My MoneyA kid’s bank that never phones home.

What we collect

Nothing. Tenorr LLC does not collect, receive, store, transmit, sell, or share any information about you or anyone who uses My Money.

This is not a policy choice that could quietly change in the background — it is a property of how the app is built. My Money contains no networking code and links no networking frameworks. It cannot make a network request.

What the app stores on your Mac

My Money records what it needs to be useful, entirely on your own computer:

• Each child’s name, chosen colour, and avatar (an emoji or a photo you pick)
• Balances, and the transactions behind them — amount, category, date, and any note that was typed
• Savings goals and their progress
• Earned badges, streaks, and rewards
• Settings such as allowance amount, payday, bank bonus, and the set-aside percentage
• A salted hash of any passcode or parent PIN that has been set, plus an optional hint

None of this is sent anywhere. It exists only on your Mac, and only you can read it.

Where it lives, and how to delete it

Everything is kept in one plain-text JSON file inside the app’s sandbox container:

You can open it, back it up, or inspect it at any time — Settings → Show in Finder reveals it.

To erase everything permanently, delete that folder, or drag My Money to the Trash and remove its container folder. There is no copy anywhere else, so nothing survives it. We cannot delete your data for you, because we never had it.

Passcodes, PINs, and Touch ID

When a child sets a passcode, or a grown-up sets a parent PIN, the digits themselves are never written to disk. Only a salted SHA-256 hash is stored, which cannot be reversed back into the original code.

If a passcode is forgotten, the app can verify a grown-up using your Mac’s own login — Touch ID or your account password — through Apple’s LocalAuthentication service. That check is performed entirely by macOS. My Money receives only a yes or no. It never sees, receives, or stores your fingerprint, your Mac password, or any biometric data.

Photos

A child may choose a photo from your Mac as their avatar. When they do, the app makes a squared-off copy inside its own folder so that moving or deleting the original never leaves a broken picture.

That copy stays on your Mac. It is not uploaded, analysed, or shared. The app reads only the single file chosen in the standard macOS file panel — it has no access to your photo library.

Children’s privacy

My Money is designed to be used by children, and we have built it so that the question of children’s data does not arise: no personal information is collected from anyone, of any age.

Because nothing is ever collected or transmitted, there is no personal information from a child under 13 for us to receive, store, use, disclose, or ask a parent to consent to. The app contains no advertising, no third-party analytics, no behavioural tracking, no social features, no in-app purchases, and no links out to the web.

What the app does not do

Stated plainly, so there is no ambiguity. My Money does not:

• Connect to the internet, or to any server, for any reason
• Include analytics, telemetry, crash reporting, or usage measurement
• Show advertising or track anyone across apps or websites
• Include any third-party SDK, framework, or dependency
• Require, offer, or support an account, login, or profile
• Read your contacts, location, camera, microphone, or photo library
• Sell or share personal information — there is none to sell or share

Changes to this policy

If My Money ever changes in a way that affects privacy — for example, if a future version were to offer syncing between devices — this policy will be updated and the effective date above revised before that version is released. Any such feature would be explained here in plain language first.

The policy on this page describes version 1.0, the version currently on the Mac App Store.

Contact

Questions about this policy, or about the app, are welcome:

support@tenorrapps.com
Tenorr LLC