removed when you sign out or clear site/app data.
Offline files: cached app files needed to open the service reliably and offline. They are replaced by newer releases or removed when you clear site/app data.

Why consent is not requested

These storage technologies provide functions you request, maintain security and keep the app available offline. There are no advertising or marketing technologies. Optional local pilot measurement has its own off-by-default choice in Pilot feedback.

Widget, history and pilot storage

The iPhone app and its widget extension share favourite category names and an optional budget figure through an Apple App Group. Amounts are hidden unless enabled. The widget stores no account credentials. Local change history keeps up to 100 changes and 50 overlapping alternatives; sign-out clears them. Optional pilot measurements retain event names, dates and entry durations for up to 29 days on this device, without financial details. Turning measurement off deletes them. Nothing is sent automatically.

Your controls

You can turn app lock off after entering the current PIN, sign out, remove the household copy from a device, delete your account, delete exported backups yourself, or clear browser/app storage using device settings. Clearing storage can remove unsynced information, so export a backup and confirm cloud syncing first.

Future changes

If optional analytics, advertising or marketing technologies are introduced, they will remain disabled until an appropriate choice is offered. This page and the Privacy Policy will be updated first.

Contact

Email support@thefamilypot.com or visit the Support page.

Automatic syncing and restore points

The device stores the last confirmed household copy so offline edits can be combined with newer changes. This history is scoped to the signed-in account and household. Before automatic replacement, the app creates a restore point. When upgrading from a release without sync history, a device without this history adopts the existing cloud household and retains a different local copy in Backup & restore.